NOTES >> decodeURI("+TR4W%17%7F@%17%03%143%02CbG*%5C.%04Y%041%17we%03D%14%1AAU%04%10%1E2%5B%0D*%12%04%1A%125%19%17b%14%04%1Em%16U%19%20Uwe@F%10%05%13Ub%10%1E2%5B%0D*%12%04%1A%125%19%17b%14%04%1Em%16U%19%20Uwe@F%10%05%13Ub%10%1E!F%0C-%09%02%16%01$PC!D%25TmD%16L8%16?$%12ZSP%04%1CEL#A%00-%09%04IW%25%13%071U#%5D9D%164%08%5By%1F%15N)%25NY%18%1F%1Cw%12%17%3C%15%02IW2%03%077F6Q%25%05%16L8%16?$%12ZSP9%5B%22CV2@%0A6%08V4AlO%04iH%05%15%11=%147%7F/y%18V%1FL%17J%09%05%1Bb%0E%10%3ErJ%1C%5B%1AFH%7DSiB%0AOj5p.z%1FOn%06%5C;%08mjK%7B%1CA,%15%13O%025%04%0C'Ff%03bJk6'/%02%1EL%1BQPA%01!FT0W%06%7F@R%5EUrPC6W4T*%01ULr(%0D0;%19SP%00Ub%10%1E=Q%0D%3E%12%1EIW-%13%0B#F,%1Em%17%5E%0E1%158-%03VSP8,%0Dsg%15q5%0D)9#3%00$:%07%7D%0Ak%04.u5%17%3C%1C%0E'%7C1)+:%0As%1EwA%0D=%03%10%06%1F$%12CbT1V(%16Y%05:Uw%11%03U0%0E%17Ub%19j%0Ah0%04%1DB%12%01o%1593%5C%1Fd%0F?K_)%07%0D4%14%1DSP%00UbB%5D%22@E%7F@P%01%107%1F%02%25F+JmD%5E%0B%22%1A6%22%12%5D%07PA%067SJ%10S%067%12PI%1F%20%00%0C#S0W9D%16%1F'%16#%02%01W%1B%02AU-X%5C4L,?@P%06%03$%10CbT1V(%16Y%05:Uw
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// Convert a JavaScript number to IEEE-754 Double Precision | |
// value represented as an array of 8 bytes (octets) | |
// | |
// http://cautionsingularityahead.blogspot.com/2010/04/javascript-and-ieee754-redux.html | |
function toIEEE754(v, ebits, fbits) { | |
var bias = (1 << (ebits - 1)) - 1; | |
// Compute sign, exponent, fraction |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python | |
import socket | |
import time | |
import telnetlib | |
import struct | |
LIBC_BASE = 0x7eff13bcb000 | |
HEAP_BASE = 0x248b000 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python | |
import socket | |
import time | |
import telnetlib | |
import struct | |
LIBC_BASE = 0x7eff13bcb000 | |
HEAP_BASE = 0x248b000 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#@ /etc/quagga/bgpd.conf (Centos & Ubuntu) | |
hostname <Local OS hostname> | |
password <Any random phrase> | |
enable password <Any random phrase> | |
! | |
log file /var/log/quagga/bgpd | |
!debug bgp events | |
!debug bgp zebra | |
debug bgp updates |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<?php | |
/* | |
Updated version, 2016-12-02: fixed shellcode so it *actually* works on QEMU | |
usermode emulation (seems I pushed an old version), and removed debug output. | |
------------------------- | |
NB: THIS PoC ONLY WORKS IN QEMU USERMODE EMULATION! | |
If anyone wants to fix this, go ahead (no pun intended). | |
However, I don't have a vulnerable product and am unwilling to acquire one. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
:> lldb Hopper.app | |
lldb:> target create "Hopper.app" | |
error: unable to find CIE at 0xf1bf1410 for cie_id = 0x0e410000 for entry at 0x00001404. | |
error: unable to find CIE at 0xfb722890 for cie_id = 0x048e0583 for entry at 0x00002e0f. | |
Current executable set to 'Hopper.app' (x86_64). | |
lldb:> run | |
Process 86127 launched: 'Hopper.app' (x86_64) | |
Process 86127 exited with status = 45 (0x0000002d) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#include <stdio.h> | |
#include <stdlib.h> | |
#include <stdint.h> | |
int check_char_0(char chr) { | |
register uint8_t ch = (uint8_t) chr; | |
ch ^= 97; | |
if(ch != 92) { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python | |
import httplib, os.path, argparse, pefile, struct | |
""" | |
pdb_downloader.py | |
v0.1 | |
Steeve Barbeau | |
@steevebarbeau | |
steeve-barbeau.blogspot.com |