Skip to content

Instantly share code, notes, and snippets.

View NeatMonster's full-sized avatar

Alex A. NeatMonster

View GitHub Profile
@NeatMonster
NeatMonster / README.md
Last active April 23, 2024 09:23
A simple hexdump module for Python

Simple Hexdump

A simple hexdump module for Python.

Installation

The preferred installation method is:

pip install simple-hexdump
@NeatMonster
NeatMonster / patmake.py
Created March 8, 2020 18:03
Creates a pattern file from a database
"""
@file patmake.py
@brief Creates a pattern file from a database
@author neat
"""
import os
import idautils
import ida_bytes
import ida_funcs
package fr.aumgn.motd;
import java.util.ArrayList;
import java.util.List;
import java.util.Random;
import org.bukkit.Bukkit;
import org.bukkit.event.EventHandler;
import org.bukkit.event.Listener;
import org.bukkit.event.server.ServerListPingEvent;
@NeatMonster
NeatMonster / fdupes.py
Created September 2, 2022 08:47
Simple and fast utility to find duplicated files
import collections
import os
import sys
import hashlib
paths = []
for root, dirs, files in os.walk(sys.argv[1]):
for file in files:
paths.append(os.path.join(root, file))
import ida_netnode
"""
You can also switch the shell into IDC mode and enter del_user_info().
You can also edit your `~/ida-x/cfg/ida.cfg` and set `STORE_USER_INFO` to `NO`.
"""
# This will replace the original user blob with the evaluation version blob.
ORIGINAL_USER = \
7plus.com.au,0
720p-izle.com,0
1plus1tv.ru,1
18av.mm-cg.com,1
123movies.net,1
159i.com,1
1000mg.jp,1
101.ru,1
10.16.100.244,1
khoai.tv,0
@NeatMonster
NeatMonster / main.cpp
Created November 9, 2014 18:34
ZLib
// Decoding.
bytes_t crypt = {120, 156, 251, 255, 127, 100, 3, 0, 8, 0, 255, 1};
bytes_t plain(196864);
z_stream stream;
inflateInit(&stream);
stream.next_in = crypt.data();
stream.avail_in = crypt.size();
stream.next_out = plain.data();
stream.avail_out = plain.size();
int ret = inflate(&stream, Z_FINISH);
@NeatMonster
NeatMonster / frida-libjpeg.py
Created July 19, 2017 08:04
Dumping JPEGs w/ Frida
import frida, sys
images = {}
def on_message(message, data):
global image
if message['type'] == 'send':
if message['payload'].startswith('['):
message = message['payload']
save = message[message.index(']')+1:]
@NeatMonster
NeatMonster / copy_stuff.py
Created March 12, 2020 10:12
Contextual menu to enable copying as UUID/bytes list/hex string
import uuid
import ida_bytes
import ida_hexrays
import ida_idaapi
import ida_kernwin
from PyQt5.Qt import QApplication
class Plugin(ida_idaapi.plugin_t):
import os
import sys
from construct import *
BOOT_IMG_HDR = Struct(
"magic" / Const(b"ANDROID!"),
"kernel_size" / Int32ul,
"kernel_addr" / Int32ul,
"ramdisk_size" / Int32ul,