Skip to content

Instantly share code, notes, and snippets.

View parsiya's full-sized avatar

Parsia "CryptoGangsta" Hakimian parsiya

View GitHub Profile
@parsiya
parsiya / adventures-jsonschema-to-go.md
Last active November 1, 2022 08:16
Adventures in Converting Semgrep Output JSON Schema to Go Structs

title: "SANS Holiday Hack Challenge 2018 Solutions" date: 2019-01-15T19:33:21-05:00 draft: false toc: true comments: true twitterImage: 01-bloodhound.png categories:

  • Writeup
  • Crypto
@parsiya
parsiya / no-arguments-rce.cs
Last active March 22, 2021 01:25
Pass the input as the first argument. You can pass schemes (`ms-calculator://whatever`) or files (`C:/windows/system32/calc.exe).
using System;
using System.Diagnostics;
using System.Runtime.InteropServices;
namespace runme
{
class Program
{
static void Main(string[] args)
{
@parsiya
parsiya / install.md
Last active April 3, 2021 07:32
What to install in a new Windows VM
  • Win 10 debloater
  • Choco
    • notepad++ + shortcut
    • dnspy + shortcut
    • hxd + shortcut
    • 7zip + remove extra context menu items like hashes
  • Sysinternals
    • Shortcut to procmon on desktop
  • Burp
  • Extensions
@parsiya
parsiya / burp-summary-report.xsl
Created November 4, 2019 23:49 — forked from pajswigger/burp-summary-report.xsl
XSLT file to generate a summary HTML report from a Burp XML report
<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:output method="html" indent="no"/>
<xsl:key name="issue-by-type" match="issue" use="type" />
<xsl:template match="/issues">
<html>
<head>
<title>Burp Scanner Report</title>
@parsiya
parsiya / 1 - pythons_sinister_secrets.md
Created December 30, 2018 06:05 — forked from MarkBaggett/1 - pythons_sinister_secrets.md
Come To The Darkside - Pythons Sinister Secrets

This is a collection of code snippets used in my Pen Test Hackfest 2018 Presentation

# notepad does not have an entry
$ Test-Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe"
False
# chrome does
$ Test-Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe"
True
from base64 import b64encode
from binascii import unhexlify
print b64encode(unhexlify("0a0b0c0d"))
CgsMDQ==