Skip to content

Instantly share code, notes, and snippets.

View OlivierLaflamme's full-sized avatar
:shipit:
؁؁؁؁؁؁؁؁؁؁؁؁؁؁🏴 403 Forbidden؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁🚩؁؁؁؁؁؁؁؁؁

Boschko OlivierLaflamme

:shipit:
؁؁؁؁؁؁؁؁؁؁؁؁؁؁🏴 403 Forbidden؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁؁🚩؁؁؁؁؁؁؁؁؁
662 followers · 217 following
View GitHub Profile
@OlivierLaflamme
OlivierLaflamme / o
Last active October 1, 2024 17:55
#!/bin/bash
whoami
@OlivierLaflamme
OlivierLaflamme / POSSIBLE_UAF
Created May 13, 2024 17:59
libc.so link points to libuClibc-0.9.28.so
Free rva: 0x00047d58
Freed buffer definition rva: 0x00047c6c
memalign : 0x00047d2c
0x00047d2c ori $v0, $v1, 1
0x00047d30 sw $v0, 4($s1)
0x00047d34 addu $v1, $s1, $v1
0x00047d38 lw $v0, 4($v1)
0x00047d3c lw $t9, -0x7f8c($gp)
0x00047d40 ori $v0, $v0, 1
@OlivierLaflamme
OlivierLaflamme / stuffed and unstrung
Created May 1, 2024 19:53
stuffed and unstrung
stuffed and unstrung
@OlivierLaflamme
OlivierLaflamme / registers.md
Created April 30, 2024 04:57
if ur here may god save your soul

$0 $zero The “zero-constant”
$1 $at Used by the assembler
$2-$3 $v0-$v1 Return values
$4-$7 $a0-$a3 Function arguments
$8-$15 $t0-$t7 Temporary registers
$16-$23 $s0-$s7 Saved registers
$24-$25 $t8-$t9 Temporary registers
$26-$27 $k0-$k1 Used by the kernel
$28 $gp Global pointer
$29 $sp Stack pointer

@OlivierLaflamme
OlivierLaflamme / validat_w_curl.sh
Last active April 10, 2024 18:08
validate domain before subfinder on scope just `cat output.txt| cut -d':' -f1 | sort | uniq`
#!/bin/bash
# Define the function to check web application for a domain
check_domain() {
domain=$1
echo "$domain"
response=$(curl -sL -w "%{http_code}\\n" "$domain" -o /dev/null)
if [ "$response" != "000" ]; then
echo "$domain: $response"
echo "$domain: $response" >> output.txt
@OlivierLaflamme
OlivierLaflamme / fuck_bdl.py
Created March 7, 2024 03:05
fuck this this waste of a god damn day
import os
import struct
# Constants
START_OF_DICT = 0x11d
PARTITION_TABLE_START = 0x929
PARTITION_NAME_OFFSET = 0x21c
DICT_RECORDS_START = 0x43d
DICT_RECORD_SIZE = 0x114
BDL_RECORD_NAME_LEN = 0x100
@OlivierLaflamme
OlivierLaflamme / gist:99c0f584768866192c049bdc7ae2c9d1
Created November 24, 2023 18:01
here u go bozo
[13088.506133] int3: 0000 [#1] SMP
[13088.524203] last sysfs file: /sys/module/vt/parameters/default_utf8
[13088.544028] Modules linked in:
[13088.562724]
[13088.580913] Pid: 3469, comm: Xnest Not tainted (2.6.32 #19) VMware Virtual Platform
[13088.619038] EIP: 0060:[<f7d02001>] EFLAGS: 00200283 CPU: 0
[13088.638601] EIP is at 0xf7d02001
[13088.657447] EAX: 00000053 EBX: deadbeef ECX: 00000007 EDX: 000000e0
[13088.676627] ESI: bffffcf0 EDI: 00000000 EBP: f6758000 ESP: f6759fb0
[13088.696022] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
@OlivierLaflamme
OlivierLaflamme / EHR_fuzzer.py
Created February 13, 2023 14:44
import json
import re
import requests
import sys
import os
headers = {
"User-Agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"}
fileurl=sys.argv[1]
@OlivierLaflamme
OlivierLaflamme / Overflow_POC_MIPS
Created January 26, 2023 20:39
from pwn import *
context(arch='mips', os='linux', log_level='debug')
file_name = './exp'
debug = 0
if debug:
r = remote()
else:
@OlivierLaflamme
OlivierLaflamme / mips_pwndbg.txt
Created January 23, 2023 14:48
stack based bod in mips
from pwn import *
context(arch= 'mips' , os= 'linux' , log_level= 'debug' )
file_name = './exp'
debug = 0
if debug:
r = remote()
else :