Skip to content

Instantly share code, notes, and snippets.

View wesinator's full-sized avatar

Wes wesinator

View GitHub Profile
@wesinator
wesinator / some_vba_notes.md
Last active March 3, 2020 19:07 — forked from adricnet/some_vba_notes.md
Some notes on VBA analysis

Some VBA notes

Tools

  • Unix(Remnux): viper.li, oletools, & Didier's tools
  • Windows: Office Excel (VBE) & Visual Studio Community (VSC), officemalscanner
  • Editors: scite, VS Code
  • d-scan
  • Vba2Graph
@wesinator
wesinator / tql_queries.md
Last active October 21, 2019 23:38 — forked from fhightower/tql_queries.md
List of helpful TQL (ThreatConnect Query Language) Queries and Browse Screen Views for ThreatConnect

View tasks assigned to me that are not completed or deferred:

typeName in ("Task") and taskAssignee = me and taskStatus != "Completed" and taskStatus != "Deferred"

View internationalized domains:

typeName in ("Host", "URL") and summary contains "xn--"

View over 50 security blogs in ThreatConnect:

@wesinator
wesinator / normcore-llm.md
Last active August 30, 2023 15:18 — forked from veekaybee/normcore-llm.md
Normcore LLM Reads
@wesinator
wesinator / linkify.js
Created February 20, 2024 06:14 — forked from MichaelPaulukonis/linkify.js
simple linkify (from MS Visual Studio upgrade report). See also: http://benalman.com/code/projects/javascript-linkify/examples/linkify/
// Linkifies the specified text content, replaces candidate links with html links
function linkify(text)
{
if(!text || 0 === text.length)
{
return text;
}
// Find http, https and ftp links and replace them with hyper links
var urlLink = /(http|https|ftp)\:\/\/[a-zA-Z0-9\-\.]+(:[a-zA-Z0-9]*)?\/?([a-zA-Z0-9\-\._\?\,\/\\\+&%\$#\=~;\{\}])*/gi;
@wesinator
wesinator / lookalike_codes.json
Created March 30, 2024 19:28 — forked from J0w03L/lookalike_codes.json
A JSON list of Unicode character lookalikes for a-z, A-Z, based from https://util.unicode.org/UnicodeJsps/confusables.jsp
{
"a": ["\ud835\udf70", "a", "\uff41", "\ud835\udc4e", "\ud835\uddee", "\ud835\udd52", "\ud835\udd86", "\ud835\udcea", "\ud835\ude8a", "\ud835\udfaa", "\u0430", "\u0251", "\u03b1", "\ud835\udd1e", "\ud835\udc82", "\ud835\ude22", "\ud835\udec2", "\u237a", "\ud835\udcb6", "\ud835\ude56", "\ud835\udf36", "\ud835\udefc", "\ud835\udc1a", "\ud835\uddba"],
"A": ["\ud835\ude70", "A", "\ud835\udc34", "\u15c5", "\ud835\udc68", "\ud835\udea8", "\ud835\udd6c", "\ud835\udda0", "\u0410", "\u0391", "\ud835\udee2", "\ud835\udf56", "\ud835\udc9c", "\ud835\udf1c", "\ud81b\udf40", "\ud835\udcd0", "\ud835\udf90", "\uff21", "\ud835\uddd4", "\ud835\ude08", "\u13aa", "\ua4ee", "\ud835\udc00", "\ud835\udd04", "\ud835\udd38", "\ud800\udea0", "\ud835\ude3c"],
"b": ["\ud835\udc4f", "\ud835\uddef", "b", "\u0184", "\ud835\udd53", "\ud835\udd87", "\u042c", "\ud835\udceb", "\ud835\ude8b", "\u13cf", "\u15af", "\ud835\udd1f", "\u1472", "\ud835\udc83", "\ud835\ude23", "\ud835\udcb7", "\ud835\ude57", "\ud835\udc1b", "\ud835\uddbb"]