koushui

koushui / cobaltstrike_sa.txt

Created November 1, 2022 19:10 — forked from HarmJ0y/cobaltstrike_sa.txt

Cobalt Strike Situational Awareness Commands

	Windows version:
	reg query x64 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion

	Users who have authed to the system:
	ls C:\Users\

	System env variables:
	reg query x64 HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment

	Saved outbound RDP connections:

koushui / PowerView-3.0-tricks.ps1

Created November 1, 2022 19:07 — forked from HarmJ0y/PowerView-3.0-tricks.ps1

PowerView-3.0 tips and tricks

	# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
	# tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

	# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
	# https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

	# New function naming schema:
	# Verbs:
	# Get : retrieve full raw data sets
	# Find : ‘find’ specific data entries in a data set

koushui / kerberos_attacks_cheatsheet.md

Created August 1, 2021 18:27 — forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md

A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

koushui / gist:334f39e1fe2f6c931721ed985727689f

Created January 5, 2021 18:13 — forked from LeoMarX/gist:ef1fca2c67f04b15fe6a376fa9683232

常用计算机词汇表.md

英文	译法 1	译法 2	译法 3
a block of pointers	一块指针	一组指针
abbreviation	缩略语

koushui / sqlmitm.py

Created April 24, 2018 20:47 — forked from Matool13/sqlmitm.py