Skip to content

Instantly share code, notes, and snippets.

View 0xeb's full-sized avatar
💭

Elias Bachaalany 0xeb

💭
View GitHub Profile
@0xeb
0xeb / gist:68d5ff3ce0f466e45c5395796403902e
Created April 13, 2019 01:28 — forked from Rottweiler/gist:44fe4461a4552acf303a
Heavily obfuscated UnConfuserEx tool
UnConfuserEx https://mega.nz/#!U1hxwQKb!7WFBSjrZgg8ieFp15K0RJW8rWuyMHZTO9bpCekhBQfY
ConfuserExDupPopPatcher https://mega.nz/#!IkhHzZDS!vPYABdYJtuDIGJBHdKzwIqLajxugJaNlENWr5CWjNlo
ConfuserExStringDecryptor https://mega.nz/#!plhxRJyY!Vq9eRS-gixC__q75860gDD8Tcm_ncOfCCCP_HQKguUM
ConfuserExCallFixer https://mega.nz/#!0gZFlbwC!KFka_Kxe-GuU-d8COni91xmGPbiRnbX6lBLYAomn7No
I'm not responsible for what you do with these -- they may very well be backdoored
@0xeb
0xeb / ctopy.py
Created May 18, 2020 19:05
hexrays pseudo-c to python (stupid poc based on "ctopy", https://github.com/pfalcon/ctopy)
#!/usr/bin/env python
"""
ctopy -- a quick and dirty C-to-Python translator.
Libraries not mapped that theoretically could be: curses.panel, dbm,
md5, popen2, pty, resource, sha, subprocess, syslog, time. Some of these
would need more elaborate machinery for method translation.
Python library bindings are as of 2.6a0.
"""
@0xeb
0xeb / ida_undo.py
Created July 7, 2021 02:05
Add programmable undo support to IDAPython
"""
IDAPython Extension library (c) Elias Bachaalany.
Undo utilities
"""
import idaapi
# ---------------------------------------------------------------
class undo_handler_t(idaapi.action_handler_t):