3gstudent

A collection of pentest and development tips

C/C++ code examples of my blog.

Python codes of my blog.

Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.

Remove individual lines from Windows XML Event Log (EVTX) files

Use powershell to list the RDP Connections History of logged-in users or all users

Asynchronous Procedure Calls

Learn from Casey Smith @subTee

Use to build an anonymous SMB file server.

Use python to perform Kerberos pre-auth bruteforcing

C Sharp codes of my blog.

Use CLR to inject all the .NET apps

Use to check the valid account of the Remote Desktop Protocol(Support plaintext and ntlmhash)

Process Doppelgänging

old blog

Automatically scan the inner network to detect whether they are vulnerable.

Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.

powershell codes of my blog.

Use NT Native Registry API to create a registry that normal user can not query.

Use subProcessTag Value From TEB to identify Event Log Threads

Used to build an XSS platform on the command line.

Blog

Use powershell to test Office-based persistence methods

Create a hidden account

Use to perform Microsoft exchange account brute-force.

From 32-bit process to 64-bit process

Support x86 and x64

Use bitsadmin to maintain persistence and bypass Autoruns

No inline asm,support x86/x64

Powershell to CodeExecution and ProcessInjection

2 ways of Password Filter DLL to record the plaintext password

just test

Powershell to copy ntds.dit

use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)

From Windows SDK

Penetration test

Use Waitfor.exe to maintain persistence

Auto install WinPcap on Windows(command line)

My exercise of using Exchange Web Service(EWS)

Go code examples of my blog.