thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

CatoTheYounger97

Freespace Vita Port Button Mapping (1, 2 and Demo):

• For explaining the gamepad mapping for Freespace vita port.
• All buttons and combinations can be remapped in game settings (Apart from: START, DPAD RIGHT and DPAD DOWN)
• Note: Training missions should be skipped as they require keys that are not mapped. This can be done by tapping the "Skip Training" button in the top right of the mission briefing.

Basic Controls:

TOUCHSCREEN             - Mouse Click for Menu Navigation
TRIANGLE                - Lock onto Ship in Reticle 
CIRCLE                  - Fire Secondary Weapon 

nWestie

import sqlite3
import json
import shutil
import os

tags = []
joins = []

# Tested with Notally v5.2 and QuillPad v1.4.9
# will not preserve note color

cyxx

Delphine Software Another World copy protection sheet

cyxx

#!/usr/bin/env python3
#
# Deobfuscate Another World DOS executable.
#
# The 20kb executable of the game can be divided in three main sections.
#
# 1. From offset 0x20, LZ91 packed data (https://bellard.org/lzexe.html). Each byte is xor'ed with the previous byte.
# 2. Some relocation code that jumps to the LZ91 decompression routine. Each byte of the x86 bytecode is off by 0xD.
# 3. The start code that patches the relocation code.
#

cyxx

Delphine Software Operation Stealth copy protection sheet

The game bytecode in auto00.prc checks for a subset of all shapes from the card shipped with the game.

[0002] (09) localvars[1] = random(104)
[0006] (0F) SET object[236].costume, localvars[1]

The sheet below contains the 104 shapes that can be requested on game start.

dmuth

#!/bin/bash
#
# This script will convert JPG and PNG files to HEIC format recursively.
#

# Errors are fatal
set -e

GO=""
DELETE=""

clach04

import os
from base64 import b64decode, b64encode

from cryptography.hazmat.primitives import hashes
from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
from cryptography.hazmat.backends import default_backend


_BACKEND = default_backend()

eatonphil

# th30z@u1310:[Desktop]$ psql -h localhost -p 55432
# Password: 
# psql (9.1.10, server 0.0.0)
# WARNING: psql version 9.1, server version 0.0.
#          Some psql features might not work.
# Type "help" for help.
# 
# th30z=> select foo;
#  a | b 
# ---+---

kahnwong

import json
import os, glob

filename = glob.glob("*plain*.json")[0]
with open(filename, "r") as f:
    d = json.loads(f.read())

data = d["db"]["entries"]

out = []