Skip to content

Instantly share code, notes, and snippets.

View ducphanduyagentp's full-sized avatar
😸
writing happy exploits

Duc Phan ducphanduyagentp

😸
writing happy exploits
274 followers · 975 following
View GitHub Profile
@ducphanduyagentp
ducphanduyagentp / generate_self_signed_certification.md
Created June 5, 2025 11:32 — forked from taoyuan/generate_self_signed_certification.md
Generation of a Self Signed Certificate

Generation of a Self Signed Certificate

Generation of a self-signed SSL certificate involves a simple 3-step procedure:

STEP 1: Create the server private key

openssl genrsa -out cert.key 2048

STEP 2: Create the certificate signing request (CSR)

openssl req -new -key cert.key -out cert.csr
@ducphanduyagentp
ducphanduyagentp / _idapro9_macarm_patch_guide.md
Created October 2, 2024 04:10 — forked from sagittarius-a/_idapro9_macarm_patch_guide.md
Guide: Patching IDA Pro 9.0 BETA

Patching the IDA Pro 9.0 BETA

Note

Obligatory disclaimer: this is for educational purposes only. I am not responsible for any damages caused by following this guide, or using any of the script(s) herein.

This guide prioritizes arm64 macOS, but may also work for other platforms.

Step 1 - Patching dylibs

@ducphanduyagentp
ducphanduyagentp / fuck.js
Created September 6, 2021 16:41 — forked from ujin5/fuck.js
WebKit RCE on ios 14.1
function sleep( sleepDuration ){
var now = new Date().getTime();
while(new Date().getTime() < now + sleepDuration){ /* do nothing */ }
}
function gc() {
for (let i = 0; i < 0x10; i++) {
new ArrayBuffer(0x1000000);
}
}
let data_view = new DataView(new ArrayBuffer(8));
@ducphanduyagentp
ducphanduyagentp / poolMetaData.json
Created July 9, 2021 15:04
{
"name": "MELD 1 TEST",
"description": "MELD 1 TEST POOL",
"ticker": "MELD1",
"homepage": "https://meld.com"
}
@ducphanduyagentp
ducphanduyagentp / chrome-v8-issue-1126249.js
Created March 22, 2021 16:47 — forked from hkraw/chrome-v8-issue-1126249.js
class Helpers {
constructor() {
this.cvt_buf = new ArrayBuffer(8);
this.cvt_f64a = new Float64Array(this.cvt_buf);
this.cvt_u64a = new BigUint64Array(this.cvt_buf);
this.cvt_u32a = new Uint32Array(this.cvt_buf);
}
ftoi(f) {
@ducphanduyagentp
ducphanduyagentp / Poison-NullByte-Bypass-Latest.md
Created August 18, 2018 03:53

Poison Null Byte Patched (or maybe not)

--- a/malloc/malloc.c
+++ b/malloc/malloc.c
@@ -4281,6 +4281,8 @@ _int_free (mstate av, mchunkptr p, int have_lock)
       prevsize = prev_size (p);
       size += prevsize;
       p = chunk_at_offset(p, -((long) prevsize));
+ if (__glibc_unlikely (chunksize(p) != prevsize))
@ducphanduyagentp
ducphanduyagentp / References.md
Created September 29, 2015 18:55
@ducphanduyagentp
ducphanduyagentp / 3_years_of_attacking_javascript_engines.txt
Created November 3, 2019 03:55 — forked from saelo/3_years_of_attacking_javascript_engines.txt
3 Years of Attacking JavaScript Engines
|=-----------------------------------------------------------------------=|
|=-------------=[ 3 Years of Attacking JavaScript Engines ]=-------------=|
|=-----------------------------------------------------------------------=|
|=------------------------------=[ saelo ]=------------------------------=|
|=-----------------------------------------------------------------------=|
The following are some brief notes about the changes that have taken place
since the release of the "Attacking JavaScript Engines" paper [1]. In
general, no big conceptional changes have happened since. Mitigations have
been added to break some of the presented techniques and, as expected, a
@ducphanduyagentp
ducphanduyagentp / virtualbox_3d_exp.py
Created October 18, 2019 19:24 — forked from peternguyen93/virtualbox_3d_exp.py
# Author : peternguyen93
import sys
sys.path.append('../') # back to vboxlib module
from vboxlib.hgcm import *
from vboxlib.chromium import *
from ctypes import *
'''
@ducphanduyagentp
ducphanduyagentp / exploit.html
Created June 24, 2019 06:00 — forked from ujin5/exploit.html
Google CTF Quals 2019 Monochromatic
<html>
<pre id='log'></pre>
<script src="mojo_bindings.js"></script>
<script src="third_party/blink/public/mojom/blob/blob_registry.mojom.js"></script>
<script src="being_creator_interface.mojom.js"></script>
<script src="food_interface.mojom.js"></script>
<script src="dog_interface.mojom.js"></script>
<script src="person_interface.mojom.js"></script>
<script src="cat_interface.mojom.js"></script>
<script>