01/03/2017 | Scripting and security

The best penetration testers know that with the right tools and a few seconds of physical access, all bets are off. It opens up attack surfaces that weren’t possible before in one single device. Penetration testing attacks and IT automation tasks are all delivered in seconds with the Bash Bunny. By emulating combinations of trusted USB devices – like gigabit Ethernet, serial, flash storage and keyboards – computers are tricked into divulging data, exfiltrating documents, installing backdoors and many more exploits. Exploiting local network attack vectors, the Bash Bunny emulates specialized Ethernet adapters. Each attack, or payload, is written in […]

PHP PowerShell

Ejecutar código PHP desde PowerShell

01/03/201706/01/2018

cd C:\xampp\php

.\php.exe -r "echo 'Hola Mundo';"

'<?php echo ''Hola Mundo''; ?>' | .\php.exe
'<?php echo "Hola Mundo"; ?>' | .\php.exe
"<?php echo 'Hola Mundo'; ?>" | .\php.exe

cd C:\xampp\php

.\php.exe -r "echo 'Hola Mundo';"

'<?php echo ''Hola Mundo''; ?>' | .\php.exe

'<?php echo "Hola Mundo"; ?>' | .\php.exe

"<?php echo 'Hola Mundo'; ?>" | .\php.exe

PowerShell

Ejercicios de PowerShell: crear el juego de piedra, papel o tijera

01/03/201703/03/2017

enum PPT{
    Piedra = 1
    Papel = 2 
    Tijera = 3
}
enum Combinacion
{
    EmpatePiedra = 11
    EmpatePapel = 22
    EmpateTijera = 33
    GanaPiedra = 13
    GanaPapel = 21
    GanaTijera = 32
    PierdePiedra = 12
    PierdePapel = 23
    PierdeTijera = 31
    
}
$jugador1=random(1..3);[PPT]$jugador1
$jugador2=random(1..3);[PPT]$jugador2
[Combinacion]([String]$jugador1+[String]$jugador2)
[Combinacion]([String]$jugador2+[String]$jugador1)

enum PPT{

Piedra = 1

Papel = 2

Tijera = 3

}

enum Combinacion

{

EmpatePiedra = 11

EmpatePapel = 22

EmpateTijera = 33

GanaPiedra = 13

GanaPapel = 21

GanaTijera = 32

PierdePiedra = 12

PierdePapel = 23

PierdeTijera = 31

}

$jugador1=random(1..3);[PPT]$jugador1

$jugador2=random(1..3);[PPT]$jugador2

[Combinacion]([String]$jugador1+[String]$jugador2)

[Combinacion]([String]$jugador2+[String]$jugador1)

PowerShell Schedule tasks

Tareas programadas en PowerShell

01/03/201702/03/2017

#Crear una tarea programada
#Crear una acción
$action=New-ScheduledTaskAction -Execute 'notepad.exe'
#Crear el activador
$trigger=New-ScheduledTaskTrigger -Daily -At 16:25pm
#Registrar la tarea programada
Register-ScheduledTask -Action $action -Trigger $trigger -TaskName "Tarea Programada" -Description "Abrir Notepad"

#Deshabilitar una tarea programada
Disable-ScheduledTask -TaskName "Tarea Programada"

#Activar una tarea programada
Enable-ScheduledTask -TaskName "Tarea Programada"

#Anular el registro de una tarea programada
Unregister-ScheduledTask -TaskName "Tarea Programada"

#Ver todas las tareas programadas
Get-ScheduledTask

#Crear una tarea programada

#Crear una acción

$action=New-ScheduledTaskAction -Execute 'notepad.exe'

#Crear el activador

$trigger=New-ScheduledTaskTrigger -Daily -At 16:25pm

#Registrar la tarea programada

#Deshabilitar una tarea programada

Disable-ScheduledTask -TaskName "Tarea Programada"

#Activar una tarea programada

Enable-ScheduledTask -TaskName "Tarea Programada"

#Anular el registro de una tarea programada

Unregister-ScheduledTask -TaskName "Tarea Programada"

#Ver todas las tareas programadas

Get-ScheduledTask

Network PowerShell Servers Web

Crear un servidor web con PowerShell

01/03/201702/06/2018

Servidor web

$routes = @{
    "/" = { return '<html><body>Servidor web funcionando</body></html>' }
}

$url = 'http://localhost:8080/'
$listener = New-Object System.Net.HttpListener
$listener.Prefixes.Add($url)
$listener.Start()

Write-Host "Funcionando $url..."

while ($listener.IsListening)
{
    $context = $listener.GetContext()
    $requestUrl = $context.Request.Url
    $con
    $response = $context.Response

    Write-Host ''
    Write-Host "Petición: $requestUrl"

    $localPath = $requestUrl.LocalPath
    $route = $routes.Get_Item($requestUrl.LocalPath)

    if ($route -eq $null)
    {
        $response.StatusCode = 404
    }
    else
    {
        $content = & $route
        $buffer = [System.Text.Encoding]::UTF8.GetBytes($content)
        $response.ContentLength64 = $buffer.Length
        $response.OutputStream.Write($buffer, 0, $buffer.Length)
    }
    
    $response.Close()

    $responseStatus = $response.StatusCode
    Write-Host "Respuesta: $responseStatus"
}

$routes = @{

"/" = { return '<html><body>Servidor web funcionando</body></html>' }

}

$url = 'http://localhost:8080/'

$listener = New-Object System.Net.HttpListener

$listener.Prefixes.Add($url)

$listener.Start()

Write-Host "Funcionando $url..."

while ($listener.IsListening)

{

$context = $listener.GetContext()

$requestUrl = $context.Request.Url

$con

$response = $context.Response

Write-Host ''

Write-Host "Petición: $requestUrl"

$localPath = $requestUrl.LocalPath

$route = $routes.Get_Item($requestUrl.LocalPath)

if ($route -eq $null)

{

$response.StatusCode = 404

}

else

{

$content = & $route

$buffer = [System.Text.Encoding]::UTF8.GetBytes($content)

$response.ContentLength64 = $buffer.Length

$response.OutputStream.Write($buffer, 0, $buffer.Length)

}

$response.Close()

$responseStatus = $response.StatusCode

Write-Host "Respuesta: $responseStatus"

}

Petición desde PowerShell

iwr https://localhost:8080

1	iwr https://localhost:8080

Fuente original: https://gist.github.com/wagnerandrade/5424431

Scripts

Recopilación de Scripts día 01/03/2017

01/03/2017