Martin T. hartl3y94

Dutch Government Bug Bounty Scope

The National Cyber Security Centre (NCSC) contributes to jointly enhancing the resilience of the Dutch society in the digital domain and, in doing so, realizes a safe, open and stable information society by providing insight and offering a perspective for action. Therefore it is essential that the ICT systems of the NCSC are safe. The NCSC strives towards providing a high level of security for its system. However, it can occur that one of these systems has a vulnerability.

For more information about reporting the bugs go to https://english.ncsc.nl/contact/reporting-a-vulnerability-cvd

Source https://gist.github.com/random-robbie/f985ad14fede2c04ac82dd89653f52ad
https://www.communicatierijk.nl/vakkennis/r/rijkswebsites/verplichte-richtlijnen/websiteregister-rijksoverheid

Google dork cheatsheet

Search filters

Filter	Description	Example
allintext	Searches for occurrences of all the keywords given.	`allintext:"keyword"`
intext	Searches for the occurrences of keywords all at once or one at a time.	`intext:"keyword"`
inurl	Searches for a URL matching one of the keywords.	`inurl:"keyword"`
allinurl	Searches for a URL matching all the keywords in the query.	`allinurl:"keyword"`
intitle	Searches for occurrences of keywords in title all or one.	`intitle:"keyword"`

We did it! We broke gist.github.com ;) So head over to the new home! Thank you all!
2021.10.20: https://github.com/AveYo/MediaCreationTool.bat now open for interaction

Not just an Universal MediaCreationTool wrapper script with ingenious support for business editions,

A powerful yet simple windows 10 / 11 deployment automation tool as well!

discuss on MDL

	#!/usr/bin/env python
	# -- coding: utf-8 --
	# Thomas Roccia \| IconDhash.py
	# pip3 install lief
	# pip3 install pillow
	# resource: https://www.hackerfactor.com/blog/?/archives/529-Kind-of-Like-That.html

	import lief
	import os
	import argparse

	#!/bin/bash
	#
	# By: Brady Shea - 10FEB2020 - Last update 04DEC2023
	#
	# Usage (ip4 only):
	# geoip2lookup IP_ADDRESS
	#
	# Install GeoIP Tool and Updater
	#
	# sudo add-apt-repository ppa:maxmind/ppa

	@echo off& title RunAsTI - lean and mean snippet by AveYo, 2018-2022
	goto :nfo
	[FEATURES]
	- innovative HKCU load, no need for reg load / unload ping-pong; programs get the user profile
	- sets ownership privileges, high priority, and explorer support; get System if TI unavailable
	- accepts special characters in paths for which default run as administrator fails
	- adds Send to - RunAsTI right-click menu entry to launch files and folders as TI via explorer
	[USAGE]
	- First copy-paste RunAsTI snippet after .bat script content
	- Then call it anywhere to launch programs with arguments as TI

	0.0.0.0 feedback.microsoft-hohm.com
	0.0.0.0 search.msn.com
	0.0.0.0 a.ads1.msn.com
	0.0.0.0 a.ads2.msn.com
	0.0.0.0 a.rad.msn.com
	0.0.0.0 ac3.msn.com
	0.0.0.0 ads.msn.com
	0.0.0.0 ads1.msn.com
	0.0.0.0 b.ads1.msn.com
	0.0.0.0 b.rad.msn.com

	from xml.etree import ElementTree
	import sys

	first=True
	eventrecordid=None
	lasttime=None
	latesttime=None

	if (len(sys.argv) != 2):
	print("Read from the dump_evtx XML output, identifying gaps in EventRecordID values")

	;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
	;;;
	;;; Copyright (C), zznop, brandonkmiller@protonmail.com
	;;;
	;;; This software may be modified and distributed under the terms
	;;; of the MIT license. See the LICENSE file for details.
	;;;
	;;; DESCRIPTION
	;;;
	;;; This PoC shellcode is meant to be compiled as a blob and prepended to a ELF

	_ _ _ ____ _ _
	\| \| \| \| __ _ ___\| \| __ \| __ ) __ _ ___\| \| _\| \|
	\| \|_\| \|/ _` \|/ __\| \|/ / \| _ \ / _` \|/ __\| \|/ / \|
	\| _ \| (_\| \| (__\| < \| \|_) \| (_\| \| (__\| <\|_\|
	\|_\| \|_\|\__,_\|\___\|_\|\_\ \|____/ \__,_\|\___\|_\|\_(_)

	A DIY Guide