Skip to content

Instantly share code, notes, and snippets.

View Green-m's full-sized avatar
🎯
Focusing

Green-m Green-m

🎯
Focusing
View GitHub Profile
@Green-m
Green-m / tg_parse_plaindb.py
Created November 28, 2023 07:33
Telegram for macos sqlite db parse
# from https://gist.github.com/stek29/8a7ac0e673818917525ec4031d77a713
import sqlite3
import io
import struct
import enum
import mmh3
import pprint
import datetime
@Green-m
Green-m / tg_parse_encryptkey.py
Last active November 28, 2023 03:50
Telegram for macos parse tempkeyEncrypted
# install pycryptodome or pycryptodomex
# pip install mmh3 pycryptodome pycryptodomex
# From https://gist.github.com/stek29/8a7ac0e673818917525ec4031d77a713
import os
import sqlite3
import io
import struct
import enum
import mmh3
@Green-m
Green-m / idle.vbs
Created August 9, 2019 08:35
Windows_screen_saver_prevent_script
Dim objResult
Set objShell = WScript.CreateObject("WScript.Shell")
Do While True
objResult = objShell.sendkeys("{NUMLOCK}{NUMLOCK}")
Wscript.Sleep (6000)
Loop
@Green-m
Green-m / enum_xor_chars.rb
Created June 26, 2019 07:26
enum php web magic chars
list = ("a".."z").to_a + ("A".."Z").to_a
chars = "'!@#$%&*()+{}|:\">?<[]\\\';,.`~',"
def xor(a, b)
(a.ord ^ b.ord).chr
end
list.each do |l|
chars.chars.each do |i|
@Green-m
Green-m / wifi_top_2000.txt
Last active May 28, 2019 01:37
wifi_top_2000.txt
12345678
123456789
1234567890
88888888
87654321
11111111
00000000
987654321
11223344
66668888
#!/usr/bin/env bash
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
export PATH
#===================================================================#
# System Required: Debian or Ubuntu #
# Description: Install Shadowsocks-libev server for Debian/Ubuntu #
# Author: Teddysun <i@teddysun.com> #
# Thanks: @madeye <https://github.com/madeye> #
# Intro: https://teddysun.com/358.html #
#===================================================================#
@Green-m
Green-m / CorruptCLRGlobal.ps1
Created December 11, 2018 08:00 — forked from mattifestation/CorruptCLRGlobal.ps1
A PoC function to corrupt the g_amsiContext global variable in clr.dll in .NET Framework Early Access build 3694
function Subvert-CLRAntiMalware {
<#
.SYNOPSIS
A proof-of-concept demonstrating overwriting a global variable that stores a pointer to an antimalware scan interface context structure. This PoC was only built to work with .NET Framework Early Access build 3694.
.DESCRIPTION
clr.dll in .NET Framework Early Access build 3694 has a global variable that stores a pointer to an antimalware scan interface context structure. By reading the pointer at that offset and then overwriting the forst DWORD, the context structure will become corrupted and subsequent scanning calls will fail open.
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <windows.h>
#define SERVICE_NAME "DhcXrk"
#define DISPLAY_NAME "QyucjlZIin"
#define RETRY_TIME 5
@Green-m
Green-m / No Baidu
Created September 7, 2018 06:09 — forked from nerdroychan/No Baidu
A hosts file to block all .baidu.com domains.
##
# Block Baidu
##
127.0.0.1 baidu.com
127.0.0.1 www.baidu.com
127.0.0.1 pan.baidu.com
127.0.0.1 post-js.baidu.com
127.0.0.1 bbs.baidu.com
127.0.0.1 tieba.baidu.com
127.0.0.1 wapp.baidu.com

Keybase proof

I hereby claim:

  • I am green-m on github.
  • I am green_m (https://keybase.io/green_m) on keybase.
  • I have a public key ASCS2mpr4Ikn-GP1Xvvsb-__lh2rfsYVAUbrgHO4hGPD6go

To claim this, I am signing this object: