sdushantha

sdushantha

Trending Gists

Did it work? Let me know when it works!

sdushantha

Discover Gists

Did it work?

sdushantha

<title>]1337;RequestAttention=fireworksTHIS IS FINE🔥!</title>
</title>
<meta name="Injection" content="
cE
]1337;ClearScrollback

cllcccccc:::::::ccll:,lOKKKKKKKKKKKKKKKKXKKKKKKKXKKKKKXKKKKKKKKKKKKKKKKK0c,cc:;:
ccccc::::::cllllllcclONMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMKc:lccc
:cccc::ccclllcccl::xNMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMO;;c::
llllllllccccccccc,oNMMMWKOOKNWNWWWN0KNMMMMMWNNXKNMMMMWXKXNMWWWWWNKNMMMMMMMXc'::;

sdushantha

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

sdushantha

#!/usr/bin/python3
# 
# POC of RCE on Fuel CMS v1.4.1 (CVE-2018-16763)
#
# Original author: Padsala Trushal
# Modified by: Siddharth Dushantha
#
# Modifications that've been made:
#  - Cleaned output so that the word 'system' did not
#    appear in every output

sdushantha

#!/bin/bash
#
# Code used to fetch all of Wordle's words
#

# Save JavaScript code containing the list of words into wordle.js 
curl https://www.nytimes.com/games-assets/v2/wordle.b53d5fe794f17d174ac9.js > wordle.js

# Get the array containing the list of words and remove array specific characters
cat wordle.js| grep -oE 'va=\[[^]]*]' | sed -e "s/va=\[//g" -e "s/\"//g" -e "s/,/\n/g" -e "s/]//g" > wordle-full-list.txt

sdushantha

|Url |Contact |Expires |Encryption |Acknowledgments |Languages |Policy |Hiring | |------------------------------------------------------------|-----------------------------------------------|-------------------------------|-----------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------

sdushantha

import requests
import jwt
import argparse
import sys


def get_exernal_object_id(target, token):
    headers = {
        'Host': 'teams.microsoft.com',
        'Authorization': f"Bearer {token}",

sdushantha

hello