tokyoneon
{
"type": "http://schema.org/Person",
"name": "",
"description": "",
"followers": "",
"url": "",
"location": "",
"languages": [
"PowerShell",
"PowerShell",
"Shell"
],
"users": [
{
"name": "@tokyoneon",
"avatar": "https://avatars.githubusercontent.com/u/33106572?s=64&v=4"
},
{
"name": "@tokyoneon",
"avatar": "https://avatars.githubusercontent.com/u/33106572?s=64&v=4"
},
{
"name": "View tokyoneon's full-sized avatar",
"avatar": "https://avatars.githubusercontent.com/u/33106572?v=4"
}
],
"topics": []
}
{
"avatar": "https://avatars.githubusercontent.com/u/33106572?v=4",
"name": "tokyoneon",
"username": "tokyoneon",
"description": "",
"location": "",
"vcard": "<svg aria-hidden=\"true\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-link\">\n <path d=\"m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z\"></path>\n</svg>\n <a rel=\"nofollow me\" class=\"Link--primary wb-break-all\" href=\"https://tokyoneon.github.io\">tokyoneon.github.io</a>\n",
"vcardDetails": [
{
"name": "tokyoneon.github.io",
"url": "https://tokyoneon.github.io"
},
{
"name": "@tokyoneon_",
"url": "https://twitter.com/tokyoneon_"
}
],
"orgs": [],
"sponsors": [],
"pinned": [
{
"name": "CredPhish",
"description": "CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.",
"language": ""
},
{
"name": "exfil LSASS dump via Microsoft.Power...",
"description": "",
"language": ""
},
{
"name": "Chimera",
"description": "Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.",
"language": ""
},
{
"name": "Armor",
"description": "Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.",
"language": ""
},
{
"name": "MyCC - turn MyBB forums into C&C ser...",
"description": "",
"language": ""
},
{
"name": "Sudo function for stealing Linux pas...",
"description": "",
"language": ""
}
],
"pinnedHtml": [
"\n <div class=\"d-flex width-full position-relative\">\n <div class=\"flex-1\">\n <svg aria-hidden=\"true\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-repo mr-1 tmp-mr-1 color-fg-muted\">\n <path d=\"M2 2.5A2.5 2.5 0 0 1 4.5 0h8.75a.75.75 0 0 1 .75.75v12.5a.75.75 0 0 1-.75.75h-2.5a.75.75 0 0 1 0-1.5h1.75v-2h-8a1 1 0 0 0-.714 1.7.75.75 0 1 1-1.072 1.05A2.495 2.495 0 0 1 2 11.5Zm10.5-1h-8a1 1 0 0 0-1 1v6.708A2.486 2.486 0 0 1 4.5 9h8ZM5 12.25a.25.25 0 0 1 .25-.25h3.5a.25.25 0 0 1 .25.25v3.25a.25.25 0 0 1-.4.2l-1.45-1.087a.249.249 0 0 0-.3 0L5.4 15.7a.25.25 0 0 1-.4-.2Z\"></path>\n</svg>\n <span data-view-component=\"true\" class=\"position-relative\"><a data-hydro-click=\"{"event_type":"user_profile.click","payload":{"profile_user_id":33106572,"target":"PINNED_REPO","user_id":null,"originating_url":"https://github.com/tokyoneon"}}\" data-hydro-click-hmac=\"f1ffe56eaaa0c9a457335affd0b2974ba948ae2a3f9c315d24b92b89347a57bb\" id=\"389844020\" href=\"/tokyoneon/CredPhish\" data-view-component=\"true\" class=\"Link mr-1 tmp-mr-1 text-bold wb-break-word\"><span class=\"repo\">CredPhish</span></a> <tool-tip data-direction=\"n\" id=\"tooltip-9bec16fd-d329-401b-aa3b-021711f27b02\" for=\"389844020\" popover=\"manual\" data-type=\"label\" data-view-component=\"true\" class=\"sr-only position-absolute\">CredPhish</tool-tip></span> <span></span><span class=\"Label Label--secondary v-align-middle mt-1 no-wrap v-align-baseline Label--inline\">Public</span>\n </div>\n </div>\n\n\n <p class=\"pinned-item-desc color-fg-muted text-small mt-2 mb-0\">\n CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.\n </p>\n\n <p class=\"mb-0 mt-2 f6 color-fg-muted\">\n <span class=\"tmp-mr-3 d-inline-block\">\n <span class=\"repo-language-color\" style=\"background-color: #012456\"></span>\n <span itemprop=\"programmingLanguage\">PowerShell</span>\n</span>\n\n <a href=\"/tokyoneon/CredPhish/stargazers\" class=\"pinned-item-meta Link--muted\">\n <svg aria-label=\"stars\" role=\"img\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-star\">\n <path d=\"M8 .25a.75.75 0 0 1 .673.418l1.882 3.815 4.21.612a.75.75 0 0 1 .416 1.279l-3.046 2.97.719 4.192a.751.751 0 0 1-1.088.791L8 12.347l-3.766 1.98a.75.75 0 0 1-1.088-.79l.72-4.194L.818 6.374a.75.75 0 0 1 .416-1.28l4.21-.611L7.327.668A.75.75 0 0 1 8 .25Zm0 2.445L6.615 5.5a.75.75 0 0 1-.564.41l-3.097.45 2.24 2.184a.75.75 0 0 1 .216.664l-.528 3.084 2.769-1.456a.75.75 0 0 1 .698 0l2.77 1.456-.53-3.084a.75.75 0 0 1 .216-.664l2.24-2.183-3.096-.45a.75.75 0 0 1-.564-.41L8 2.694Z\"></path>\n</svg>\n 295\n </a>\n <a href=\"/tokyoneon/CredPhish/forks\" class=\"pinned-item-meta Link--muted\">\n <svg aria-label=\"forks\" role=\"img\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-repo-forked\">\n <path d=\"M5 5.372v.878c0 .414.336.75.75.75h4.5a.75.75 0 0 0 .75-.75v-.878a2.25 2.25 0 1 1 1.5 0v.878a2.25 2.25 0 0 1-2.25 2.25h-1.5v2.128a2.251 2.251 0 1 1-1.5 0V8.5h-1.5A2.25 2.25 0 0 1 3.5 6.25v-.878a2.25 2.25 0 1 1 1.5 0ZM5 3.25a.75.75 0 1 0-1.5 0 .75.75 0 0 0 1.5 0Zm6.75.75a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5Zm-3 8.75a.75.75 0 1 0-1.5 0 .75.75 0 0 0 1.5 0Z\"></path>\n</svg>\n 43\n </a>\n </p>\n ",
"\n <div class=\"d-flex width-full flex-items-center tmp-pb-3\">\n <svg aria-hidden=\"true\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-code-square mr-2 tmp-mr-2 color-fg-muted\">\n <path d=\"M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v12.5A1.75 1.75 0 0 1 14.25 16H1.75A1.75 1.75 0 0 1 0 14.25Zm1.75-.25a.25.25 0 0 0-.25.25v12.5c0 .138.112.25.25.25h12.5a.25.25 0 0 0 .25-.25V1.75a.25.25 0 0 0-.25-.25Zm7.47 3.97a.75.75 0 0 1 1.06 0l2 2a.75.75 0 0 1 0 1.06l-2 2a.749.749 0 0 1-1.275-.326.749.749 0 0 1 .215-.734L10.69 8 9.22 6.53a.75.75 0 0 1 0-1.06ZM6.78 6.53 5.31 8l1.47 1.47a.749.749 0 0 1-.326 1.275.749.749 0 0 1-.734-.215l-2-2a.75.75 0 0 1 0-1.06l2-2a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042Z\"></path>\n</svg>\n <span data-view-component=\"true\" class=\"position-relative\"><a data-hydro-click=\"{"event_type":"user_profile.click","payload":{"profile_user_id":33106572,"target":"PINNED_GIST","user_id":null,"originating_url":"https://github.com/tokyoneon"}}\" data-hydro-click-hmac=\"cf0dac9f150cf20aa8e91dbd304066affe39767a3b80fcf32348aabb5e73abdf\" id=\"106467922\" href=\"https://gist.github.com/tokyoneon/623d5b63a7b0588fae0104f226687d67\" data-view-component=\"true\" class=\"Link flex-auto text-bold\"><span class=\"repo\">exfil LSASS dump via Microsoft.Power...</span></a> <tool-tip id=\"tooltip-d55b408e-5479-411c-880e-5b9541911f05\" for=\"106467922\" popover=\"manual\" data-direction=\"s\" data-type=\"label\" data-view-component=\"true\" class=\"sr-only position-absolute\">exfil LSASS dump via Microsoft.PowerShell_profile.ps1</tool-tip></span> </div>\n\n <div class=\"rounded-bottom-2 color-bg-subtle pt-2 pb-1 tmp-pr-3 flex-auto\">\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">1</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"><span class=\"pl-c\"><span class=\"pl-c\">#</span> write-up: https://www.varonis.com/blog/author/tokyoneon/</span></pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">2</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"></pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">3</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"><span class=\"pl-c\"><span class=\"pl-c\">#</span> an if statement to prevent the attack from executing without administrator privileges</span></pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">4</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"><span class=\"pl-k\">if</span> (whoami <span class=\"pl-k\">/</span>groups <span class=\"pl-k\">|</span> findstr <span class=\"pl-k\">/</span>i <span class=\"pl-s\"><span class=\"pl-pds\">\"</span>S-1-16-12288<span class=\"pl-pds\">\"</span></span>)</pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">5</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\">{</pre>\n </div>\n </div>\n ",
"\n <div class=\"d-flex width-full position-relative\">\n <div class=\"flex-1\">\n <svg aria-hidden=\"true\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-repo mr-1 tmp-mr-1 color-fg-muted\">\n <path d=\"M2 2.5A2.5 2.5 0 0 1 4.5 0h8.75a.75.75 0 0 1 .75.75v12.5a.75.75 0 0 1-.75.75h-2.5a.75.75 0 0 1 0-1.5h1.75v-2h-8a1 1 0 0 0-.714 1.7.75.75 0 1 1-1.072 1.05A2.495 2.495 0 0 1 2 11.5Zm10.5-1h-8a1 1 0 0 0-1 1v6.708A2.486 2.486 0 0 1 4.5 9h8ZM5 12.25a.25.25 0 0 1 .25-.25h3.5a.25.25 0 0 1 .25.25v3.25a.25.25 0 0 1-.4.2l-1.45-1.087a.249.249 0 0 0-.3 0L5.4 15.7a.25.25 0 0 1-.4-.2Z\"></path>\n</svg>\n <span data-view-component=\"true\" class=\"position-relative\"><a data-hydro-click=\"{"event_type":"user_profile.click","payload":{"profile_user_id":33106572,"target":"PINNED_REPO","user_id":null,"originating_url":"https://github.com/tokyoneon"}}\" data-hydro-click-hmac=\"f1ffe56eaaa0c9a457335affd0b2974ba948ae2a3f9c315d24b92b89347a57bb\" id=\"291930936\" href=\"/tokyoneon/Chimera\" data-view-component=\"true\" class=\"Link mr-1 tmp-mr-1 text-bold wb-break-word\"><span class=\"repo\">Chimera</span></a> <tool-tip data-direction=\"n\" id=\"tooltip-8438a651-e3c0-42d7-9fd7-236db625b39c\" for=\"291930936\" popover=\"manual\" data-type=\"label\" data-view-component=\"true\" class=\"sr-only position-absolute\">Chimera</tool-tip></span> <span></span><span class=\"Label Label--secondary v-align-middle mt-1 no-wrap v-align-baseline Label--inline\">Public</span>\n </div>\n </div>\n\n\n <p class=\"pinned-item-desc color-fg-muted text-small mt-2 mb-0\">\n Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.\n </p>\n\n <p class=\"mb-0 mt-2 f6 color-fg-muted\">\n <span class=\"tmp-mr-3 d-inline-block\">\n <span class=\"repo-language-color\" style=\"background-color: #012456\"></span>\n <span itemprop=\"programmingLanguage\">PowerShell</span>\n</span>\n\n <a href=\"/tokyoneon/Chimera/stargazers\" class=\"pinned-item-meta Link--muted\">\n <svg aria-label=\"stars\" role=\"img\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-star\">\n <path d=\"M8 .25a.75.75 0 0 1 .673.418l1.882 3.815 4.21.612a.75.75 0 0 1 .416 1.279l-3.046 2.97.719 4.192a.751.751 0 0 1-1.088.791L8 12.347l-3.766 1.98a.75.75 0 0 1-1.088-.79l.72-4.194L.818 6.374a.75.75 0 0 1 .416-1.28l4.21-.611L7.327.668A.75.75 0 0 1 8 .25Zm0 2.445L6.615 5.5a.75.75 0 0 1-.564.41l-3.097.45 2.24 2.184a.75.75 0 0 1 .216.664l-.528 3.084 2.769-1.456a.75.75 0 0 1 .698 0l2.77 1.456-.53-3.084a.75.75 0 0 1 .216-.664l2.24-2.183-3.096-.45a.75.75 0 0 1-.564-.41L8 2.694Z\"></path>\n</svg>\n 1.6k\n </a>\n <a href=\"/tokyoneon/Chimera/forks\" class=\"pinned-item-meta Link--muted\">\n <svg aria-label=\"forks\" role=\"img\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-repo-forked\">\n <path d=\"M5 5.372v.878c0 .414.336.75.75.75h4.5a.75.75 0 0 0 .75-.75v-.878a2.25 2.25 0 1 1 1.5 0v.878a2.25 2.25 0 0 1-2.25 2.25h-1.5v2.128a2.251 2.251 0 1 1-1.5 0V8.5h-1.5A2.25 2.25 0 0 1 3.5 6.25v-.878a2.25 2.25 0 1 1 1.5 0ZM5 3.25a.75.75 0 1 0-1.5 0 .75.75 0 0 0 1.5 0Zm6.75.75a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5Zm-3 8.75a.75.75 0 1 0-1.5 0 .75.75 0 0 0 1.5 0Z\"></path>\n</svg>\n 254\n </a>\n </p>\n ",
"\n <div class=\"d-flex width-full position-relative\">\n <div class=\"flex-1\">\n <svg aria-hidden=\"true\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-repo mr-1 tmp-mr-1 color-fg-muted\">\n <path d=\"M2 2.5A2.5 2.5 0 0 1 4.5 0h8.75a.75.75 0 0 1 .75.75v12.5a.75.75 0 0 1-.75.75h-2.5a.75.75 0 0 1 0-1.5h1.75v-2h-8a1 1 0 0 0-.714 1.7.75.75 0 1 1-1.072 1.05A2.495 2.495 0 0 1 2 11.5Zm10.5-1h-8a1 1 0 0 0-1 1v6.708A2.486 2.486 0 0 1 4.5 9h8ZM5 12.25a.25.25 0 0 1 .25-.25h3.5a.25.25 0 0 1 .25.25v3.25a.25.25 0 0 1-.4.2l-1.45-1.087a.249.249 0 0 0-.3 0L5.4 15.7a.25.25 0 0 1-.4-.2Z\"></path>\n</svg>\n <span data-view-component=\"true\" class=\"position-relative\"><a data-hydro-click=\"{"event_type":"user_profile.click","payload":{"profile_user_id":33106572,"target":"PINNED_REPO","user_id":null,"originating_url":"https://github.com/tokyoneon"}}\" data-hydro-click-hmac=\"f1ffe56eaaa0c9a457335affd0b2974ba948ae2a3f9c315d24b92b89347a57bb\" id=\"156430692\" href=\"/tokyoneon/Armor\" data-view-component=\"true\" class=\"Link mr-1 tmp-mr-1 text-bold wb-break-word\"><span class=\"repo\">Armor</span></a> <tool-tip data-direction=\"n\" id=\"tooltip-6dc274b0-b185-4b27-9f22-3c59704709cf\" for=\"156430692\" popover=\"manual\" data-type=\"label\" data-view-component=\"true\" class=\"sr-only position-absolute\">Armor</tool-tip></span> <span></span><span class=\"Label Label--secondary v-align-middle mt-1 no-wrap v-align-baseline Label--inline\">Public</span>\n </div>\n </div>\n\n\n <p class=\"pinned-item-desc color-fg-muted text-small mt-2 mb-0\">\n Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.\n </p>\n\n <p class=\"mb-0 mt-2 f6 color-fg-muted\">\n <span class=\"tmp-mr-3 d-inline-block\">\n <span class=\"repo-language-color\" style=\"background-color: #89e051\"></span>\n <span itemprop=\"programmingLanguage\">Shell</span>\n</span>\n\n <a href=\"/tokyoneon/Armor/stargazers\" class=\"pinned-item-meta Link--muted\">\n <svg aria-label=\"stars\" role=\"img\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-star\">\n <path d=\"M8 .25a.75.75 0 0 1 .673.418l1.882 3.815 4.21.612a.75.75 0 0 1 .416 1.279l-3.046 2.97.719 4.192a.751.751 0 0 1-1.088.791L8 12.347l-3.766 1.98a.75.75 0 0 1-1.088-.79l.72-4.194L.818 6.374a.75.75 0 0 1 .416-1.28l4.21-.611L7.327.668A.75.75 0 0 1 8 .25Zm0 2.445L6.615 5.5a.75.75 0 0 1-.564.41l-3.097.45 2.24 2.184a.75.75 0 0 1 .216.664l-.528 3.084 2.769-1.456a.75.75 0 0 1 .698 0l2.77 1.456-.53-3.084a.75.75 0 0 1 .216-.664l2.24-2.183-3.096-.45a.75.75 0 0 1-.564-.41L8 2.694Z\"></path>\n</svg>\n 277\n </a>\n <a href=\"/tokyoneon/Armor/forks\" class=\"pinned-item-meta Link--muted\">\n <svg aria-label=\"forks\" role=\"img\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-repo-forked\">\n <path d=\"M5 5.372v.878c0 .414.336.75.75.75h4.5a.75.75 0 0 0 .75-.75v-.878a2.25 2.25 0 1 1 1.5 0v.878a2.25 2.25 0 0 1-2.25 2.25h-1.5v2.128a2.251 2.251 0 1 1-1.5 0V8.5h-1.5A2.25 2.25 0 0 1 3.5 6.25v-.878a2.25 2.25 0 1 1 1.5 0ZM5 3.25a.75.75 0 1 0-1.5 0 .75.75 0 0 0 1.5 0Zm6.75.75a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5Zm-3 8.75a.75.75 0 1 0-1.5 0 .75.75 0 0 0 1.5 0Z\"></path>\n</svg>\n 57\n </a>\n </p>\n ",
"\n <div class=\"d-flex width-full flex-items-center tmp-pb-3\">\n <svg aria-hidden=\"true\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-code-square mr-2 tmp-mr-2 color-fg-muted\">\n <path d=\"M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v12.5A1.75 1.75 0 0 1 14.25 16H1.75A1.75 1.75 0 0 1 0 14.25Zm1.75-.25a.25.25 0 0 0-.25.25v12.5c0 .138.112.25.25.25h12.5a.25.25 0 0 0 .25-.25V1.75a.25.25 0 0 0-.25-.25Zm7.47 3.97a.75.75 0 0 1 1.06 0l2 2a.75.75 0 0 1 0 1.06l-2 2a.749.749 0 0 1-1.275-.326.749.749 0 0 1 .215-.734L10.69 8 9.22 6.53a.75.75 0 0 1 0-1.06ZM6.78 6.53 5.31 8l1.47 1.47a.749.749 0 0 1-.326 1.275.749.749 0 0 1-.734-.215l-2-2a.75.75 0 0 1 0-1.06l2-2a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042Z\"></path>\n</svg>\n <span data-view-component=\"true\" class=\"position-relative\"><a data-hydro-click=\"{"event_type":"user_profile.click","payload":{"profile_user_id":33106572,"target":"PINNED_GIST","user_id":null,"originating_url":"https://github.com/tokyoneon"}}\" data-hydro-click-hmac=\"cf0dac9f150cf20aa8e91dbd304066affe39767a3b80fcf32348aabb5e73abdf\" id=\"101878487\" href=\"https://gist.github.com/tokyoneon/62feb0b63e6b6f0451acdd709ede39f8\" data-view-component=\"true\" class=\"Link flex-auto text-bold\"><span class=\"repo\">MyCC - turn MyBB forums into C&C ser...</span></a> <tool-tip id=\"tooltip-831dcf70-4632-4bc3-bab3-eafdc64eacf8\" for=\"101878487\" popover=\"manual\" data-direction=\"s\" data-type=\"label\" data-view-component=\"true\" class=\"sr-only position-absolute\">MyCC - turn MyBB forums into C&C servers</tool-tip></span> </div>\n\n <div class=\"rounded-bottom-2 color-bg-subtle pt-2 pb-1 tmp-pr-3 flex-auto\">\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">1</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"><span class=\"pl-c\"><span class=\"pl-c\">#!</span>/bin/bash</span></pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">2</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"></pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">3</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"><span class=\"pl-c\"><span class=\"pl-c\">#</span> https://null-byte.com/turn-forums-into-c-c-servers-0196708/</span></pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">4</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"></pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">5</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"><span class=\"pl-k\">while</span> <span class=\"pl-c1\">true</span><span class=\"pl-k\">;</span> <span class=\"pl-k\">do</span></pre>\n </div>\n </div>\n ",
"\n <div class=\"d-flex width-full flex-items-center tmp-pb-3\">\n <svg aria-hidden=\"true\" data-component=\"Octicon\" height=\"16\" viewBox=\"0 0 16 16\" version=\"1.1\" width=\"16\" data-view-component=\"true\" class=\"octicon octicon-code-square mr-2 tmp-mr-2 color-fg-muted\">\n <path d=\"M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v12.5A1.75 1.75 0 0 1 14.25 16H1.75A1.75 1.75 0 0 1 0 14.25Zm1.75-.25a.25.25 0 0 0-.25.25v12.5c0 .138.112.25.25.25h12.5a.25.25 0 0 0 .25-.25V1.75a.25.25 0 0 0-.25-.25Zm7.47 3.97a.75.75 0 0 1 1.06 0l2 2a.75.75 0 0 1 0 1.06l-2 2a.749.749 0 0 1-1.275-.326.749.749 0 0 1 .215-.734L10.69 8 9.22 6.53a.75.75 0 0 1 0-1.06ZM6.78 6.53 5.31 8l1.47 1.47a.749.749 0 0 1-.326 1.275.749.749 0 0 1-.734-.215l-2-2a.75.75 0 0 1 0-1.06l2-2a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042Z\"></path>\n</svg>\n <span data-view-component=\"true\" class=\"position-relative\"><a data-hydro-click=\"{"event_type":"user_profile.click","payload":{"profile_user_id":33106572,"target":"PINNED_GIST","user_id":null,"originating_url":"https://github.com/tokyoneon"}}\" data-hydro-click-hmac=\"cf0dac9f150cf20aa8e91dbd304066affe39767a3b80fcf32348aabb5e73abdf\" id=\"94857854\" href=\"https://gist.github.com/tokyoneon/34ce1c9e1530a12eb392b1eab09fcbac\" data-view-component=\"true\" class=\"Link flex-auto text-bold\"><span class=\"repo\">Sudo function for stealing Linux pas...</span></a> <tool-tip id=\"tooltip-98cd0b8f-2100-4422-aae2-3fbbde3fb86e\" for=\"94857854\" popover=\"manual\" data-direction=\"s\" data-type=\"label\" data-view-component=\"true\" class=\"sr-only position-absolute\">Sudo function for stealing Linux passwords</tool-tip></span> </div>\n\n <div class=\"rounded-bottom-2 color-bg-subtle pt-2 pb-1 tmp-pr-3 flex-auto\">\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">1</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\">function sudo () </pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">2</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\">{ </pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">3</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"> # https://null-byte.com/privesc-0194190/</pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">4</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"> realsudo=\"$(which sudo)\";</pre>\n </div>\n <div class=\"d-flex flex-items-center\">\n <span class=\"blob-num pinned-gist-blob-num pl-0\">5</span>\n <pre class=\"lh-condensed-ultra overflow-hidden\" style=\"font-size: 11px\"> read -s -p \"[sudo] password for $USER: \" inputPasswd;</pre>\n </div>\n </div>\n "
]
}
{
"accept-ranges": "bytes",
"cache-control": "max-age=0, private, must-revalidate",
"content-encoding": "gzip",
"content-security-policy": "default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com github.githubassets.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net productionresultssa4.blob.core.windows.net productionresultssa5.blob.core.windows.net productionresultssa6.blob.core.windows.net productionresultssa7.blob.core.windows.net productionresultssa8.blob.core.windows.net productionresultssa9.blob.core.windows.net productionresultssa10.blob.core.windows.net productionresultssa11.blob.core.windows.net productionresultssa12.blob.core.windows.net productionresultssa13.blob.core.windows.net productionresultssa14.blob.core.windows.net productionresultssa15.blob.core.windows.net productionresultssa16.blob.core.windows.net productionresultssa17.blob.core.windows.net productionresultssa18.blob.core.windows.net productionresultssa19.blob.core.windows.net github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com wss://alive-staging.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com wss://production-copilot-host.webpubsub.azure.com api.github.com/cmc_internal/api/; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com user-images.githubusercontent.com private-user-images.githubusercontent.com opengraph.githubassets.com repository-images.githubusercontent.com marketplace-screenshots.githubusercontent.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com explore-feed.github.com *.googleusercontent.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com secured-user-images.githubusercontent.com private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com github.githubassets.com; script-src github.githubassets.com 'sha256-tSjmyPUky1KbRZ0fw9VUil3wFEbeM82rtbJDygGJAXw='; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/",
"content-type": "text/html; charset=utf-8",
"date": "Fri, 16 Oct 2026 10:58:51 GMT",
"etag": "7818b297b57f493a3700473d0f5f2eb5",
"referrer-policy": "origin-when-cross-origin, strict-origin-when-cross-origin",
"server": "github.com",
"set-cookie": "logged_in=no; expires=Sat, 16 Oct 2027 10:58:50 GMT; domain=.github.com; path=/; HttpOnly; secure; SameSite=Lax",
"strict-transport-security": "max-age=31536000; includeSubdomains; preload",
"transfer-encoding": "chunked",
"vary": "X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With, X-GitHub-Client-Version, Sec-Fetch-Site,Accept-Encoding, Accept, X-Requested-With",
"x-content-type-options": "nosniff",
"x-frame-options": "deny",
"x-github-edge-region": "iad",
"x-github-request-id": "BA60:66DF0:F4DE73:15C494A:6AD2036A",
"x-xss-protection": "0"
}