Skip to content

Instantly share code, notes, and snippets.

View tallpid's full-sized avatar

tallpid tallpid

View GitHub Profile
#!/usr/bin/env python3
"""
Safe RAM Discovery + Dump using PCILeech
Uses: display (probe) + dump (extract)
No -probe, no reset, no exit code bugs
"""
import subprocess
import sys
import os
@tallpid
tallpid / pciedump.sh
Last active November 3, 2025 16:23
PCIE Squirrel Dump
#!/bin/bash
# ram_map_and_dump_safe.sh — FIXED VERSION
# ------------------------------------------------------------
# Uses ONLY: pcileech display + dump
# Parses output to detect valid memory
# No exit code assumptions → works reliably
# ------------------------------------------------------------
set -euo pipefail
@tallpid
tallpid / Sh
Created November 3, 2025 15:59
Dump PCIe Squirrel
#!/bin/bash
# ram_discover_safe.sh
# ------------------------------------------------------------
# Safe RAM-size discovery for PCILeech (no -probe, no reset)
# Works with Screamer Squirrel on Linux/ARM64/OpenWRT
# ------------------------------------------------------------
set -euo pipefail
# ---------- CONFIG ----------
@tallpid
tallpid / parse_krn.py
Created April 12, 2021 14:58
Updated to IDA Pro 7.4 script to find kernel base with VMWare gdb stub
'''
Module Name:
find_nt_imagebase_x64.py
Abstract:
Discovers the base address of ntoskrnl when IDA's GDB stub is
loaded by leveraging the IDT.
NOTE: This is only compatible for 64-bit editions of Windows.
Serial Keys:
FU512-2DG1H-M85QZ-U7Z5T-PY8ZD
CU3MA-2LG1N-48EGQ-9GNGZ-QG0UD
GV7N2-DQZ00-4897Y-27ZNX-NV0TD
YZ718-4REEQ-08DHQ-JNYQC-ZQRD0
GZ3N0-6CX0L-H80UP-FPM59-NKAD4
YY31H-6EYEJ-480VZ-VXXZC-QF2E0
ZG51K-25FE1-H81ZP-95XGT-WV2C0
VG30H-2AX11-H88FQ-CQXGZ-M6AY4