Skip to content

Instantly share code, notes, and snippets.

@romainthomas
romainthomas / hint_instruction.py
Last active November 3, 2017 05:49
[IDA] Hint on instructions
#
# Show a hint when the user has his mouse on an instruction
#
import idaapi
import idautils
class Hooks(idaapi.UI_Hooks):
def get_custom_viewer_hint(self, view, place):
insn = idautils.DecodeInstruction(place.toea())
if insn:
@williballenthin
williballenthin / commands.sh
Last active September 5, 2024 15:16
Install IDA Pro under Wine in Docker
# build wine Docker image
pushd wine; docker build -t wine .; popd
# build x11 Docker image for IDA
pushd ida; docker build -t wine/ida .; popd
# demonstrate x11 forwarding works
docker run -ti --rm -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix wine/ida xclock
# interactive shell in container
@xerub
xerub / prologue.py
Last active July 15, 2022 00:18
AArch64 prologue
# Fix clang function prologues
# WARNING: this WILL patch bytes in the database
#
# Copyright (c) 2015 xerub
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
@williballenthin
williballenthin / unicorn_single_step.go
Last active December 27, 2019 01:59
Go program that demonstrates unexpected behavior in the Unicorn engine
package main
import (
"encoding/hex"
"fmt"
uc "github.com/unicorn-engine/unicorn/bindings/go/unicorn"
"strings"
)
var asm = strings.Join([]string{
@xerub
xerub / Simp.py
Last active July 15, 2022 00:18
AArch64 mov simplifier IDA plugin
# AArch64 mov simplifier IDA plugin
#
# Copyright (c) 2015 xerub
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
@atcuno
atcuno / gist:3425484ac5cce5298932
Last active May 13, 2025 07:11
HowTo: Privacy & Security Conscious Browsing

The purpose of this document is to make recommendations on how to browse in a privacy and security conscious manner. This information is compiled from a number of sources, which are referenced throughout the document, as well as my own experiences with the described technologies.

I welcome contributions and comments on the information contained. Please see the How to Contribute section for information on contributing your own knowledge.

Table of Contents

Kreading klist:
Attack the Core - http://www.amazon.com/Guide-Kernel-Exploitation-Attacking-Core/dp/1597494860
Kernel Exploitation Notes - http://phrack.org/issues/64/6.html#article
Stack Jacking - https://jon.oberheide.org/blog/2011/04/20/stackjacking-your-way-to-grsec-pax-bypass/
Smashing the Kernel Stack for Fun and Profit- http://phrack.org/issues/60/6.html
A XNU Hope - http://phrack.org/issues/64/11.html
Core Security OpenBSD IPv6 Remote Kernel Exploit - http://www.coresecurity.com/content/open-bsd-advisorie
802.11 Wireless Vulnerabilities on Windows - http://www.uninformed.org/?v=6&a=2&t=sumry
Abusing Mach on OS X - http://www.uninformed.org/?v=4&a=3&t=sumry
@jkominek
jkominek / updatestars.py
Last active March 26, 2022 15:21
Maintain a mirror of all your Github stars.
#!/usr/bin/python
#################
# NOTE
# Now at https://github.com/jkominek/updatestars
#################
import requests
import json
import re
@xerub
xerub / ultrasn0w.c
Created June 8, 2015 22:49
blow, blow, ultrasn0w
/* ultrasn0w (D) xerub 2014
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the "do What The Fuck you want to Public License";
* either version 1 of the License, or whatever (the fuck) version you want.
*
* $ ios-clang -o ultrasn0w.o -Wno-variadic-macros -O2 -c ultrasn0w.c
* $ ios-clang -o ultrasn0w.dylib -shared ultrasn0w.o -lsubstrate -lATCommandStudioDynamic
*
* Inject into CommCenterClassic iPhone3,1 baseband 1.59.00
@cmattoon
cmattoon / README.md
Last active July 1, 2024 14:32
Visual Binary Analysis

MySQL Dump

This shade of green happens to correspond to mostly-ASCII characters. This color green correlates to mostly ASCII chars

GPG Encryption

Symmetric (gpg -c) encryption of the above MySQL dump. Encryption - Random Colors in Random Places