gitpraetorianlabs

require 'rest-client'
require 'json'
require 'pp'

class CryptoAPI

  def initialize(email)
    @base = 'http://crypto.praetorian.com'
    @email = email
    @token = self.token

gitpraetorianlabs

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>

int main(void) {
    int sockfd;

gitpraetorianlabs

import socket, sys , base64, struct, string, time
from getopt import getopt as GetOpt, GetoptError

def usage():
    print ""
    print "Socket_bof solution for DVRF_v03"
    print "By: Elvis Collado [b1ack0wl]"
    print ""
    print "Usage: %s -s source.ip -d dst.ip -p dst.port" % sys.argv[0]
    print ""

gitpraetorianlabs

#include <string.h>
#include <stdio.h>

//Simple BoF by b1ack0wl for E1550

int main(int argc, char **argv[]){
  char buf[200] ="\0";
  if (argc < 2){
    printf("Usage: stack_bof_01 <argument>\r\n-By b1ack0wl\r\n");
    exit(1);

gitpraetorianlabs

# cat /proc/11554/maps
00400000-00402000 r-xp 00000000 1f:02 218        /pwnable/ShellCode_Required/socket_bof
00441000-00442000 rw-p 00001000 1f:02 218        /pwnable/ShellCode_Required/socket_bof
2aaa8000-2aaad000 r-xp 00000000 1f:02 440        /lib/ld-uClibc.so.0
2aaad000-2aaae000 rw-p 2aaad000 00:00 0
2aaec000-2aaed000 r--p 00004000 1f:02 440        /lib/ld-uClibc.so.0
2aaed000-2aaee000 rw-p 00005000 1f:02 440        /lib/ld-uClibc.so.0
2aaee000-2aafe000 r-xp 00000000 1f:02 445        /lib/libgcc_s.so.1
2aafe000-2ab3d000 ---p 2aafe000 00:00 0
2ab3d000-2ab3e000 rw-p 0000f000 1f:02 445        /lib/libgcc_s.so.1

gitpraetorianlabs

                                     =-------------------------=
                                     | [0x4003b0]              |
                                     | main:                   | // Main Function
                                     | (fcn) sym.main 260      |
                                     | addiu sp, sp, -0x28     |
                                     | sw ra, 0x24(sp)         |
                                     | sw fp, 0x20(sp)         |
                                     | move fp, sp             |
                                     | lui gp, 0x42            |

gitpraetorianlabs

#include <stdio.h>

// What if....
// This is to analyze how basic branching works on MIPS
// by b1ack0wl

int main(int argc, char **argv[]){
if (argc < 2 ){
    printf("Usage: %s number", argv[0]);
    return 1;

gitpraetorianlabs

=------------------------=
| [0x4003b0]             |
| main:                  | // Start in Main but is called by the libc constructor
| (fcn) sym.main 68      |
| addiu sp, sp, -0x28    |
| sw ra, 0x24(sp)        | // Saved Return Address
| sw fp, 0x20(sp)        |
| move fp, sp            |
| sw zero, 0x18(fp)      |
| addiu v0, zero, 1      |

gitpraetorianlabs

#include <stdio.h>

// Function callception!
// This is to analyze what happens when a function calls a function.
// by b1ack0wl

int call_one(); // declaration
int call_two(); // declaration

void main(){

gitpraetorianlabs

=-------------------------------=
| [0x4003b0]                    |
| main: |
| (fcn) sym.main 188            |
| addiu sp, sp, -0x60           |
| sw ra, 0x5c(sp)               |
| sw fp, 0x58(sp)               |
| move fp, sp                   |
| sw zero, 0x30(fp)             | // Initialize int a to 0
| addiu v0, zero, 1             | // Perform (0+1) and store the unsigned result in register $v0