dev-zzo

/*
 * D-LINK products formware image unpacker tool.
 * Written by dev_zzo for personal research.
 * Use at your own risk.
 */
 
#include <stdio.h>
#include <stdint.h>
#include <endian.h>
#include <malloc.h>

dev-zzo

PXD File Format Description

This file is created in response to rather poor documentation [1] for PXD file format consumed by Autodesk Pixlr and other peoducts (e.g., Autodesk SketchBook Pro).

File Layout

The PXD file, as noted by the few lines in the docs, consists of a header, followed by an array of layers, and then with composite pixel data (on versions >= 3?). All integers within the file are big-endian. The whole file is compressed with zlib.

dev-zzo

#
# BUGS:
# 
# * Data is not handled at all.
# 
# * Imports which are either IMPORT_NAME_NOPREFIX or IMPORT_NAME_UNDECORATE
#   should be properly restored -- make a huge map?..
#

import idaapi

dev-zzo

//
// copyright (c) 2014 by 1801BM1@gmail.com
//______________________________________________________________________________
//
`timescale 1ns / 1ns

module vm80a
(
	input				pin_clk,			// global module clock (no in original 8080)
	input				pin_f1,			// clock phase 1 (used as clock enable)

dev-zzo

//--------------------------------------
//--- 010 Editor v6.0 Binary Template
//
// File: ff4save.bt
// Author: DJ
// Revision: 1
// Purpose: Parse FF4 save slot.
//--------------------------------------

local int doSteam = -1;

dev-zzo

"""

SAGEM ROUTER FAST 3304/3464/3504 - telnet root password generator.

Work based on: http://1337day.com/exploit/16687

"""

import sys

dev-zzo

#!/usr/bin/python
"""Utility functions to work with character patterns."""

__lower_alpha = 'abcdefghijklmnopqrstuvwxyz'
__upper_alpha = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ'
__numeric = '0123456789'

def pattern_create(length, charsets=None):
	"""Generates a unique, nonrepeating pattern of a given length.

dev-zzo

<?xml version="1.0"?>
<root xmlns="urn:schemas-upnp-org:device-1-0">
  <specVersion>
    <major>1</major>
    <minor>0</minor>
  </specVersion>
  <URLBase>http://172.16.90.254:49152</URLBase>
  <device>
    <deviceType>urn:schemas-upnp-org:device:InternetGatewayDevice:1</deviceType>
    <friendlyName>Cisco VPN Router</friendlyName>

dev-zzo

MS16-005 (CVE-2016-0009) Win32k Remote Code Execution Vulnerability info

just look at PFTOBJ::bUnloadAllButPermanentFonts

dev-zzo

Global pointer variables misused in C programs

TL;DR: load global variables into local ones before use.

I've spotted a quite widespread misuse of global pointer variables. The issue is easily demonstrated by the following simplified example.

struct some_type_t {
    int a1;
    int a2;