Start Chrome with the following flags:
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
--remote-debugging-port=9222
--remote-debugging-address=0.0.0.0
| import os | |
| import argparse | |
| import hashlib | |
| import json | |
| from itertools import islice | |
| def file_to_hex(filename): | |
| """Convert file content to a hex string.""" | |
| with open(filename, 'rb') as file: | |
| content = file.read() |
| import os | |
| import argparse | |
| import hashlib | |
| def file_to_hex(filename): | |
| """Convert file content to a hex string.""" | |
| with open(filename, 'rb') as file: | |
| content = file.read() | |
| return content.hex(), content |
| # os_type application description value | |
| 1 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program Files\Autodesk\ | |
| 2 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program Files\common Files\Autodesk\ | |
| 3 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program Files (x86)\Autodesk\ | |
| 4 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program Files (x86)\common Files\Autodesk\ | |
| 5 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program File*\Common Files\Autodesk Shared\ | |
| 6 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\Program File*\AutoCAD*\ | |
| 7 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\ProgramData\Autodesk\ | |
| 8 windows AutoCAD Interoperability Limitations with AutoCAD \Device\HarddiskVolume*\ProgramData\Flexnet\ | |
| 9 windows AutoCAD Interoperability Limitations with AutoCAD \Device |
| // TcbElevation - Authors: @splinter_code and @decoder_it | |
| #define SECURITY_WIN32 | |
| #include <windows.h> | |
| #include <sspi.h> | |
| #include <stdio.h> | |
| #pragma comment(lib, "Secur32.lib") | |
| void EnableTcbPrivilege(BOOL enforceCheck); |
| //original runner by @Arno0x: https://github.com/Arno0x/CSharpScripts/blob/master/shellcodeLauncher.cs | |
| using System; | |
| using System.Runtime.InteropServices; | |
| using System.Reflection; | |
| using System.Reflection.Emit; | |
| namespace ShellcodeLoader | |
| { | |
| class Program |
| ## Find dangerous API permissions as a user | |
| $AzureTenantID = '<Your tenant ID>' | |
| $AccountName = '<Username>@<Domain.com>' | |
| $Password = ConvertTo-SecureString '<Your password>' -AsPlainText -Force | |
| $Credential = New-Object System.Management.Automation.PSCredential($AccountName, $Password) | |
| Connect-AzAccount -Credential $Credential -TenantID $AzureTenantID | |
| function Get-AzureGraphToken | |
| { |
| #/bin/bash | |
| session=ntlmscript | |
| if [ -z "$1" ]; then | |
| echo "No hashfile supplied" | |
| exit | |
| fi | |
| hashfile=$1 | |
| if [ ! -f $hashfile ]; then | |
| echo "[ERROR] File not exists." |
| TEAM | POINTS | LAST SUBMIT | |
| ----------------------------------+--------+------------------- | |
| <CA> HubrETS Hackin'' | 155 | 2020/05/17 14:58 | |
| <CA> Les Gentils Pirates | 133 | 2020/05/17 14:42 | |
| <CA> CLICKESTI | 129 | 2020/05/17 14:07 | |
| <US> Skiddies as a Service | 125 | 2020/05/17 14:44 | |
| <CA> cold_root | 116 | 2020/05/17 14:38 | |
| <CA> Panique Au Village | 94 | 2020/05/17 14:47 | |
| <CA> Shopify | 84 | 2020/05/17 14:47 | |
| <CA> segfaults | 77 | 2020/05/17 14:55 |
| #include <Windows.h> | |
| #include <intrin.h> | |
| #include <string> | |
| #include <TlHelp32.h> | |
| #include <psapi.h> | |
| DWORD WINAPI Thread(LPVOID lpParam) { | |
| // Insert evil stuff | |
| ExitProcess(0); |