PowerShell tips – part 027.

Windows PowerShell Integrated Scripting Environment (ISE) is a graphical host application that enables you to read, write, run, debug, and test scripts and modules in a graphic-assisted environment., see the official webpage. You can start on the command shell with this command:

Shell
1
powershell_ise.exe

You can run PowerShell commands in this environment, let’s see the version… Read More »

Windows – ReactOS another Windows O.S.

ReactOS is a free and open-source operating system for amd64/i686 personal computers intended to be binary-compatible with computer programs and device drivers made for Windows Server 2003 and later versions of Windows., read more on Wikipedia. If you have old hardware then this is a good idea to use your Windows applications with ReactOS. The… Read More »

Windows – WinDbg tool.

WinDbg is very useful when you develop software with assembly language. You can install WinDbg using PowerShell by opening PowerShell as an administrator and running this command:

PowerShell
1
PS C:\WINDOWS\system32> Add-WindowsCapability -Online -Name WinDbg

You can download it from the Microsoft store.

Programming with FASM – writing to file.

In this simple example, I will show how to write a file using the assembly programming language with FASM, known as flat assembler. You can use the FASM editor with the FASMW.EXE executable. Open this editor and use this commented source code:

Assembly (x86)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
;define format of exe file
format pe console 4.0
;include file WIN32AX
;http://flatassembler.net/docs.php?article=win32
include 'INCLUDE/WIN32AX.INC'
; define data for code
.data
;this will be the filename of file
filename db 'file.txt',0
; this string will be write on the file
buffer_text db 'This is a test by Catalin!'
; this is the size for WriteFile based on buffer_text
buffer_size = $ - buffer_text
; define a space
bytes_to_write dd ?
; the code for running
.code
main:
invoke  CreateFile,filename, GENERIC_WRITE, 0, 0, 4, FILE_ATTRIBUTE_NORMAL, 0
;https://learn.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-writefile
invoke  WriteFile, eax, buffer_text, buffer_size, bytes_to_write, 0
;https://learn.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-exitprocess
invoke  ExitProcess, 0
.end main

Each step is describe in the source code. Run and test with… Read More »

PowerShell tips – part 026.

In this article tutorial, I will show you how to use a function from a PowerShell script. Create a script named: Get-NetworkConnectionProcess.ps1. Add this source code to your script:

PowerShell
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
function Get-NetworkConnectionProcess {
    [CmdletBinding()]
    param (
        [ValidateSet(
            'Closed',
            'CloseWait',
            'Closing',
            'DeleteTCB',
            'Established',
            'FinWait1',
            'FinWait2',
            'LastAck',
            'Listen',
            'SynReceived',
            'SynSent',
            'TimeWait')]
        [string]$State = 'Established'
    )
 
    process {
        $TCPConnections = Get-NetTCPConnection -State $State |
            Select-Object -Property LocalPort, OwningProcess
        $Filter = "ProcessId=" + ($($TCPConnections.OwningProcess) -join " or ProcessId=")
        Write-Verbose "ProcessIds are $Filter"
        $TCPProcessesArguments = @{
            ClassName = 'Win32_Process'
            Filter    = $Filter
            Property  = 'ProcessId', 'Name', 'CommandLine'
        }
        $TCPProcesses = Get-CimInstance @TCPProcessesArguments |
            Select-Object -Property ProcessId, Name, CommandLine
 
        foreach ($TCPConnection in $TCPConnections) {
            Write-Verbose "Processing $($TCPConnection.LocalPort)"
 
            $TCPProcess = $TCPProcesses |
                Where-Object -Property ProcessId -EQ -Value $TCPConnection.OwningProcess
            [PSCustomObject]@{
                Port        = $TCPConnection.LocalPort
                ProcessName = $TCPProcess.Name
                ProcessCmd  = $TCPProcess.CommandLine
            }
        }
 
    }
}

Use the dot sourcing operator (.) to load the function into your PowerShell session, like this:

Shell
1
. .\Get-NetworkConnectionProcess.ps1

The command will load the function and once… Read More »

Google Apps Script – get notification from GitHub account – part 053.

You need to have a GitHub account. Create a new token by following these steps: Go to your GitHub settings. Click on “Developer settings”. Click on “Personal access tokens”. Click on “Generate new token”. Select the scopes you want the token to have (in this case, make sure to select the “notifications” scope). Click on… Read More »