Skip to content

Instantly share code, notes, and snippets.

View dfirfpi's full-sized avatar
🤖

dfirfpi dfirfpi

🤖
View GitHub Profile
@dfirfpi
dfirfpi / unssz.py
Created May 4, 2017 22:55
Decrypt Samsung / Seagate Secure Zone crypto container (without knowing the password... uao...).
#!/usr/bin/python
# -*- coding: utf-8 -*-
#
# Copyright 2017, Francesco "dfirfpi" Picasso <francesco.picasso@gmail.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
@dfirfpi
dfirfpi / w10pfdecomp.py
Last active September 14, 2023 10:42
Windows 10 Prefetch (native) Decompress
#!/usr/bin/python
# -*- coding: utf-8 -*-
#
# Copyright 2015, Francesco "dfirfpi" Picasso <francesco.picasso@gmail.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
@dfirfpi
dfirfpi / uapc_inject.py
Created March 17, 2017 22:38
QueueUserAPC injection Python demo test
#!/usr/bin/python
# -*- coding: utf-8 -*-
#
# Copyright 2017, Francesco "dfirfpi" Picasso <francesco.picasso@gmail.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
@dfirfpi
dfirfpi / wanna_sink_check.py
Last active March 20, 2018 13:50
Check if WannaCry SinkHole is reachable, as per its code.
from __future__ import print_function
import ctypes
DLL_KERNEL32 = ctypes.windll.kernel32
DLL_WININET = ctypes.windll.wininet
handle_inet = DLL_WININET.InternetOpenA(None, 1, None, None, None)
response = DLL_WININET.InternetOpenUrlA(
handle_inet,
@dfirfpi
dfirfpi / get_baudrate.c
Created November 16, 2016 21:19
Baud Rate Detector
#include <termios.h>
#include <unistd.h>
#include <stdio.h>
// Author: clacke
// Ref: http://unix.stackexchange.com/questions/72979/how-does-cat-know-the-baud-rate-of-the-serial-port
// do a lookup for the value returned in termbits.h
int main() {