Skip to content

Instantly share code, notes, and snippets.

View HQ1995's full-sized avatar

Hanqing Zhao HQ1995

View GitHub Profile
@HQ1995
HQ1995 / gist:01d5f8828b5b1c70385a
Created January 7, 2016 13:12
Emulating ARM on Debian/Ubuntu

You might want to read this to get an introduction to armel vs armhf.

If the below is too much, you can try Ubuntu-ARMv7-Qemu but note it contains non-free blobs.

Running ARM programs under linux (without starting QEMU VM!)

First, cross-compile user programs with GCC-ARM toolchain. Then install qemu-user-static (or qemu-arm-static in older versions) so that you can run ARM executables directly on linux

@HQ1995
HQ1995 / drawdrawdraw.py
Created July 20, 2016 15:22 — forked from Jinmo/drawdrawdraw.py
drawdrawdraw exploit on XCTF Finals 2016
from transaction_pb2 import Transaction, Reply, Command
from rc4 import RC4 # https://github.com/bozhu/RC4-Python
import socket
import hexdump
import random
import struct
import telnetlib
import sys
@HQ1995
HQ1995 / DmaHvBackdoor.c
Created August 18, 2017 05:54 — forked from Cr4sh/DmaHvBackdoor.c
Hyper-V backdoor for UEFI
/*
*********************************************************************
Part of UEFI DXE driver code that injects Hyper-V VM exit handler
backdoor into the Device Guard enabled Windows 10 Enterprise.
Execution starts from new_ExitBootServices() -- a hook handler
for EFI_BOOT_SERVICES.ExitBootServices() which being called by
winload!OslFwpKernelSetupPhase1(). After DXE phase exit winload.efi
transfers exeution to previously loaded Hyper-V kernel (hvix64.sys)