Skip to content

Instantly share code, notes, and snippets.

Avatar

Silas Cutler silascutler

View GitHub Profile
@silascutler
silascutler / strfmt.csv
Created Feb 13, 2019
View strfmt.csv
StringFmt Assessed Name Description
CFE Create File Error Sent if an error in calling CreateFileA() in sub_401C20()
GFSE Get File Size Error Sent if an error in calling GetFileSize() in sub_401C20()
LAE Local Alloc Error Sent if an error in calling LocalAlloc() in sub_401C20()
RFE Read File Error Sent if an error in calling ReadFile() in sub_401C20()
CPE Creat Process Error Sent if an error in calling CreateProcess() in WinMain()
DFE Delete File Error Sent if an error after calling function that calls DeleteFile() in WinMain()
@silascutler
silascutler / keybase.md
Created Nov 28, 2018
View keybase.md

Keybase proof

I hereby claim:

  • I am silascutler on github.
  • I am silascutler (https://keybase.io/silascutler) on keybase.
  • I have a public key ASDDh8SdafblsJStYjOI-H-ItS33KeKle1vBidzY2cpeLgo

To claim this, I am signing this object:

@silascutler
silascutler / IDA describe flags
Created Feb 17, 2018
IDAPython routine to describe a function flags
View IDA describe flags
from idautils import *
from idaapi import *
from idc import *
def descFlags(inflags):
if inflags & FUNC_NORET:
print "Flag: FUNC_NORET"
if inflags & FUNC_FAR:
print "Flag: FUNC_FAR"
@silascutler
silascutler / lsandbox
Created Sep 26, 2017
Fast, Local script to sandbox PE files and record network activity
View lsandbox
#!/bin/bash
# (C) Silas `p1nk` Cutler 2017
# Simple Sandbox Runner
VM_NAME="sandbox"
VM_USER="administrator"
VM_PASS="password"
@silascutler
silascutler / keybase.md
Created Oct 8, 2014
View keybase.md

Keybase proof

I hereby claim:

  • I am silascutler on github.
  • I am silascutler (https://keybase.io/silascutler) on keybase.
  • I have a public key whose fingerprint is C55A FC29 84F9 375A 0C12 CF4F 3E18 4A6C 6554 A731

To claim this, I am signing this object: