H0neyBadger

import sys

template_elf = """window.{name}_len = {length};
window.{name} = malloc(window.{name}_len);
write_mem(window.{name}, [{payload}]);
"""

template_bin = """window.{name} = malloc(65536);
write_mem(window.{name}, [{payload}]);
"""

H0neyBadger

clang_prototype

H0neyBadger

from time import sleep
from shutil import copyfileobj
import socket
from http import server, client, cookiejar
import urllib.request
from urllib.parse import urlparse

LISTEN_PORT = 8090
TARGET = "http://gs2.ww.prod.dl.playstation.net"

H0neyBadger

Notes:

# search: prod.keys titlekek_0c
hactool -t pfs0 --pfs0dir=pfs0 ./0100000011D90000.nsp
hactool --exefsdir=exefsdir ./pfs0/69ab3424f037989d254df83040f4a02c.nca
hactool --romfsdir=romfs ./pfs0/69ab3424f037989d254df83040f4a02c.nca
# 1.1.1
hactool -t pfs0 --pfs0dir=pfs01.1.1 ./0100000011D90800.nsp
hexdump -C -s 384 ./pfs01.1.1/0100000011d90800000000000000000d.tik # title key

H0neyBadger

import sys, os, base64, datetime, hashlib, hmac, json
import requests

method = 'POST'
service = 'dynamodb'
host = 'dynamodb.us-west-1.amazonaws.com'
region = 'us-west-1'
endpoint = 'https://dynamodb.us-west-1.amazonaws.com/'
content_type = 'application/x-amz-json-1.0'
amz_target = 'DynamoDB_20120810.GetItem'

H0neyBadger

FROM docker.io/library/archlinux:latest

# RUN apk --update add git make curl bash gcc libc-dev zlib-dev sqlite-dev bzip2-dev readline-dev openssl-dev && \
#     rm -rf /var/lib/apt/lists/* && \
#     rm /var/cache/apk/*

RUN pacman --noconfirm -Syu && \
    pacman --noconfirm -S git make curl bash gcc unzip \
        zlib sqlite bzip2 readline openssl && \
  yes | pacman -Scc

H0neyBadger

systemctl --user start podman.service
podman run -d --rm --name dynamodb -p 0.0.0.0:8000:8000 \
  amazon/dynamodb-local -jar DynamoDBLocal.jar -sharedDb
  
# sam build; sudo chcon -R -t container_file_t .aws-sam
mkdir tmp; sudo chcon -R -t container_file_t tmp 
# denied  { read } for  pid=7041 comm=bootstrap name=tmpmk0y_8tp dev="tmpfs" ino=47920
# scontext=system_u:system_r:container_t:s0:c1020,c1021
# tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir permissive=0

H0neyBadger

Toolbox containers

Build

podman build -f archlinux -t "archlinux:toolbox"

toolbox

toolbox create --container archlinux --image "archlinux:toolbox"

H0neyBadger

#---------------------------------------------------------------------------------
.SUFFIXES:
#---------------------------------------------------------------------------------

ifeq ($(strip $(DEVKITPRO)),)
$(error "Please set DEVKITPRO in your environment. export DEVKITPRO=<path to>/devkitpro")
endif

TOPDIR ?= $(CURDIR)
include $(DEVKITPRO)/libnx/switch_rules

H0neyBadger

#include <mbedtls/gcm.h>
#include <openssl/evp.h>
#include <cstring>

// g++ test_gcm.c -lmbedtls -lmbedx509 -lmbedcrypto /usr/lib64/libcrypto.so

bool print_buffer(const char * text, uint8_t * buf, size_t buf_size){
	printf("%s", text);
    for(int i=0;i<buf_size;i++){
        printf("%.2x ", (uint8_t) *(buf+i));