Skip to content

Instantly share code, notes, and snippets.

View EgeBalci's full-sized avatar
😎

Ege Balcı EgeBalci

😎
View GitHub Profile
@nick0ve
nick0ve / babykernel.sys driver
Created April 21, 2024 18:18
Windows Kernel LPE with arbitrary RW
echo 'H4sIAAxYJWYAA+06C1hU1bprz4sBHPeMighi7GwwEKXBQUEJnYFB9+iACBiIGK8ZZBQGmhkQH90IfHF2GHZOpb0kNfXYsazMSE+nAewA+dZUNE9aZg6hhZZKZc791957ePjqcTvf/b57z+JbrMf/r3/977X23pOQUYuECCERVJcLoXrEFQ365dIJtX/grv5oh+f+++sJw/77UwvMNqrEWjzXmlNE5eVYLMV2KtdEWUstlNlC6aanUEXFRlOYTOal5GmszXzjz/+KcTjc9bn45obP+P5pdtzQ0MaOGxzH2XFTwym23cO2Ado9DafZtpFtk815BXjt3XhOikfIuFyCDrgC83vkGI68Bf2Ho8EwGMDNlfjCPzmnCgLxfQFCXqinsqWCU1712wgRKFvrXuRubh/36SJVNkIP92EQIQpvOBLwPDAjCEVA44B/UfewRYXazaibMELZ98APs5vK7dBeH8gzNIiTo3ehECoIsxpz7DkI7ZByNFnBh/TF0yBEh3FoSCrkJrCuQK234rWElXCIrIxJPJ7yNjxan6hPxf0dGC+bxxtxG3+5YVZTYXEepyOsKxYv+DZ6sfdQxf/rQldnKuV09RLlkJl0TaHyEP3kRRWonGbEXzwEjXoPXR0fvEvIYhqUKkONOAMipGbRVOagy4ekEGLEa2FCVzPlGCkXWwbgpalKFSmXWdm+jBkDwRHfSb4nLoWJ/Or47+ma+EN0tU4Jezw3AAMpANZyQCUAu0gFh5AOFA0sFXEMUCEVCWebdUqNEvwA6McCBIZJo1AYgOK7rgD2xAEsmvQKTAyhmQo5eIPLpyKQpfFDOELxagfLHzB2JRzPVnQSGGUOh3Ic5gw1sIcbaT+HNISlEwVITNsyx8KhoIZzCpCa2as+ghUhwZCm9nbEUqllqRiUUUDgKUygBoixO1eks4S+vY8n5AmETgGhjndh2Sx+8yS8OV6bxG1ewa7ZDWvwZkybjmnhlx7ES5+EjmQAKyeg7M7GPMDmJTqmSX3EeVrGWS
@theaog
theaog / update-golang.sh
Last active August 12, 2025 07:43
update-golang.sh
#!/usr/bin/env bash
set -e
tmp=$(mktemp -d)
pushd "$tmp" || exit 1
function cleanup {
popd || exit 1
rm -rf "$tmp"
}
@pojntfx
pojntfx / main.sh
Last active November 28, 2025 20:04
Bluesky/AT Protocol: cURL API Interaction Cheatsheet
#!/bin/bash
# This script resolves a DID, retrieves an API key, fetches a user's feed,
# and posts a "Hello, world" message to the user's feed.
# Resolve DID for handle
HANDLE='felicitas.pojtinger.com'
DID_URL="https://bsky.social/xrpc/com.atproto.identity.resolveHandle"
export DID=$(curl -G \
--data-urlencode "handle=$HANDLE" \
@D4stiny
D4stiny / LowUtilities.cpp
Last active February 19, 2026 05:36
A dependency-less implementation of GetModuleHandle and GetProcAddress.
//
// An implementation of GetModuleHandle and GetProcAddress that works with manually mapped modules, forwarded exports,
// without a CRT standard library, and uses no Windows API or dependencies.
//
// Author: Bill Demirkapi
// License: MIT, appended at the bottom of this document if you care about licensing and want to credit me in your own project.
//
#include <Windows.h>
#include <winternl.h>
@yakuter
yakuter / cancel-io-copy.go
Created April 25, 2021 19:25
IO Copy cancellation
// Source: https://ixday.github.io/post/golang-cancel-copy/
import (
"io"
"context"
)
// here is some syntaxic sugar inspired by the Tomas Senart's video,
// it allows me to inline the Reader interface
type readerFunc func(p []byte) (n int, err error)
@jfmaes
jfmaes / DInjectQueuerAPC.cs
Created November 13, 2020 19:00
.NET Process injection in a new process with QueueUserAPC using D/invoke - compatible with gadgettojscript
using System;
using System.Diagnostics;
using System.IO;
using System.Runtime.InteropServices;
namespace DinjectorWithQUserAPC
{
public class Program
// Compile with g++ dotnet_injectbundle.cpp -o dotnet_injectbundle
#include <stdio.h>
#include <fcntl.h>
#include <string.h>
#include <unistd.h>
#include <stdlib.h>
#include "main.h"
// libcorclr.dll signature for finding hlpDynamicFuncTable
@icecr4ck
icecr4ck / idapython_cheatsheet.md
Last active June 24, 2026 15:53
Cheatsheet for IDAPython
@xpn
xpn / clr_via_native.c
Created April 11, 2018 21:34
A quick example showing loading CLR via native code
#include "stdafx.h"
int main()
{
ICLRMetaHost *metaHost = NULL;
IEnumUnknown *runtime = NULL;
ICLRRuntimeInfo *runtimeInfo = NULL;
ICLRRuntimeHost *runtimeHost = NULL;
IUnknown *enumRuntime = NULL;
LPWSTR frameworkName = NULL;
@haccer
haccer / scanio.sh
Last active July 3, 2025 21:27
PoC script to mass-locate vulnerable subdomains using results from Rapid7's Project Sonar
#!/bin/bash
# Usage : ./scanio.sh <save file>
# Example: ./scanio.sh cname_list.txt
# Premium
function ech() {
spinner=( "|" "/" "-" "\\" )
while true; do
for i in ${spinner[@]}; do
echo -ne "\r[$i] $1"