This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #include <array> | |
| #include <cassert> | |
| #include <cstddef> | |
| #include <cstdint> | |
| #include <cstdio> | |
| #include <immintrin.h> | |
| #include <unistd.h> | |
| #include <sys/syscall.h> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| https://godbolt.org/z/9633WhEYY | |
| https://godbolt.org/z/bY66b7qqG | |
| https://gist.github.com/vient/0264b17c517edc86c7ba211f4e3a8d58 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| .PHONY: nopie pie static hook clean | |
| nopie: | |
| gcc -no-pie main.c -o main | |
| pie: | |
| gcc main.c -o main | |
| static: | |
| gcc -static main.c -o main |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python3 | |
| import functools | |
| import operator | |
| import sys | |
| import z3 | |
| def rev(state): | |
| s = z3.Solver() | |
| old = z3.Bools(' '.join(f'a{i}' for i in range(len(state)))) |
vient
/ 0ctf_plugin.py
Created
June 29, 2020 21:30
IDA processor extension plugin for "patching" purposes
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import idaapi | |
| import idc | |
| # idautils.DecodeInstruction(here()).itype | |
| JMP = 0x56 | |
| JL = 0x40 | |
| JLE = 0x41 | |
| JG = 0x3E | |
| JE = 0x55 | |
| JZ = JE |
vient
/ ida_launcher.bat
Last active
December 24, 2022 06:09
Add IDA to context menu. Download as ZIP, unpack to safe place (don't delete after!) and run setup.bat. You will get "Open with IDA" in context menu. Requires WSL installed with `file` installed inside.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| @echo off | |
| setlocal | |
| reg query HKCR\IDApro.Database32\shell\open\command > NUL | |
| if errorlevel 1 goto idb_handler_not_found | |
| for /f tokens^=2^ delims^=^" %%a in ('reg query "HKCR\IDApro.Database32\shell\open\command" ^| findstr /ri "REG_SZ"') do set IDA_DIR=%%~dpa | |
| echo IDA folder %IDA_DIR% |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python3 | |
| import ππΆπ΄ | |
| import ππΊπ«β om | |
| import ππ΅π»πΎππ | |
| import ο½π―πο½π πΉο½ π½ππ₯π | |
| from ο½πΆπ¨ο½ππ£tπ import ββ ββο½ΕΏ as Lπ¦ππα΅£π¬ | |
| ππ‘π΄πͺοΌ―π«β°_πΎπ΄π²βππΎ = {} | |
| def π§ππ΅π_ο½π£β±ππde_π·ππ¦ππ€(): |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import os | |
| import sys | |
| FLAIR_DIR = r'D:\work\ida\7.5\flair75\bin\win' | |
| PCF = os.path.join(FLAIR_DIR, "pcf.exe") | |
| SIGMAKE = os.path.join(FLAIR_DIR, "sigmake.exe") | |
| def boost_lib_to_desc(lib): | |
| assert 'mt-x' in lib, 'Only /MT libs' | |
| tokens = lib.split('.')[0].split('-') |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| .intel_syntax noprefix | |
| .code64 | |
| begin: | |
| lea r8, [rip+begin] | |
| lea r9, [rip+spinlock] | |
| mov r10, 0xF0 | |
| # save shellcode to the stack |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| //////////////////////// | |
| // USER DEFINED RULES // | |
| //////////////////////// | |
| // MFC/ATL strings | |
| R9000 : { ptn : "CStringT<char,\\s*StrTraitMFC(_DLL)?<char,\\s*(ATL::)?ChTraits(CRT|OS)<char>>>", rpl : "CStringA" }, | |
| R9001 : { ptn : "CStringT<wchar_t,\\s*StrTraitMFC(_DLL)?<wchar_t,\\s*(ATL::)?ChTraits(CRT|OS)<wchar_t>>>", rpl : "CStringW" }, | |
| R9002 : { ptn : "CStringT<char,\\s*StrTraitATL(_DLL)?<char,\\s*(ATL::)?ChTraits(CRT|OS)<char>>>", rpl : "CAtlStringA" }, | |
| R9003 : { ptn : "CStringT<wchar_t,\\s*StrTraitATL(_DLL)?<wchar_t,\\s*(ATL::)?ChTraits(CRT|OS)<wchar_t>>>", rpl : "CAtlStringW" }, |
NewerOlder