Skip to content

Instantly share code, notes, and snippets.

@zhangyoufu
zhangyoufu / check-hyperv-enlightenment.c
Created November 17, 2024 18:24
check enabled Hyper-V Enlightenment inside VM
#include <intrin.h>
#include <stdbool.h>
#include <stdint.h>
#include <stdio.h>
/******************************************************************************/
// include/qemu/bitops.h
#define BIT(nr) (1UL << (nr))
@zhangyoufu
zhangyoufu / gist:0b3123fe37e2906536827ace81c0ad5d
Created November 3, 2024 09:40
Windows Processor Architecture Enumeration
0: PROCESSOR_ARCHITECTURE_INTEL
1: PROCESSOR_ARCHITECTURE_MIPS
2: PROCESSOR_ARCHITECTURE_ALPHA
3: PROCESSOR_ARCHITECTURE_PPC
4: PROCESSOR_ARCHITECTURE_SHX
5: PROCESSOR_ARCHITECTURE_ARM
6: PROCESSOR_ARCHITECTURE_IA64
7: PROCESSOR_ARCHITECTURE_ALPHA64
8: PROCESSOR_ARCHITECTURE_MSIL
9: PROCESSOR_ARCHITECTURE_AMD64
@zhangyoufu
zhangyoufu / getgo.sh
Last active July 25, 2024 07:43
Download latest Go release and install to /opt
#!/bin/sh
not_available() { echo -- "$1 is not available"; exit 1; }
ensure_command_available() { which -- "$1" >/dev/null && return; not_available "$1"; }
ensure_gnu_tar() { tar --version | grep -F 'GNU tar' >/dev/null || not_available 'GNU tar'; }
ensure_command_available curl
ensure_command_available jq
ensure_gnu_tar
@zhangyoufu
zhangyoufu / tiger-vnc.rb
Created June 17, 2024 02:50
tiger-vnc Homebrew Formula with ffmpeg for PiKVM H.264 encoding
class TigerVnc < Formula
desc "High-performance, platform-neutral implementation of VNC"
homepage "https://tigervnc.org/"
url "https://github.com/TigerVNC/tigervnc/archive/refs/tags/v1.13.1.tar.gz"
sha256 "b7c5b8ed9e4e2c2f48c7b2c9f21927db345e542243b4be88e066b2daa3d1ae25"
license "GPL-2.0-or-later"
# Tags with a 90+ patch are unstable (e.g., the 1.9.90 tag is used for the
# 1.10.0 beta release) and this regex should only match the stable versions.
livecheck do
@zhangyoufu
zhangyoufu / certs.txt
Created March 7, 2024 10:47
A configuration profile needed by VirtualBox VBoxHeadless, signed by Apple, valid for 18 years, grants several entitlements
% openssl pkcs7 -print_certs -text -in embedded.provisionprofile -inform der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134752589830791184 (0x1debcc4396da010)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
Validity
Not Before: Feb 7 21:48:47 2013 GMT
Not After : Feb 7 21:48:47 2023 GMT
@zhangyoufu
zhangyoufu / gdb.txt
Last active May 10, 2024 17:22
The architecture-specific signal handling code may adjust RIP/RAX to restart interrupted syscall. Address set be tracer via PTRACE_SETREGS may be decreased by 2 bytes unexpectedly on i386/x86-64. To workaround this behavior, tracer have to check whether tracee is in system call and whether the errno indicates restartable.
(gdb) set $rip=0xdeadbeef
(gdb) c
Continuing.
Program received signal SIGSEGV, Segmentation fault.
0x00000000deadbeed in ?? ()
=> 0x00000000deadbeed:
Cannot access memory at address 0xdeadbeed
@zhangyoufu
zhangyoufu / ln.py
Created August 25, 2022 10:47
create symlink on exFAT filesystem (macOS way)
#!/usr/bin/env python3
import argparse
import hashlib
import os
SMB_SYMHDRLEN = (4+1)+(4+1)+(32+1)
MAXPATHLEN = 0x400
# see smbfs_create_windows_symlink_data
def symlink(target: str, link: str) -> None:
@zhangyoufu
zhangyoufu / cloudflare-warp-outbound-ipv4.txt
Created March 4, 2022 05:16
non-official, just for reference
8.6.112.0 US Texas Dallas
8.6.144.0 US Illinois Chicago
8.6.145.0 US Massachusetts Boston
8.6.146.0 US Tennessee Nashville
8.9.230.0 US Georgia Atlanta
8.9.231.0 US Virginia Ashburn
8.10.148.0 US New York Buffalo
8.14.199.0 SE Vastra Gotalands lan Goeteborg
8.14.201.0 BR Parana Curitiba
8.14.202.0 BR Ceara Fortaleza
@zhangyoufu
zhangyoufu / apple_pki_attribute.txt
Created January 10, 2022 06:06
Apple PKI attributes (incomplete)
1.2.840.113635.100.6.1 Leaf Certificate
1.2.840.113635.100.6.1.2 iOS Development
1.2.840.113635.100.6.1.3 iOS App Store Application
1.2.840.113635.100.6.1.4 iOS Distribution
1.2.840.113635.100.6.1.6 iOS App Store VPN Application
1.2.840.113635.100.6.1.7 3rd Party Mac Developer Application
1.2.840.113635.100.6.1.8 3rd Party Mac Developer Installer
1.2.840.113635.100.6.1.9 Mac App Store Application
1.2.840.113635.100.6.1.10 Mac App Store Installer
1.2.840.113635.100.6.1.11 Mac App Store Receipt
@zhangyoufu
zhangyoufu / reproducer.c
Created November 30, 2021 09:55
A reproducer for BUG_ON(is_vma_temporary_stack(vma)) during execve on el6 kernel, due to incomplete patch for CVE-2011-0999. See also https://access.redhat.com/solutions/1381363
/*
gcc -o reproducer reproducer.c
ulimit -s unlimited
ulimit -l unlimited
sysctl -w vm.overcommit_memory=1
./reproducer
*/
#define _GNU_SOURCE
#include <fcntl.h>