- Ilfak's presentation at Recon 2018
- Microcode in pictures
- Hex-Rays Microcode API vs. Obfuscating Compiler
- Scripts vds10, vds11, vds12 and vds13 from Hex-Rays SDK
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| set -Eeuo pipefail | |
| # | |
| # Frida version | |
| # | |
| FRIDA_VER="${1:-}" | |
| if [ -z "$FRIDA_VER" ]; then |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| This will permanently block revokes and some ppq stuff. | |
| Use this together with the profile to block some domains "without" a DNS. | |
| Even if you don't have the profile, after applying this your device just cannot register revokes anymore. So you'll just not be able to install the app, but you will not get permanently blacklisted. | |
| note this may lead to side effects. I am not sure. However, it does work. | |
| AS ALWAYS, USE AT YOUR OWN RISK. | |
| Basically all u need to do is run these commands one by one in a terminal on a jailbroken device: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python3 | |
| # -*- coding: utf-8 -*- | |
| """ | |
| Android NDK 历史版本下载助手(极简元数据版) | |
| 用法示例: | |
| python ndk_downloader.py -v r28 | |
| python ndk_downloader.py -v r26 -s mac | |
| """ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import socket | |
| import struct | |
| import threading | |
| import time | |
| class Mock: | |
| """Mock类,包含所有模拟设备输出的函数""" | |
| def __init__(self): | |
| # 设备属性 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| # 检查是否提供了文件名参数 | |
| if [ -z "$1" ]; then | |
| echo "请提供证书文件名作为参数!" | |
| exit 1 | |
| fi | |
| # 获取输入文件名和扩展名 | |
| input_file="$1" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package utils; | |
| import java.lang.reflect.Constructor; | |
| import java.lang.reflect.Field; | |
| import java.lang.reflect.InvocationTargetException; | |
| import java.lang.reflect.Member; | |
| import java.lang.reflect.Method; | |
| import java.lang.reflect.Modifier; | |
| import java.util.*; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| echo "[General] | |
| D75BD954-8B63-84BA-75B3-019654928EE7=2786127075 | |
| E68B43C9-B732-8573-76A8-01AB75B3683A=253686975 | |
| F175B8C0-783C-8BA0-7045-014CA847B302=2765028028 | |
| F73529D0-8362-B7A9-7B25-01538B3C632A=1689813065 | |
| Hidden=false | |
| LastDate= | |
| Name=Forgo7ten | |
| Password=1f93-56ac-c63e-540d-a9ab" > ~/.config/SweetScape/010\ Editor.ini | |
| OS=`uname -s` |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| mixed-port: 7890 | |
| allow-lan: false | |
| mode: global | |
| external-controller: 127.0.0.1:9090 | |
| log-level: info |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import binascii | |
| import sys | |
| import os.path | |
| SV = [0xd76aa478, 0xe8c7b756, 0x242070db, 0xc1bdceee, 0xf57c0faf, | |
| 0x4787c62a, 0xa8304613, 0xfd469501, 0x698098d8, 0x8b44f7af, | |
| 0xffff5bb1, 0x895cd7be, 0x6b901122, 0xfd987193, 0xa679438e, | |
| 0x49b40821, 0xf61e2562, 0xc040b340, 0x265e5a51, 0xe9b6c7aa, | |
| 0xd62f105d, 0x2441453, 0xd8a1e681, 0xe7d3fbc8, 0x21e1cde6, | |
| 0xc33707d6, 0xf4d50d87, 0x455a14ed, 0xa9e3e905, 0xfcefa3f8, |
NewerOlder