Skip to content

Instantly share code, notes, and snippets.

View larsborn's full-sized avatar

Lars Wallenborn larsborn

63 followers · 24 following
View GitHub Profile
@larsborn
larsborn / tofsee_string_decrpyt.py
Created November 20, 2022 23:35
as seen in 96baba74a907890b995f23c7db21568f7bfb5dbf417ed90ca311482b99702b72
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
import binascii
def decrypt(buf: bytes, key: int, summand: int) -> str:
ret = bytearray()
for i, c in enumerate(buf):
ret.append(c ^ key)
key += (-1 if i % 2 else 1) + summand
@larsborn
larsborn / ab0aa003d7238940cbdf7393677f968c4a252516de7f0699cd4654abd2e7ae83-config.json
Created September 9, 2021 19:57
Config from REvil sample with SHA256 hash ab0aa003d7238940cbdf7393677f968c4a252516de7f0699cd4654abd2e7ae83
{
"pk": "f+7J0epYxAarNMxVR0Rb18mIdNIr5o0/Le9oxdbAeUk=",
"pid": "$2a$12$QKlALWFyUOkhUAlOVB5LeuiilRPMgdL4kq9Ex9LPdBEioQWEgg09C",
"sub": "8506",
"dbg": false,
"et": 0,
"wipe": true,
"wht": {
"fld": [
"msocache",
@larsborn
larsborn / keybase.md
Created April 26, 2019 21:17

Keybase proof

I hereby claim:

  • I am larsborn on github.
  • I am larsborn (https://keybase.io/larsborn) on keybase.
  • I have a public key ASBUy8CRH51vm3ZdAqEgBh7uPJqDFpuQfLWdz-1mASibqwo

To claim this, I am signing this object: