Bill Demirkapi D4stiny

## LowUtilities.cpp
//
// An implementation of GetModuleHandle and GetProcAddress that works with manually mapped modules, forwarded exports,
// without a CRT standard library, and uses no Windows API or dependencies.
//
// Author: Bill Demirkapi
// License: MIT, appended at the bottom of this document if you care about licensing and want to credit me in your own project.
//

#include <Windows.h>
#include <winternl.h>

## bmc_cfg_tool.py
"""
COPYRIGHT Bill Demirkapi 2025

Small utility I wrote with some help from Gemini Pro 2.5 to decrypt/encrypt BMC config backups from my ASUS ASMB11-iKVM AST2600 BMC.
Fed the model a bunch of decompiled code from BMC firmware libaries like libaes and libBackupConf.
Probably works with other Megarac-based BMCs too.

Expects an AESKey and AESIV file in script directory. This varies by OEM, often requires unpacking firmware/flash image.
For my ASUS BMC, however, the Key/IV for config are just NULL keys. AESKey file content is "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=", AESIV's is "AAAAAAAAAAAAAAAAAAAAAA==".
"""

## gist:328afbad165adb760472d3fbacd2e9fc
#!/usr/bin/env python3
"""
plar_extract.py – Extract files from Geekbench *.plar* archives (Geekbench 6+)
==========================================================================

** Based on this 4 year old script: https://gist.github.com/HarukaMa/0772fc47311f6bbcb79ce3f84a7134d7

Usage
-----
    python plar_extract.py <archive.plar> [output_dir]

## gist:31c0523b5bb824085ceb809ed214f193
D779D38405E8828F5CB27C2C3D75867C6A9AA30E0BD003FECF0401BFA6F9C8C7

## gist:e4d441b05456fe60534cf9e7fa6e8491
5ed0490eab435cd36c9d78a37dade38fe22862ad537aea1ffe66913d96058965
513fd6c864717f1abd78e72704597c730280d55c312423c5661ca544a41643eb
2c4785278cc50d8b683a5d2e28ebdf29c386bbbda284fc162917fb6688031341

## gist:39a991f9b1fd290f0736b6ecba241ab2
f5229314179a5ff063b5ae32c9bd6bc14e831cc68089b2991ced784981483ac2

## gist:0b5796b9d85381284fa8793ebf2ea68b
38fda53c4d91a2279a300e030f87bd9783d3640ba090bc3a74d049c2e3c5ae2b

## Hash
e5285d895cc1200237f9676985df471f4eba9d13f59541b8df774238a188382bc2c7ce6a75d7346f5b0fe940e2ca196b78edde78912e5bd3a4f0e88e8906c7c1

## cve202140444_ie.html
<!DOCTYPE html>
<html>
<head>
    <meta http-equiv="Expires" content="-1">
    <meta http-equiv="X-UA-Compatible" content="IE=11">
</head>
<body>
    <script>
        var exploit_cab = "[CAB file URL]";

## Macro_Scrambler.py
import sys
import zipfile
import random

def get_zip_file_header_offset(zip_filename, target_filename):
	"""
	Parse the file header offset for a target_filename.

	:param zip_filename: The name of the zip file to read.
	:param target_filename: The name of the file to find the header of.
	//
	// An implementation of GetModuleHandle and GetProcAddress that works with manually mapped modules, forwarded exports,
	// without a CRT standard library, and uses no Windows API or dependencies.
	//
	// Author: Bill Demirkapi
	// License: MIT, appended at the bottom of this document if you care about licensing and want to credit me in your own project.
	//

	#include <Windows.h>
	#include <winternl.h>
	"""
	COPYRIGHT Bill Demirkapi 2025

	Small utility I wrote with some help from Gemini Pro 2.5 to decrypt/encrypt BMC config backups from my ASUS ASMB11-iKVM AST2600 BMC.
	Fed the model a bunch of decompiled code from BMC firmware libaries like libaes and libBackupConf.
	Probably works with other Megarac-based BMCs too.

	Expects an AESKey and AESIV file in script directory. This varies by OEM, often requires unpacking firmware/flash image.
	For my ASUS BMC, however, the Key/IV for config are just NULL keys. AESKey file content is "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=", AESIV's is "AAAAAAAAAAAAAAAAAAAAAA==".
	"""
	#!/usr/bin/env python3
	"""
	plar_extract.py – Extract files from Geekbench .plar archives (Geekbench 6+)
	==========================================================================

	** Based on this 4 year old script: https://gist.github.com/HarukaMa/0772fc47311f6bbcb79ce3f84a7134d7

	Usage
	-----
	python plar_extract.py <archive.plar> [output_dir]
	5ed0490eab435cd36c9d78a37dade38fe22862ad537aea1ffe66913d96058965
	513fd6c864717f1abd78e72704597c730280d55c312423c5661ca544a41643eb
	2c4785278cc50d8b683a5d2e28ebdf29c386bbbda284fc162917fb6688031341
	<!DOCTYPE html>
	<html>
	<head>
	<meta http-equiv="Expires" content="-1">
	<meta http-equiv="X-UA-Compatible" content="IE=11">
	</head>
	<body>
	<script>
	var exploit_cab = "[CAB file URL]";
	import sys
	import zipfile
	import random

	def get_zip_file_header_offset(zip_filename, target_filename):
	"""
	Parse the file header offset for a target_filename.

	:param zip_filename: The name of the zip file to read.
	:param target_filename: The name of the file to find the header of.