CreateRemoteThread’s gists

CreateRemoteThread / ms-brute.py

Created April 15, 2018 08:22

	#!/usr/bin/python

	import hashlib
	import requests
	import random
	import string
	import json
	import sys

	f = open(sys.argv[1])

CreateRemoteThread / uniqlo.py

Created April 11, 2018 15:44

	#!/usr/bin/python

	from unicorn import *
	from unicorn.x86_const import *
	import sys

	key = ['\r','Z','B','E']

	def hook_mem_invalid(uc,access,address,size,value,user_data):
	if access == UC_MEM_WRITE_UNMAPPED:

CreateRemoteThread / uiu-triptych-solve.py

Created April 9, 2018 09:17

	#!/usr/bin/python

	# x/32bx ((unsigned long )($rbp-0x68))
	# a = [0x75, 0x63, 0x6b, 0x69, 0x7b, 0x7a, 0x7d, 0x64, 0x72, 0x79, 0x73, 0x6d, 0x67, 0x70, 0x68, 0x76, 0x6c, 0x6f, 0x66, 0x6e, 0x7c, 0x77, 0x65, 0x74, 0x00, 0x05, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00]
	# a = [0x75, 0x63, 0x6b, 0x69, 0x7b, 0x7a, 0x7d, 0x64, 0x72, 0x79, 0x73, 0x6d, 0x67, 0x70, 0x68, 0x76, 0x6c, 0x6f, 0x66, 0x6e, 0x7c, 0x77, 0x65, 0x74, 0x00, 0x05, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00]
	a = [0x75, 0x63, 0x6b, 0x69, 0x7b, 0x7a, 0x7d, 0x64, 0x72, 0x79, 0x73, 0x6d, 0x67, 0x70, 0x68, 0x76, 0x6c, 0x6f, 0x66, 0x6e, 0x7c, 0x77, 0x65, 0x74, 0x00, 0x05, 0x40, 0x00, 0x00, 0x00, 0x00, 0x00]
	b = "abcdefghijklmnopqrstuvwxyz\|{}"
	# ORIG: \| { } _ `
	# KEYS: 0x71 0x6a 0x61 0x5f
	f = [0x7a, 0x6d, 0x75, 0x7d, 0x6a, 0x6e, 0x64, 0x7b, 0x6f, 0x7b, 0x66, 0x5f, 0x6e, 0x64, 0x6f, 0x7b, 0x7b, 0x5f, 0x68, 0x7a, 0x5f, 0x7b, 0x67, 0x61, 0x20, 0xdf, 0xff, 0xff, 0xff, 0x7f, 0x00, 0x00]

CreateRemoteThread / uiu-hastad-solve.py

Created April 9, 2018 08:50

	import sys
	import binascii
	from Crypto.PublicKey import RSA
	from base64 import b64decode
	import itertools

	e = 3
	# a = ["10652cdfaa86ddbee1409ac7ac327a0c848081ee6e3b110867085f1074755785b0a5a6a2343b791695c3e91fdb370d5b26be3b6d2fc449c7788bbb1ab67ddc361b4115010618e39c883449b757fc1624369b440236ee65", "10652cdfaa8c9ef24fc044b5fed749888632ad132bd412f22d9d905e6ffd27b288c22884b24fe130d83aaab9c2dc6e942418dff89d2b66a66e40900db9456813d70eb63d0c38697f89ff387969d3d40163376416270965", "10652cdfaa8ab16290cf92bacf31b23d6a0ea95c2ebd6eb8afe4f038d852a7f17e98f965f299b4d00126611d403c5208a145157ed1d71079fc558eaa888e993360fac35c7a816ad183190867b1b7580a2677cd6871aa65", "10652cdfaa86ddbee1409ac7ac327a0c848081ee6e3b110867085f1074755785b0a5a6a2343b791695c3e91fdb370d5b26be3b6d2fc449c7788bbb1ab67ddc361b4115010618e39c883449b757fc1624369b440236ee65", "10652cdfaa875a9ac01e472ea5896c1d460410508b9a7c723b5ba904fb5b64d68a1e96254ba04b08c92d51f1fe6c3d6bb426e1ee8c61c8a6ff1eeab9e07f51d8057f2f0c54b27c7006539f7148484ff26a02e4cb1d3165", "10652cdfaa8c9

CreateRemoteThread / uiu-ciphertexts.txt

Created April 9, 2018 08:47

["10652cdfaa86ddbee1409ac7ac327a0c848081ee6e3b110867085f1074755785b0a5a6a2343b791695c3e91fdb370d5b26be3b6d2fc449c7788bbb1ab67ddc361b4115010618e39c883449b757fc1624369b440236ee65", "10652cdfaa8c9ef24fc044b5fed749888632ad132bd412f22d9d905e6ffd27b288c22884b24fe130d83aaab9c2dc6e942418dff89d2b66a66e40900db9456813d70eb63d0c38697f89ff387969d3d40163376416270965", "10652cdfaa8ab16290cf92bacf31b23d6a0ea95c2ebd6eb8afe4f038d852a7f17e98f965f299b4d00126611d403c5208a145157ed1d71079fc558eaa888e993360fac35c7a816ad183190867b1b7580a2677cd6871aa65", "10652cdfaa86ddbee1409ac7ac327a0c848081ee6e3b110867085f1074755785b0a5a6a2343b791695c3e91fdb370d5b26be3b6d2fc449c7788bbb1ab67ddc361b4115010618e39c883449b757fc1624369b440236ee65", "10652cdfaa875a9ac01e472ea5896c1d460410508b9a7c723b5ba904fb5b64d68a1e96254ba04b08c92d51f1fe6c3d6bb426e1ee8c61c8a6ff1eeab9e07f51d8057f2f0c54b27c7006539f7148484ff26a02e4cb1d3165", "10652cdfaa8c9ef24fc044b5fed749888632ad132bd412f22d9d905e6ffd27b288c22884b24fe130d83aaab9c2dc6e942418dff89d2b66a66e40900db9456813d70e

CreateRemoteThread / uiu-moduli.txt

Created April 9, 2018 08:46

["0xbc4ec2b74d85fb57ec07f538b59987c1150042ef76178b7af6dc09ca139dc8570226fe0317f3b73e8f98de38eb03a986496431d8526be4e65d47d86130a4370348b8a8dbba80d922f4dbac31b95f1028baac1ba8f8cab00d6e362c761da0dece81a700b92a5c1d79ec50451b3147805123e92f424d422d688ab020280d35384f", "0xd83a59170679b7d8b2199e98656717c515e06e44e65b5f7b687e4fec6d21a7e6e75ecbcf208202f210ef8e29a7ad44ab72914b1f35d502f6d7f657e5512d4b989773515cbc046ca3ffef37f3090548ac1086d96c96fe7edb9bdeb58ba635fa1582da4a85357105293139c8152d70c2ec5ec667bb91197c353cd6aafac73476df", "0xc39ab84fbf6709048427c05dbd303f0ba2f90ecdd51a809f1d8da9df0546a771e982a6bccb299c4bf12d1b0b11df88b0627563d726bb70c5121cb5722c75e35b54e6d43d09443738fe3ac8e5a8bb74b1667ddf6592359d9fc65a05a32b98a50c52f1339ed8b5fab5616d52d81a11579a83fc33e069c4d9cfb93b24d752937ced"]

CreateRemoteThread / ndh-pwn1.py

Created March 31, 2018 22:57

	#!/usr/bin/python

	import pwn
	import struct

	p = pwn.remote("rescueshell.challs.malice.fr",6060)
	# p = pwn.process("./rescue")

	raw_input("ATTACH NOW")

CreateRemoteThread / flash_glitch.v

Created March 30, 2018 10:57

	`timescale 1ns / 1ps

	module test1(
	input clk_leeched,
	output glitch_out,
	output led_out,
	input glitch_en
	);

	reg[8:0] r;

CreateRemoteThread / testvariant1-avr-atmega328p.c

Created March 25, 2018 03:45

	#define F_CPU 16000000UL
	#define BAUD 9600

	#include <util/setbaud.h>
	#include <avr/io.h>
	#include <stdio.h>

	void uart_init(void) {
	UBRR0H = UBRRH_VALUE;
	UBRR0L = UBRRL_VALUE;

CreateRemoteThread / harekaze-flea-double.py

Created February 11, 2018 15:22

	#!/usr/bin/python

	import pwn
	from pwn import *

	p = pwn.process("./flea_attack.elf")
	# p = pwn.remote("problem.harekaze.com",20175)
	raw_input("<ATTACH NOW>")
	p.recv()
	# the size is 0x04.

Norm CreateRemoteThread