These determine the assumed/default size of instruction operands, and restricts which opcodes are available, and how they are used.
Modern operating systems, booted inside Real mode,
Scott Sutherland nullbind
dezhub
/ Get-ClrReflection.ps1
Last active
July 23, 2025 21:37
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| function Get-ClrReflection | |
| { | |
| <# | |
| .SYNOPSIS | |
| Detects memory-only CLR (.NET) modules | |
| Author: Joe Desimone (@dez_) | |
| License: BSD 3-Clause | |
jaredcatkinson
/ Get-KerberosTicketGrantingTicket.ps1
Last active
July 19, 2025 16:52
Kerberos Ticket Granting Ticket Collection Script and Golden Ticket Detection Tests
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| function Get-KerberosTicketGrantingTicket | |
| { | |
| <# | |
| .SYNOPSIS | |
| Gets the Kerberos Tickets Granting Tickets from all Logon Sessions | |
| .DESCRIPTION | |
| Get-KerberosTicketGrantingTicket uses the Local Security Authority (LSA) functions to enumerate Kerberos logon sessions and return their associate Kerberos Ticket Granting Tickets. |
ConstantineK
/ enumerate_users_all_at_once.sql
Created
October 19, 2016 16:39
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| select n [id], SUSER_NAME(n) [user_name] | |
| from ( | |
| select top 10000 row_number() over(order by t1.number) as N | |
| from master..spt_values t1 | |
| cross join master..spt_values t2 | |
| ) a | |
| where SUSER_NAME(n) is not null |
mikesmullin
/ x86-assembly-notes.md
Last active
November 22, 2025 23:49
Notes on x86-64 Assembly and Machine Code
jonschoning
/ powershell-gui-dialogs.ps1
Last active
October 10, 2022 07:56
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Show message box popup. | |
| Add-Type -AssemblyName System.Windows.Forms | |
| $result = [System.Windows.Forms.MessageBox]::Show("My message", "Window Title", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::None) | |
| # Show input box popup. | |
| Add-Type -AssemblyName Microsoft.VisualBasic | |
| $inputText = [Microsoft.VisualBasic.Interaction]::InputBox("Enter some value:", "Window Title", "Default value") | |
| # Show an Open File Dialog and return the file selected by the user. | |
| function Read-OpenFileDialog([string]$InitialDirectory, [switch]$AllowMultiSelect) |