Skip to content

Instantly share code, notes, and snippets.

View maikroservice's full-sized avatar
🐢
The turtle wins the race.

Maik Ro maikroservice

🐢
The turtle wins the race.
View GitHub Profile
@maikroservice
maikroservice / docker-compose.yml
Created November 3, 2023 21:25
keycloak persistent docker image
version: "3.7"
volumes:
keycloak:
services:
keycloak:
image: quay.io/keycloak/keycloak:22.0.5
ports:
@maikroservice
maikroservice / esc1.ps1
Created November 2, 2023 14:44 — forked from b4cktr4ck2/esc1.ps1
PowerShell script to exploit ESC1/retrieve your own NTLM password hash.
#Thank you @NotMedic for troubleshooting/validating stuff!
$password = Read-Host -Prompt "Enter Password"
#^^ Feel free to hardcode this for running in a beacon/not retyping it all the time!
$server = "admin" #This will just decide the name of the cert request files that are created. I didn't want to change the var name so it's server for now.
$CERTPATH = "C:\Users\lowpriv\Desktop\" #Where do you want the cert requests to be stored?
$CAFQDN = "dc01.alexlab.local" #hostname of underlying CA box.
$CASERVER = "alexlab-dc01-ca" #CA name.
$CA = $CAFQDN + "\" + $CASERVER
@maikroservice
maikroservice / glutton_install.sh
Last active January 28, 2023 14:53
install script for glutton Honeypot on DigitalOcean
#!/bin/bash
# install necessary dependencies
sudo apt-get install -y libnetfilter-queue-dev libpcap-dev iptables lsof make gcc jq
# download specific go version needed for glutton
wget https://dl.google.com/go/go1.17.7.linux-amd64.tar.gz
tar xvzf go1.17.7.linux-amd64.tar.gz
mv go /usr/local
@maikroservice
maikroservice / docm.yar
Created December 1, 2022 01:03
Yara Rules to detect Metasploit docm Macro
import "hash"
rule metasploit_office_word_macro_vbaproject_bin_zipped {
meta:
author = "DidierStevens"
date = "2017/08/20"
description = "Source code put in public domain by Didier Stevens, no Copyright https://DidierStevens.com, Use at your own risk! Detect .docm files created with Metasploit's office_word_macro exploit"
strings:
@maikroservice
maikroservice / recon.sh
Created October 25, 2022 22:14
automated recon script for bug bounty | built live on twitter
#!/bin/bash
Help()
{
# Display Help
echo "Automated recon script for Bug Bounty - author @maikroservice"
echo
echo "Syntax: recon.sh [-h|v|V] <targetdomain>"
echo "options:"
echo "h Print this Help."
@maikroservice
maikroservice / small_rockyou.sh
Last active July 17, 2022 07:03
create_small_rockyou
#!/bin/bash
ROCKYOU_PATH=$(find / -name rockyou.txt 2>/dev/null)
if [ -z "$ROCKYOU_PATH" ]
then
echo "rockyou.txt not found"
exit
else
mkdir -p /usr/share/wordlists/rockyou
@maikroservice
maikroservice / install_scripts.sh
Last active July 18, 2022 20:03
setup UTM-kali / hackuntu
#!/bin/bash
# install the necessary tools for UTM to support copy & paste
sudo apt install -y spice-vdagent \
spice-webdavd
# install gnupg for the kali repos + standard tooling
sudo apt install -y gnupg \
wget \
curl \
@maikroservice
maikroservice / install_openvpn_2_5_1.sh
Last active July 18, 2022 16:06
downgrade openvpn 2.6 to work with HTB
#!/bin/bash
sudo apt remove -y openvpn
sudo apt autoremove -y
sudo sh -c 'echo "deb http://ftp.de.debian.org/debian bullseye main" > /etc/apt/sources.list.d/debian-aptrepo.list'
sudo apt update
sudo apt install -y openvpn=2.5.1-3
sudo apt-mark hold openvpn
@maikroservice
maikroservice / .p10k.zsh
Last active July 4, 2022 11:35
.p10k.zsh
# Generated by Powerlevel10k configuration wizard on 2022-07-02 at 11:45 CEST.
# Based on romkatv/powerlevel10k/config/p10k-rainbow.zsh, checksum 24045.
# Wizard options: nerdfont-complete + powerline, small icons, rainbow, unicode,
# 24h time, angled separators, sharp heads, flat tails, 1 line, compact, many icons,
# concise, instant_prompt=verbose.
# Type `p10k configure` to generate another config.
#
# Config for Powerlevel10k with powerline prompt style with colorful background.
# Type `p10k configure` to generate your own config based on it.
#
@maikroservice
maikroservice / .zshrc
Last active July 4, 2022 12:21
zshrc kali
# Enable Powerlevel10k instant prompt. Should stay close to the top of ~/.zshrc.
# Initialization code that may require console input (password prompts, [y/n]
# confirmations, etc.) must go above this block; everything else may go below.
if [[ -r "${XDG_CACHE_HOME:-$HOME/.cache}/p10k-instant-prompt-${(%):-%n}.zsh" ]]; then
source "${XDG_CACHE_HOME:-$HOME/.cache}/p10k-instant-prompt-${(%):-%n}.zsh"
fi
# If you come from bash you might have to change your $PATH.
# export PATH=$HOME/bin:/usr/local/bin:$PATH