luca-m

#!/usr/bin/env python

import Image
import sys

def xorImage( infile ):
    try:
        im = Image.open( infile )
    except IOError:
        print "Cant load", infile

luca-m

#!/usr/bin/python

import zlib,sys,os

print 'Usage: %s <infile> <offset-addr> <length> <outfile>' % sys.argv[0]

if len(sys.argv) < 5:
    exit(-1)

fr = open(sys.argv[1], 'rb')

luca-m

<!-- 
   ...
 -->
<option id="gnu.c.compiler.option.include.paths.651068615" name="Include paths (-I)" superClass="gnu.c.compiler.option.include.paths" valueType="includePath">
	<listOptionValue builtIn="false" value="/usr/local/include/opencv"/>
</option>
<!-- 
   ...
 -->
<option id="gnu.cpp.link.option.libs.2101947007" name="Libraries (-l)" superClass="gnu.cpp.link.option.libs" valueType="libs">

luca-m

#opencv
import cv2.cv as cv
import cv2
import numpy as np

def build_filters():

    filters = []
    ksize = 31
    for theta in np.arange(0, np.pi, np.pi / 32):

luca-m

# intervals
equal.count(seq(0,10,1),4)

luca-m

#!/usr/bin/python

# Connects to servers vulnerable to CVE-2014-0160 and looks for cookies, specifically user sessions.
# Michael Davis (mike.philip.davis@gmail.com)

# Based almost entirely on the quick and dirty demonstration of CVE-2014-0160 by Jared Stafford (jspenguin@jspenguin.org)

# The author disclaims copyright to this source code.

import select

luca-m

#!/usr/bin/env python2

# Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford (jspenguin@jspenguin.org)
# The author disclaims copyright to this source code.

import sys
import struct
import socket
import time
import select

luca-m

#
# Upload a sample to VirusTotal and pretty print the report. All in a handy alias.  
#
# Dependecies:
#
#  * python > 2.7
#  * pip install Pygments==1.4
#  * curl
#  * VirusTotal API key
#

luca-m

# ----------------------------------------------------------------------
#	Radare2 
#		(Quick n'dirty) Cheat-Sheet
# 													lucam.ko@gmail.com
# ----------------------------------------------------------------------
# See http://radare.org/doc/html/contents.html for details
# ----------------------------------------------------------------------


# MISC

luca-m

/*
 * Optimized egghunt shellcode for win32 (32 bytes)
 *
 * Credits: http://www.hick.org/~mmiller/shellcode/win32/egghunt_syscall.c
 *
 * Description
 *
 *    This code works by abusing an NT syscall (NtAccessCheckAndAuditAlaram)
 *    whereby it uses the kernel to validate whether or not a set of addresses
 *    is valid, and, if it is, whether or not they match the 8 byte egg we're