Skip to content

Instantly share code, notes, and snippets.

# host
$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever


scan a box with default scripts and version detection

nmap -sC -sV <ip address>


import argparse
import sys
from pwnlib.tubes.listen import listen
def main(cli_arguments):
l = listen(port=cli_arguments.port, bindaddr='localhost', typ='tcp')
_ = l.wait_for_connection()
Using this `shell.nix`, here is how to install BAP using `opam`:
opam init --comp=4.09.0
eval $(opam env)
opam install bap
with import <nixpkgs> { };
Pamplemousse /
Created November 4, 2020 17:22
Decorate function handlers in `angr`'s RDA to highlight definitions passed as parameter to external functions.
def tag_parameter_definitions(func):
Add a `ParameterTag` to the definitions of the arguments of the function simulated by the handler.
def wrapper(self, state: 'ReachingDefinitionsState', codeloc: 'CodeLocation'):
arch = state.arch
tag = ParameterTag(
function = codeloc.ins_addr,
with import <nixpkgs> { };
armhfDependencies = [
in stdenv.mkDerivation {
name = "cross-environment";
with import <nixpkgs> { };
python38WithPackages = python38.withPackages(ps: with ps; [
firmware-mod-kit = fetchFromGitHub {
owner = "rampageX";
repo = "firmware-mod-kit";
with import <nixpkgs> { };
stdenv.mkDerivation rec {
name = "ZAP";
buildInputs = [
shellHook = ''

Contribute to nixpkgs cheatsheet

Tips and tricks for one who wants to write expressions to contribute to NixOS/nixpkgs .

Build a package from local nixpkgs

Backward slice from a given sink.
Unfortunately, the BB definition used by Radare2 is too limiting:
from functools import reduce
import r2pipe
import sys