Delete | Scripting and security

Security

ShinoLocker

(No Ratings Yet)

ShinoLocker, is ransomware simulator. The difference between ShinoLocker and real ramsomware is that it never asks ransom; you don’t have […]

PowerShell

8. Gestión de usuarios en PowerShell (nivel intermedio)

(18 votes, average: 2.78 out of 5)

Características Cuenta de usuario Listas de control de acceso Control de cuentas de usuario Ejecutar como Perfil de usuario Directivas […]

Rundll32 commands for Windows

(2 votes, average: 5.00 out of 5)

# Control Panel
RunDll32.exe shell32.dll,Control_RunDLL

# Delete Temporary Internet Files
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 8

# Delete Cookies
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 2

# Delete History
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 1

# Delete Form Data
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 16

# Delete Passwords
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 32

# Delete All
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 255

# Delete all files and settings stored by Add-ons
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 4351

# Date and Time Properties
RunDll32.exe shell32.dll,Control_RunDLL timedate.cpl

# Device Manager
RunDll32.exe devmgr.dll DeviceManager_Execute

# Folder Options – General
RunDll32.exe shell32.dll,Options_RunDLL 0

# Folder Options – Search
RunDll32.exe shell32.dll,Options_RunDLL 2

# Folder Options – View
RunDll32.exe shell32.dll,Options_RunDLL 7

# Hibernate
RunDll32.exe powrprof.dll,SetSuspendState

# Keyboard Properties
RunDll32.exe shell32.dll,Control_RunDLL main.cpl @1

# Lock Screen
RunDll32.exe user32.dll,LockWorkStation

# Mouse Button – Swap left button to function as right
Rundll32 User32.dll,SwapMouseButton

# Map Network Drive Wizard
Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL Connect

# Network Connections
RunDll32.exe shell32.dll,Control_RunDLL ncpa.cpl

# Organize IE Favourites
Rundll32.exe shdocvw.dll,DoOrganizeFavDlg

# Open With Dialog Box
Rundll32 Shell32.dll,OpenAs_RunDLL File.ext

# Plays a waveform sound
rundll32.exe user32.dll,MessageBeep

# Printer User Interface
Rundll32 Printui.dll,PrintUIEntry

# Printer Management Folder.
Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL PrintersFolder

# Power Options
RunDll32.exe Shell32.dll,Control_RunDLL powercfg.cpl

# Stored Usernames and Passwords
RunDll32.exe keymgr.dll,KRShowKeyMgr

# Safely Remove Hardware Dialog Box
Rundll32 Shell32.dll,Control_RunDLL HotPlug.dll

# Taskbar Properties
RunDll32.exe shell32.dll,Options_RunDLL 1

# User Accounts
RunDll32.exe shell32.dll,Control_RunDLL nusrmgr.cpl

# Windows Security Center
RunDll32.exe shell32.dll,Control_RunDLL wscui.cpl

# Windows Fonts Installation Folder
Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL FontsFolder

# Windows Firewall
RunDll32.exe shell32.dll,Control_RunDLL firewall.cpl

# Abrir la calculadora
rundll32 zipfldr.dll, RouteTheCall calc.exe
rundll32 advpack.dll, RegisterOCX calc.exe
rundll32 c:\Windows\System32\pcwutl.dll,LaunchApplication calc.exe

# You looking out for that "RegisterOCX" function in IEAdvpack.dll?  
rundll32.exe C:\windows\system32\IEAdvpack.dll,RegisterOCX C:\path\to\payload.dll
rundll32.exe C:\windows\system32\IEAdvpack.dll,RegisterOCX C:\path\to\payload.exe
rundll32.exe IEAdvpack.dll,RegisterOCX calc.exe

# Llame al Asistente de conexión de la unidad de red
rundll32.exe shell32.dll, SHHelpShortcuts_RunDLL Connect

# Abra un cuadro de diálogo que muestra la versión del sistema operativo Windows. También puede mostrar este cuadro de diálogo ejecutando el comando winver.exe
rundll32.exe shell32.dll, ShellAboutA

# Muestra el árbol del sistema de archivos del disco duro de la computadora
rundll32.exe IEAKENG.dll, BrowseForFileA

# Llame al cuadro de diálogo AYUDA Y SOPORTE en la página especificada. Por ejemplo, puede usar la llamada mshelp como la página html: // Windows /? Id = 33307acf-0698-41ba-b014-ea0a2eb8d0a8
rundll32.exe ndfapi.dll, NdfRunDllHelpTopic "html-page"

# Llame al diálogo ABRIR COMO ... para abrir este archivo
rundll32.exe shell32.dll, OpenAs_RunDLL "ruta y nombre de archivo"

# Muestra el cuadro de diálogo de la utilidad de red del cliente de SQL Server
rundll32.exe shell32.dll, Control_RunDLL Cliconfg.dll

# Muestra el cuadro de diálogo Eliminar dispositivo
rundll32.exe shell32.dll, Control_RunDLL Hotplug.dll

# Reescribe el contenido de este archivo
rundll32.exe admparse.dll, CheckDuplicateKeysA "ruta y nombre de archivo"

# Crea una carpeta. Si esta carpeta ya existe, se borrarán todos sus contenidos
rundll32.exe IEAKENG.dll, BToolbar_SaveA "ruta a la carpeta"

# Inicia el navegador de Internet Explorer y descarga la página http://g.msn.com/WMHFUSEN/101724
rundll32.exe appwiz.cpl, GetProgramsOnline

# Ejecuta el comando
rundll32.exe shell32.dll, ShellExec_RunDLL "comando"

# Abra la carpeta. Si no especifica una carpeta, se abrirá la carpeta de su perfil
rundll32.exe url.dll, FileProtocolHandler "directorio"

# Elimina todos los archivos de la carpeta especificada que tienen el atributo FILEATTRIBUTETAGINFORMATION
rundll32.exe WININET.dll, RunOnceUrlCache "ruta a la carpeta"

# Ejecute el archivo xml
rundll32.exe xwizards.dll, ProcessXMLFile "ruta y nombre del archivo xml"

# Presiona el botón derecho del mouse
rundll32.exe user32.dll, mouse_event

# Coloque el cursor en la esquina inferior derecha de la pantalla
rundll32.exe user32.dll, SetCursorPos

# Detener el servicio de actualización en segundo plano dfsvc.exe
rundll32.exe dfshim.dll, KillService

# Ejecuta los comandos descritos en la rama de registro HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunOnceEx (o en la rama de la partición raíz HKCU)
rundll32.exe IERNONCE.dll, RunOnceExProcess

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

# Control Panel

RunDll32.exe shell32.dll,Control_RunDLL

# Delete Temporary Internet Files

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 8

# Delete Cookies

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 2

# Delete History

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 1

# Delete Form Data

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 16

# Delete Passwords

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 32

# Delete All

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 255

# Delete all files and settings stored by Add-ons

RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess 4351

# Date and Time Properties

RunDll32.exe shell32.dll,Control_RunDLL timedate.cpl

# Device Manager

RunDll32.exe devmgr.dll DeviceManager_Execute

# Folder Options – General

RunDll32.exe shell32.dll,Options_RunDLL 0

# Folder Options – Search

RunDll32.exe shell32.dll,Options_RunDLL 2

# Folder Options – View

RunDll32.exe shell32.dll,Options_RunDLL 7

# Hibernate

RunDll32.exe powrprof.dll,SetSuspendState

# Keyboard Properties

RunDll32.exe shell32.dll,Control_RunDLL main.cpl @1

# Lock Screen

RunDll32.exe user32.dll,LockWorkStation

# Mouse Button – Swap left button to function as right

Rundll32 User32.dll,SwapMouseButton

# Map Network Drive Wizard

Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL Connect

# Network Connections

RunDll32.exe shell32.dll,Control_RunDLL ncpa.cpl

# Organize IE Favourites

Rundll32.exe shdocvw.dll,DoOrganizeFavDlg

# Open With Dialog Box

Rundll32 Shell32.dll,OpenAs_RunDLL File.ext

# Plays a waveform sound

rundll32.exe user32.dll,MessageBeep

# Printer User Interface

Rundll32 Printui.dll,PrintUIEntry

# Printer Management Folder.

Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL PrintersFolder

# Power Options

RunDll32.exe Shell32.dll,Control_RunDLL powercfg.cpl

# Stored Usernames and Passwords

RunDll32.exe keymgr.dll,KRShowKeyMgr

# Safely Remove Hardware Dialog Box

Rundll32 Shell32.dll,Control_RunDLL HotPlug.dll

# Taskbar Properties

RunDll32.exe shell32.dll,Options_RunDLL 1

# User Accounts

RunDll32.exe shell32.dll,Control_RunDLL nusrmgr.cpl

# Windows Security Center

RunDll32.exe shell32.dll,Control_RunDLL wscui.cpl

# Windows Fonts Installation Folder

Rundll32 Shell32.dll,SHHelpShortcuts_RunDLL FontsFolder

# Windows Firewall

RunDll32.exe shell32.dll,Control_RunDLL firewall.cpl

# Abrir la calculadora

rundll32 zipfldr.dll, RouteTheCall calc.exe

rundll32 advpack.dll, RegisterOCX calc.exe

rundll32 c:\Windows\System32\pcwutl.dll,LaunchApplication calc.exe

# You looking out for that "RegisterOCX" function in IEAdvpack.dll?

rundll32.exe C:\windows\system32\IEAdvpack.dll,RegisterOCX C:\path\to\payload.dll

rundll32.exe C:\windows\system32\IEAdvpack.dll,RegisterOCX C:\path\to\payload.exe

rundll32.exe IEAdvpack.dll,RegisterOCX calc.exe

# Llame al Asistente de conexión de la unidad de red

rundll32.exe shell32.dll, SHHelpShortcuts_RunDLL Connect

# Abra un cuadro de diálogo que muestra la versión del sistema operativo Windows. También puede mostrar este cuadro de diálogo ejecutando el comando winver.exe

rundll32.exe shell32.dll, ShellAboutA

# Muestra el árbol del sistema de archivos del disco duro de la computadora

rundll32.exe IEAKENG.dll, BrowseForFileA

# Llame al cuadro de diálogo AYUDA Y SOPORTE en la página especificada. Por ejemplo, puede usar la llamada mshelp como la página html: // Windows /? Id = 33307acf-0698-41ba-b014-ea0a2eb8d0a8

rundll32.exe ndfapi.dll, NdfRunDllHelpTopic "html-page"

# Llame al diálogo ABRIR COMO ... para abrir este archivo

rundll32.exe shell32.dll, OpenAs_RunDLL "ruta y nombre de archivo"

# Muestra el cuadro de diálogo de la utilidad de red del cliente de SQL Server

rundll32.exe shell32.dll, Control_RunDLL Cliconfg.dll

# Muestra el cuadro de diálogo Eliminar dispositivo

rundll32.exe shell32.dll, Control_RunDLL Hotplug.dll

# Reescribe el contenido de este archivo

rundll32.exe admparse.dll, CheckDuplicateKeysA "ruta y nombre de archivo"

# Crea una carpeta. Si esta carpeta ya existe, se borrarán todos sus contenidos

rundll32.exe IEAKENG.dll, BToolbar_SaveA "ruta a la carpeta"

# Inicia el navegador de Internet Explorer y descarga la página http://g.msn.com/WMHFUSEN/101724

rundll32.exe appwiz.cpl, GetProgramsOnline

# Ejecuta el comando

rundll32.exe shell32.dll, ShellExec_RunDLL "comando"

# Abra la carpeta. Si no especifica una carpeta, se abrirá la carpeta de su perfil

rundll32.exe url.dll, FileProtocolHandler "directorio"

# Elimina todos los archivos de la carpeta especificada que tienen el atributo FILEATTRIBUTETAGINFORMATION

rundll32.exe WININET.dll, RunOnceUrlCache "ruta a la carpeta"

# Ejecute el archivo xml

rundll32.exe xwizards.dll, ProcessXMLFile "ruta y nombre del archivo xml"

# Presiona el botón derecho del mouse

rundll32.exe user32.dll, mouse_event

# Coloque el cursor en la esquina inferior derecha de la pantalla

rundll32.exe user32.dll, SetCursorPos

# Detener el servicio de actualización en segundo plano dfsvc.exe

rundll32.exe dfshim.dll, KillService

# Ejecuta los comandos descritos en la rama de registro HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunOnceEx (o en la rama de la partición raíz HKCU)

rundll32.exe IERNONCE.dll, RunOnceExProcess

Database PowerShell

Ejercicios de MySQL: crear tablas para la base de datos librería

(1 votes, average: 5.00 out of 5)

#Realizado por Santiago Candamil

[void][System.Reflection.Assembly]::LoadWithPartialName("MySql.Data")
$Connection = New-Object MySql.Data.MySqlClient.MySqlConnection
$ConnectionString = "server=" + "localhost" + ";port=3306;uid=" + "root" + ";pwd=" +  ";database="+"libreria"
$Connection.ConnectionString = $ConnectionString
$Connection.Open()

$Query = 'create table autor(IDautor int auto_increment primary key, nombre varchar(50), apellidos varchar(60), nacionalidad varchar (30), fechanacimiento date)'
$Command = New-Object MySql.Data.MySqlClient.MySqlCommand($Query, $Connection)
$DataAdapter = New-Object MySql.Data.MySqlClient.MySqlDataAdapter($Command)
$DataSet = New-Object System.Data.DataSet
$RecordCount = $dataAdapter.Fill($dataSet, "data")
$DataSet.Tables[0]

$Query1 = 'create table editorial(nombreeditorial varchar (50) not null, CIFeditorial char (13) primary key)'
$Command = New-Object MySql.Data.MySqlClient.MySqlCommand($Query1, $Connection)
$DataAdapter = New-Object MySql.Data.MySqlClient.MySqlDataAdapter($Command)
$DataSet = New-Object System.Data.DataSet
$RecordCount = $dataAdapter.Fill($dataSet, "data")
$DataSet.Tables[0]

$Query2 = 'create table libro(ISBN char(13) primary key, titulo varchar(100), precio decimal(5,2) null, nejemplares int null default 1, añoedicion int unsigned, IDautor int(11) null, CIFeditorial char(13) not null, foreign key(IDautor) references autor(IDautor), foreign key(CIFeditorial) references editorial(CIFeditorial) on delete restrict on update cascade)'
$Command = New-Object MySql.Data.MySqlClient.MySqlCommand($Query2, $Connection)
$DataAdapter = New-Object MySql.Data.MySqlClient.MySqlDataAdapter($Command)
$DataSet = New-Object System.Data.DataSet
$RecordCount = $dataAdapter.Fill($dataSet, "data")
$DataSet.Tables[0]

$Connection.Close()

#Realizado por Santiago Candamil

[void][System.Reflection.Assembly]::LoadWithPartialName("MySql.Data")

$Connection = New-Object MySql.Data.MySqlClient.MySqlConnection

$ConnectionString = "server=" + "localhost" + ";port=3306;uid=" + "root" + ";pwd=" + ";database="+"libreria"

$Connection.ConnectionString = $ConnectionString

$Connection.Open()

$Query = 'create table autor(IDautor int auto_increment primary key, nombre varchar(50), apellidos varchar(60), nacionalidad varchar (30), fechanacimiento date)'

$Command = New-Object MySql.Data.MySqlClient.MySqlCommand($Query, $Connection)

$DataAdapter = New-Object MySql.Data.MySqlClient.MySqlDataAdapter($Command)

$DataSet = New-Object System.Data.DataSet

$RecordCount = $dataAdapter.Fill($dataSet, "data")

$DataSet.Tables[0]

$Query1 = 'create table editorial(nombreeditorial varchar (50) not null, CIFeditorial char (13) primary key)'

$Command = New-Object MySql.Data.MySqlClient.MySqlCommand($Query1, $Connection)

$DataAdapter = New-Object MySql.Data.MySqlClient.MySqlDataAdapter($Command)

$DataSet = New-Object System.Data.DataSet

$RecordCount = $dataAdapter.Fill($dataSet, "data")

$DataSet.Tables[0]

$Query2 = 'create table libro(ISBN char(13) primary key, titulo varchar(100), precio decimal(5,2) null, nejemplares int null default 1, añoedicion int unsigned, IDautor int(11) null, CIFeditorial char(13) not null, foreign key(IDautor) references autor(IDautor), foreign key(CIFeditorial) references editorial(CIFeditorial) on delete restrict on update cascade)'

$Command = New-Object MySql.Data.MySqlClient.MySqlCommand($Query2, $Connection)

$DataAdapter = New-Object MySql.Data.MySqlClient.MySqlDataAdapter($Command)

$DataSet = New-Object System.Data.DataSet

$RecordCount = $dataAdapter.Fill($dataSet, "data")

$DataSet.Tables[0]

$Connection.Close()

PowerShell Web

Métodos que se pueden utilizar en solicitudes web en PowerShell

(No Ratings Yet)

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Default
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Delete
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Get
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Head
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Merge
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Options
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Patch
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Post
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Put
Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Trace

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Default

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Delete

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Get

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Head

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Merge

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Options

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Patch

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Post

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Put

Invoke-WebRequest -Uri 'https://jesusninoc.com' -Method Trace

Security

Darik’s Boot and Nuke

(No Ratings Yet)

Delete information stored on hard disk drives (HDDs) in PC laptops, desktops or servers. More information https://dban.org/

Automation PowerShell

Simulate key press by user with SendKeys and PowerShell

(3 votes, average: 3.67 out of 5)

Introducction Each key is represented by one or more characters. To specify a single keyboard character, use the character itself. […]

Network

Eliminar una regla en el firewall de Windows

(No Ratings Yet)

netsh advfirewall firewall delete rule name="Programa TCP 87"

1	netsh advfirewall firewall delete rule name="Programa TCP 87"

Automation PowerShell

SendKeys method

(No Ratings Yet)

Write a text: ABCDEF

[System.Windows.Forms.SendKeys]::SendWait("ABCDEF")

1	[System.Windows.Forms.SendKeys]::SendWait("ABCDEF")

Ctrl-C

[System.Windows.Forms.SendKeys]::SendWait("^{c}")

1	[System.Windows.Forms.SendKeys]::SendWait("^{c}")

Ctrl-V

[System.Windows.Forms.SendKeys]::SendWait("^{v}")

1	[System.Windows.Forms.SendKeys]::SendWait("^{v}")

Ducky scripts

Ducky Script API

(2 votes, average: 4.50 out of 5)

REM Similar to the REM command in Basic and other languages, lines beginning with REM will not be processed. REM […]

Filesystem PowerShell

Creating or deleting files for each user (example)

(No Ratings Yet)

#Creating or deleting files for each user
Set-Location F:\power\
#User and operation list in a file
#Example:
#Juan,create
#Lucas,delete
ForEach($user in Get-Content .\namesandoperation.txt)
{
if($user.Split(',')[1] -match 'create')
{
Write-Host 'Create file'
$user=$user.Split(',')[0]
#Creating file for each user
#If the item you are trying to create already exists
#Override the default behavior
New-Item $user'.txt' -ItemType file -Force
}
if($user.Split(',')[1] -match 'delete')
{
Write-Host 'Delete file'
$user=$user.Split(',')[0]
#Deleting file for each user
Remove-Item $user'.txt'
}
}

#Creating or deleting files for each user

Set-Location F:\power\

#User and operation list in a file

#Example:

#Juan,create

#Lucas,delete

ForEach($user in Get-Content .\namesandoperation.txt)

{

if($user.Split(',')[1] -match 'create')

{

Write-Host 'Create file'

$user=$user.Split(',')[0]

#Creating file for each user

#If the item you are trying to create already exists

#Override the default behavior

New-Item $user'.txt' -ItemType file -Force

}

if($user.Split(',')[1] -match 'delete')

{

Write-Host 'Delete file'

$user=$user.Split(',')[0]

#Deleting file for each user

Remove-Item $user'.txt'

}

Filesystem PowerShell

Deleting a file or folder (or other type of object)

(No Ratings Yet)

The Remove-Item cmdlet does exactly what the name implies: it enables you to get rid of things once and for […]

PowerShell Servers Web

New features in Windows PowerShell 4.0

(No Ratings Yet)

Windows PowerShell 4.0 is backward-compatible. Cmdlets, providers, modules, snap-ins, scripts, functions, and profiles that were designed for Windows PowerShell 3.0 […]

Operating Systems

Tareas de administración II (Sistemas operativos monopuesto)

(No Ratings Yet)

Índice Introducción a la gestión de usuarios Usuarios Operaciones Grupos Operaciones

PowerShell Processes

Delete a process by name

(No Ratings Yet)

[string]$n="notepad"
Start-Process $n

start-sleep -Milliseconds 555

$proces=Get-Process
foreach ($g in $proces)
{
    [string]$h=""
    $h=$g.ProcessName

    if ($h.contains($n))
    {
        Stop-Process -name $h
    }
}

[string]$n="notepad"

Start-Process $n

start-sleep -Milliseconds 555

$proces=Get-Process

foreach ($g in $proces)

{

[string]$h=""

$h=$g.ProcessName

if ($h.contains($n))

{

Stop-Process -name $h

}

Operating Systems

Sistemas operativos monopuesto

(3 votes, average: 3.67 out of 5)

Índice Introducción a los sistemas informáticos Introducción a los sistemas operativos Instalación de sistemas operativos Configuración de máquinas virtuales Virtualización […]