Skip to content

Instantly share code, notes, and snippets.

View andreafioraldi's full-sized avatar
💭
double free or corruption (!prev): 0xcafecafe

Andrea Fioraldi andreafioraldi

💭
double free or corruption (!prev): 0xcafecafe
View GitHub Profile
@andreafioraldi
andreafioraldi / calculate_pi.stout
Created April 27, 2017 17:47
Calculate PI using my own programming language: Stout
/*
Calculate PI using my own programming language: Stout
author = Andrea Fioraldi
copyright = Copyright 2017, Andrea Fioraldi
license = MIT
mail = andreafioraldi@gmail.com
*/
use IO;
@andreafioraldi
andreafioraldi / rpn.stout
Created July 29, 2017 09:37
An expression solver based on the reverse polish notation written in Stout
/*
An expression solver based on the reverse polish notation written in Stout.
author = Andrea Fioraldi
copyright = Copyright 2017, Andrea Fioraldi
license = MIT
mail = andreafioraldi@gmail.com
*/
library IO;
@andreafioraldi
andreafioraldi / soocat.sh
Created November 5, 2017 14:53 — forked from superkojiman/soocat.sh
Quick function to run a binary under socat
# Add to .bashrc
# You're welcome
function soocat {
socat tcp-l:${2},reuseaddr,fork EXEC:${1}
}
@andreafioraldi
andreafioraldi / scriptpath.sh
Created December 26, 2017 13:18
Get script directory in Bash script
#!/bin/bash
SCRIPTPATH="$( cd "$(dirname "$0")" ; pwd -P )"
echo "The script is in the directory $SCRIPTPATH"
@andreafioraldi
andreafioraldi / exploitdb_mapping_cve.json
Created December 30, 2017 12:36
ExploitDB ID - CVE mapping json
{
"CVE-2017-9415": [
"42117"
],
"CVE-2004-1656": [
"24422"
],
"CVE-2004-1655": [
"24425"
],
@andreafioraldi
andreafioraldi / wifi_p0ison.py
Last active March 15, 2020 02:12
Kick off a device from wifi --- Use it only against your sister
#!/usr/bin/env python
import time
import os
import requests
from scapy.all import *
DEFAULT_BAD_GATEWAY = '12:34:56:78:9A:BC'
class Device(object):
'''
author: Andrea Fioraldi
team: TheRomanXpl0it
ctf: CSAW18 finals
'''
from pwn import *
#context.log_level = "debug"
chr = {0: '\x00', 1: '\x01', 2: '\x02', 3: '\x03', 4: '\x04', 5: '\x05', 6: '\x06', 7: '\x07', 8: '\x08', 9: '\t', 10: '\n', 11: '\x0b', 12: '\x0c', 13: '\r', 14: '\x0e', 15: '\x0f', 16: '\x10', 17: '\x11', 18: '\x12', 19: '\x13', 20: '\x14', 21: '\x15', 22: '\x16', 23: '\x17', 24: '\x18', 25: '\x19', 26: '\x1a', 27: '\x1b', 28: '\x1c', 29: '\x1d', 30: '\x1e', 31: '\x1f', 32: ' ', 33: '!', 34: '"', 35: '#', 36: '$', 37: '%', 38: '&', 39: "'", 40: '(', 41: ')', 42: '*', 43: '+', 44: ',', 45: '-', 46: '.', 47: '/', 48: '0', 49: '1', 50: '2', 51: '3', 52: '4', 53: '5', 54: '6', 55: '7', 56: '8', 57: '9', 58: ':', 59: ';', 60: '<', 61: '=', 62: '>', 63: '?', 64: '@', 65: 'A', 66: 'B', 67: 'C', 68: 'D', 69: 'E', 70: 'F', 71: 'G', 72: 'H', 73: 'I', 74: 'J', 75: 'K', 76: 'L', 77: 'M', 78: 'N', 79: 'O', 80: 'P', 81: 'Q', 82: 'R', 83: 'S', 84: 'T', 85: 'U', 86: 'V', 87: 'W', 88: 'X', 89: 'Y', 90: 'Z', 91: '[', 92: '\\', 93: ']', 94: '^', 95: '_', 96: '`', 97: 'a', 98: 'b', 99: 'c', 100: 'd', 101: 'e', 102: 'f', 103: '
from angr import sim_options as options
from angr.errors import SimUnsatError, SimMemoryError, SimMemoryLimitError, SimMemoryAddressError, SimMergeError
from angr.storage.memory import SimMemory, DUMMY_SYMBOLIC_READ_VALUE
import angr
import logging
l = logging.getLogger("concretor_angr")
<!DOCTYPE html>
<html>
<head>
<script>
function print(text) {
if (arguments.length > 1) text = Array.prototype.slice.call(arguments).join(' ');
console.log(text);
var element = document.getElementById('output');
if (element) {