Skip to content

Instantly share code, notes, and snippets.

View sisoma2's full-sized avatar
🏠
Working from home

Marc sisoma2

🏠
Working from home
View GitHub Profile
@sisoma2
sisoma2 / keybase.md
Last active April 12, 2019 18:05
keybase.md

Keybase proof

I hereby claim:

  • I am sisoma2 on github.
  • I am sisoma2 (https://keybase.io/sisoma2) on keybase.
  • I have a public key ASB1bNeJcasO6TThNSssPEaDV4qqOZhxzn3_ealJaQXMEwo

To claim this, I am signing this object:

@sisoma2
sisoma2 / z3_baby_reindeer_solver.py
Created November 8, 2018 11:30
Using z3 SMT solver to resolve Baby REindeer @CERT_Polska crackme
from z3 import *
xs = [BitVec('x{}'.format(i), 8) for i in xrange(25)]
s = Solver()
for x in xs:
s.add((x & ~0xff) == 0)
s.add(xs[0] == 101)
s.add(xs[14] ^ xs[0] == 14)
@sisoma2
sisoma2 / bruteforce_md5.php
Created October 8, 2018 10:13
nn8ed CTF - Pokevault
<?php
define('HASH_ALGO', 'md5');
define('PASSWORD_MAX_LENGTH', 8);
$charset = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
$str_length = strlen($charset);
$salt = 'some long string ... blah blah blah';
function check($payload)
{
@sisoma2
sisoma2 / IDA_API_Renamer.py
Last active May 8, 2018 15:33
Read APIs from text file from x64dbg and rename pointers in IDA
### Main
def API_Renamer(filename, destination_api_offset):
count = 0
print "[+] Reading imports from {filename}...\n".format(filename=filename)
with open(filename) as f:
for line in f:
line_values = line.strip().split(" ")
api_address = line_values[1]
if (api_address != "00000000"):