I hereby claim:
- I am 0xd0cf11e on github.
- I am 0xd0cf11e (https://keybase.io/0xd0cf11e) on keybase.
- I have a public key ASBr_4EpK2bSUVE_kwSRdxNLliM5A_qkEIOrIfg5-abQIAo
To claim this, I am signing this object:
Suweera De Souza 0xd0cf11e
0xd0cf11e
/ keybase.md
Created
March 8, 2020 01:38
0xd0cf11e
/ extract_lucify_rsrcs.py
Last active
December 10, 2024 13:44
Scripts for extracting payloads from Lucifer's resources.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import struct | |
| import pefile | |
| import argparse | |
| def decrypt_payload(payload): | |
| # The xor key hasn’t changed | |
| size = len(payload) | |
| key = 0x58 | |
| decoded = b'' | |
| for x in range(size): |