Skip to content

Instantly share code, notes, and snippets.

Avatar

Viktor Oreshkin stek29

  • None
  • Moscow, Russia
View GitHub Profile
@xperylab
xperylab / decrypt_ufed_keychain.py
Created Dec 30, 2020
UFED KeychainDump Decrypter
View decrypt_ufed_keychain.py
################################################################################################
# #
# UFED keychain decrypter #
# #
# Copyright Matthieu Regnery 2020 #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation, either version 3 of the License, or #
# (at your option) any later version. #
@saelo
saelo / 3_years_of_attacking_javascript_engines.txt
Created Oct 27, 2019
3 Years of Attacking JavaScript Engines
View 3_years_of_attacking_javascript_engines.txt
|=-----------------------------------------------------------------------=|
|=-------------=[ 3 Years of Attacking JavaScript Engines ]=-------------=|
|=-----------------------------------------------------------------------=|
|=------------------------------=[ saelo ]=------------------------------=|
|=-----------------------------------------------------------------------=|
The following are some brief notes about the changes that have taken place
since the release of the "Attacking JavaScript Engines" paper [1]. In
general, no big conceptional changes have happened since. Mitigations have
been added to break some of the presented techniques and, as expected, a
@lategoodbye
lategoodbye / mainline_guide.md
Last active Oct 12, 2021
Raspberry Pi: How to cross-compile and use Mainline Kernel
View mainline_guide.md

Raspberry Pi: How to cross-compile and use Mainline Kernel

Notes on how to set up a new Ubuntu 18.04 LTS x64 environment, how to build the Mainline Kernel and place it on a Raspberry Pi OS SD card.

Procedure

  1. Install tools needed:
$ apt install git make gcc device-tree-compiler bison flex libssl-dev libncurses-dev
View CloudTabs.py
import json
import sqlite3
import zlib
# ~/Library/Safari/CloudTabs.db
# Ref: https://www.reddit.com/r/mac/comments/89qx5n/iphone_safari_tabs_into_text_list_via_icloud/
db = sqlite3.connect('CloudTabs.db')
tabs = []
@itszn
itszn / exploit.js
Created Jul 11, 2018
Exploit for JavascriptCore CVE-2018-4192
View exploit.js
// Load Int library, thanks saelo!
load('util.js');
load('int64.js');
// Helpers to convert from float to in a few random places
var conva = new ArrayBuffer(8);
var convf = new Float64Array(conva);
var convi = new Uint32Array(conva);
var convi8 = new Uint8Array(conva);
@Lonami
Lonami / botapi.py
Created Apr 9, 2018
Bot API file_id's to MtProto ID/hash pairs
View botapi.py
# File ported from @danog's repo to Python by @Lonami (@LonamiWebs):
# https://github.com/danog/MadelineProto/blob/d3cff5e0afdf625e1c83d5d6531dd463f112bbb5/src/danog/MadelineProto/TL/Conversion/BotAPIFiles.php
import struct
from base64 import b64decode, b64encode
TYPES = { # or so it seems
2: 'photo',
3: 'voice',
10: 'document/video',
@cheesecakeufo
cheesecakeufo / xpc_idapro.py
Last active Mar 7, 2018
xpc functions fix - IDA
View xpc_idapro.py
# Created to make RE-ing XPC a bit easier (in a shitty way)
# yes, somethings are hard-coded but I've done it because I don't want to spend more time on this
# created by Abraham Masri @cheesecakeufo
import re
import idaapi
import idautils
paths = ["/usr/include/xpc/xpc.h",
"/usr/include/xpc/activity.h",
@mems
mems / icloudtabs2md.js
Last active Aug 30, 2021
Generate a markdown links list from iCloud tabs
View icloudtabs2md.js
#!/usr/bin/env node
/*
Generate a markdown links list from iCloud tabs, on macOS
Usage:
./icloudtabs2md.js > icloudtabs.md
./icloudtabs2md.js | pbcopy
Require:
@Siguza
Siguza / dsc_syms.c
Last active Apr 22, 2021
dyld_shared_cache symbols to r2 flags
View dsc_syms.c
// Moved here: https://github.com/Siguza/misc/blob/master/dsc_syms.c
@alexander-hanel
alexander-hanel / yolo.py
Last active Jan 17, 2020
old and new names in idc.py (in progress)
View yolo.py
import re
import sys
import os
def load_apis():
new_old_apis = [
# start of changes for idc.py
("hasValue", "has_value"),
("byteValue", "byte_value"),
("isLoaded", "is_loaded"),