Blue DeviL blue-devil

## resources.md

      
              1 file
            
          
              9 forks
            
          
              0 comments
            
          
              15 stars
            
          
                IdanBanani
                / resources.md
            
            
              Created
              August 3, 2020 12:03
                — forked from muff-in/resources.md
            
          
    Reversing / Malware Analysis / Assembly -resources


Reverse engineering focusing on x64 Windows.

https://github.com/0xZ0F/Z0FCourse_ReverseEngineering
Applied Reverse Engineering Series


## find_ioctls.py
"""
Author: Matteo 'uf0' Malvica @matteomalvica
Tested with IDA 7.5 and Py3
Original plugin: https://github.com/FSecureLABS/win_driver_plugin
"""

def getopvalue(addr):
    """Returns the value of the second operand to the instruction at `addr` masked to be a 32 bit value"""
    return idc.get_operand_value(addr, 1) & 0xffffffff

## pisi_repository_cleaner.py
#!/usr/bin/env python3

"""PISI Repository Cleaner.

This script removes old PISI packages by taking only two positional arguments.
First one is the path to the PISI repository and second one is the number of
package versions to keep in the repository. (Latest versions will be kept.)

Example:
    This script can easily be run by providing two positional arguments directory and count.
	"""
	Author: Matteo 'uf0' Malvica @matteomalvica
	Tested with IDA 7.5 and Py3
	Original plugin: https://github.com/FSecureLABS/win_driver_plugin
	"""

	def getopvalue(addr):
	"""Returns the value of the second operand to the instruction at `addr` masked to be a 32 bit value"""
	return idc.get_operand_value(addr, 1) & 0xffffffff
	#!/usr/bin/env python3

	"""PISI Repository Cleaner.

	This script removes old PISI packages by taking only two positional arguments.
	First one is the path to the PISI repository and second one is the number of
	package versions to keep in the repository. (Latest versions will be kept.)

	Example:
	This script can easily be run by providing two positional arguments directory and count.