thebabush thebabush

## driver_dump.py
import glob
import os

import lief


def main(drivers_path):
    drivers = sorted(glob.glob(os.path.join(drivers_path, '*.sys')))
    for driver in drivers:
        pe = lief.parse(driver)

## crx.py
# Because I was on Windows, without dd :)

import os
import struct
import sys


if len(sys.argv) != 3:
	print "Usage:", sys.argv[0], "<crx file> <zip file>"
	exit(0)

## xp.js
/**
 * Helper to make Javascript's XPath calls simpler.
 * Basically you just need to give a query to the xp function.
 * Especially useful in manual testing of XPath strings inside a browser's console.
 *
 * Example:
 *  xp("//body/text()")
 *
 * Author: Paolo Montesel
 * License: https://opensource.org/licenses/MIT

## fix-drawio-svg.py
#!/usr/bin/env python3

"""
draw.io uses foreignObject tags to put fancy text on SVGs.
The structure it creates is like this:

```
<switch>
    <foreignObject>...</foreignObject>
    <text>...</text>

## merge.sh
python3 -c 'import json; import glob; import itertools; print(json.dumps(list(itertools.chain(*[json.load(open(f, "rb")) for f in glob.glob("**/compile_commands.json", recursive=True)])), indent=4))' > ../compile_commands.json

## 00 contents
Linux perf fixes
01 overview
02 patch to make linux perf report work cleanly with jitdump remap
03 perf script for sample input file showing mmap overwrite
04 perf report before example
05 perf report after example
--
KDAB Hotspot specific fixes
06 patch to make linux perf output output program headers for KDAB hotspot
07 patch to make hotspot UI load cleanly with jitdump remap

## vigorun.py
#!/usr/bin/env python3

import pygatt


"""
adc    <= 1000
age    <=  120
heigth <=  269
weight <=  220

## CVE-2019-16160.txt
[Suggested description]
An integer underflow in the SMB server of MikroTik RouterOS 6.43.16
(x86 and CHR) allows remote unauthenticated attackers to crash the
service.

------------------------------------------

[Additional Information]
The vulnerability likely affects other versions too.
The vulnerability might be exploitable to achieve RCE.

## spidermonkey.yml

meta:
  id: spidermonkey
  endian: le

seq:
  - id: build_id_length
    type: u4
  - id: build_id
    type: str

## translate_str.py
#!/usr/bin/env python3

"""
Quick'n'dirty script to translate subs using Yandex.

It all started because I didn't have enough time to finish a Japanese movie
that I was watching heading back home from DEF CON 27.
Anyway, I managed to get a copy of the movie (**cough cough**) but my 日本語
is really bad and the only subs I could find were in Chinese.
So I decided to bear the automatic translation for the remaining 30 minutes
	import glob
	import os

	import lief


	def main(drivers_path):
	drivers = sorted(glob.glob(os.path.join(drivers_path, '*.sys')))
	for driver in drivers:
	pe = lief.parse(driver)
	# Because I was on Windows, without dd :)

	import os
	import struct
	import sys


	if len(sys.argv) != 3:
	print "Usage:", sys.argv[0], "<crx file> <zip file>"
	exit(0)
	/**
	* Helper to make Javascript's XPath calls simpler.
	* Basically you just need to give a query to the xp function.
	* Especially useful in manual testing of XPath strings inside a browser's console.
	*
	* Example:
	* xp("//body/text()")
	*
	* Author: Paolo Montesel
	* License: https://opensource.org/licenses/MIT
	#!/usr/bin/env python3

	"""
	draw.io uses foreignObject tags to put fancy text on SVGs.
	The structure it creates is like this:

	```
	<switch>
	<foreignObject>...</foreignObject>
	<text>...</text>
	Linux perf fixes
	01 overview
	02 patch to make linux perf report work cleanly with jitdump remap
	03 perf script for sample input file showing mmap overwrite
	04 perf report before example
	05 perf report after example
	--
	KDAB Hotspot specific fixes
	06 patch to make linux perf output output program headers for KDAB hotspot
	07 patch to make hotspot UI load cleanly with jitdump remap
	#!/usr/bin/env python3

	import pygatt


	"""
	adc <= 1000
	age <= 120
	heigth <= 269
	weight <= 220
	[Suggested description]
	An integer underflow in the SMB server of MikroTik RouterOS 6.43.16
	(x86 and CHR) allows remote unauthenticated attackers to crash the
	service.

	------------------------------------------

	[Additional Information]
	The vulnerability likely affects other versions too.
	The vulnerability might be exploitable to achieve RCE.

	meta:
	id: spidermonkey
	endian: le

	seq:
	- id: build_id_length
	type: u4
	- id: build_id
	type: str
	#!/usr/bin/env python3

	"""
	Quick'n'dirty script to translate subs using Yandex.

	It all started because I didn't have enough time to finish a Japanese movie
	that I was watching heading back home from DEF CON 27.
	Anyway, I managed to get a copy of the movie (cough cough) but my 日本語
	is really bad and the only subs I could find were in Chinese.
	So I decided to bear the automatic translation for the remaining 30 minutes