Discover gists

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

Setup Postgresql

run postgresql with systemctl

Install postgres

latest

sudo pacman -S postgresql

specific version

find version & build from source

Como subir un proyecto local a github.

desde la web de github

Creamos un nuevo repositorio en https://github.com. Le damos nombre, descripción, seleccionamos si va a ser un proyecto publico o privado si es el caso, y dejamos el check de crear README sin marcar. Le damos a crear repositorio y con esto ya tenemos el repositorio donde alojaremos nuestro proyecto.

desde la terminal del equipo donde esta el proyecto que queremos subir a github

Nos vamos a la carpeta del proyecto y ejecutamos estos comandos.

git init

git add .

使用

先安装依赖

python -m pip install pmccc==0.4.7

根据注释里的说明做出更改

运行 server.py 与 client.py

	#Coded by Matt Nelson (@enigma0x3)
	<#
	.SYNOPSIS
	Standalone Powershell script that will generate a malicious Microsoft Office document with a specified payload and persistence method

	.DESCRIPTION
	This script will generate malicious Microsoft Excel Documents that contain VBA macros. This script will prompt you for your attacking IP
	(the one you will receive your shell at), the port you want your shell at, and the name of the document. From there, the script will then
	display a menu of different attacks, all with different persistence methods. Once an attack is chosen, it will then prompt you for your payload type
	(Only HTTP and HTTPS are supported).