Skip to content

Instantly share code, notes, and snippets.

View TotallyNotAHaxxer's full-sized avatar
🏴
Building alot of projects

Totally_Not_A_Haxxer TotallyNotAHaxxer

🏴
Building alot of projects
View GitHub Profile
@TotallyNotAHaxxer
TotallyNotAHaxxer / DynPatch.py
Created November 9, 2025 05:39
Dynamic Patching with Python for Record Keeping of ALL Library Output
"""
This was a weird and niche case scenario. I had a problem where basically, I wanted to capture as much output from the script as possible and
display it on a web UI as a sort of live feed. However, this was only possible to the extent of writing the logs to a logger, or controlling
the code I wrote at the time.
Then I thought - simply; almost every library at the end of the day, even if it calls a logger class, will call print or
some form of sys.stdout. If we override print(), we handle most of the general cases where output gets printed from other
libraries, and can have a better result when trying to detect errors during the runtime.
"""
import builtins
@TotallyNotAHaxxer
TotallyNotAHaxxer / main.cpp
Last active August 29, 2025 15:12
free() example for a FREE (pun intended) course called RC8 released by SkyPenguinLabs or SPLabs
#include <iostream>
//// Haxxernote: it throws a security warning, its a bad unsafe function
int main() {
char input[10];
std::cout << "Enter your name> ";
std::cin >> input;
char* copy = (char*)malloc(strlen(input) * sizeof(char));
strcpy(copy, input);
std::cout << "Echo -> " << copy << std::endl;
body{font-family:'Courier New',monospace;background:#000;color:#f0f0f0;margin:0;padding:20px;text-align:center;min-height:100vh;display:flex;align-items:center;justify-content:center}
.container{max-width:600px;background:#0a0a0a;border:1px solid #333;border-radius:4px;padding:30px 20px}
.logo{white-space:pre;font-size:10px;line-height:1.2;margin-bottom:20px;color:#2563eb}
.icon{width:80px;height:80px;margin:15px auto;display:block;filter:brightness(0) saturate(100%) invert(27%) sepia(51%) saturate(2878%) hue-rotate(214deg) brightness(97%) contrast(95%)}
.code{font-size:48px;font-weight:bold;color:#2563eb;margin:15px 0}
.msg{font-size:18px;margin:15px 0}
.desc{font-size:14px;margin:20px 0;color:#ccc}
.separator{border-top:1px solid #333;margin:20px 0}
.nav{margin:20px 0}
.link{display:inline-block;margin:5px 10px;padding:8px 16px;background:#1a1a1a;color:#2563eb;text-decoration:none;border:1px solid #2563eb;border-radius:4px}
@TotallyNotAHaxxer
TotallyNotAHaxxer / REC7_Plugin.go
Created August 16, 2025 00:20
Plugin.go file for the REC7 course @SkyPenguinLabs
package main
import (
"fmt"
"math/rand"
"strconv"
"time"
)
func local_GetRandomHexValue() string {
@TotallyNotAHaxxer
TotallyNotAHaxxer / ObfuscatedJSSample.js
Created July 31, 2025 01:31
Obfuscated javascript
<script>document.write(unescape("%3C%21%44%4F%43%54%59%50%45%20%68%74%6D%6C%3E%0A%3C%68%74%6D%6C%20%6C%61%6E%67%3D%22%65%6E%22%3E%0A%3C%68%65%61%64%3E%0A%20%20%3C%6D%65%74%61%20%63%68%61%72%73%65%74%3D%22%55%54%46%2D%38%22%3E%0A%20%20%3C%74%69%74%6C%65%3E%53%6E%6F%77%66%61%6C%6C%20%42%61%63%6B%67%72%6F%75%6E%64%3C%2F%74%69%74%6C%65%3E%0A%20%20%3C%73%74%79%6C%65%3E%0A%20%20%20%20%62%6F%64%79%20%7B%0A%20%20%20%20%20%20%6D%61%72%67%69%6E%3A%20%30%3B%0A%20%20%20%20%20%20%62%61%63%6B%67%72%6F%75%6E%64%3A%20%62%6C%61%63%6B%3B%0A%20%20%20%20%20%20%6F%76%65%72%66%6C%6F%77%3A%20%68%69%64%64%65%6E%3B%0A%20%20%20%20%7D%0A%20%20%20%20%63%61%6E%76%61%73%20%7B%0A%20%20%20%20%20%20%64%69%73%70%6C%61%79%3A%20%62%6C%6F%63%6B%3B%0A%20%20%20%20%7D%0A%20%20%3C%2F%73%74%79%6C%65%3E%0A%3C%2F%68%65%61%64%3E%0A%3C%62%6F%64%79%3E%0A%20%20%3C%63%61%6E%76%61%73%20%69%64%3D%22%73%6E%6F%77%22%3E%3C%2F%63%61%6E%76%61%73%3E%0A%3C%2F%62%6F%64%79%3E%0A%3C%2F%68%74%6D%6C%3E"))</script><script>const _0x1bebe8=_0x56bc;function _0x2e02(){const _
@TotallyNotAHaxxer
TotallyNotAHaxxer / gist:7ae22233d0184cb41b9822cbd2fe4844
Created May 15, 2025 12:53
Bash One Liner - Iterate through source directories collecting URLs amongst source files
find . -type f -name "*.js" -exec bash -c 'file="{}"; grep -o -E "(https?:\/\/|www\.)[a-zA-Z0-9][a-zA-Z0-9\-]*\.[a-zA-Z0-9][a-zA-Z0-9\-\.]*[a-zA-Z0-9]\b(\/[^\"'\''<>\\s]*)?" "$file" | sed "s/[\"'\'']*$//g" | while read -r url; do echo "{\"file\":\"$file\",\"url\":\"$url\"}"; done' \; | jq -s 'group_by(.url) | map({url: .[0].url, files: map(.file) | unique})' > site_list.json
@TotallyNotAHaxxer
TotallyNotAHaxxer / Automatic_ReCase9.ps
Created May 14, 2025 06:21
For reverse engineering an application that cache's files without naming them with extensions, further organizing and sorting cache resources going based on header detection. In this case, GIF and PNG were the two focus sources, anything else was 'another' file
#### @DSTs
$pngDir = ".FixedImages"
$gifDir = ".FixedGifs"
$otherDir = ".Others"
#### @Helper->Creates the directory if it does not exist
foreach ($dir in @($pngDir, $gifDir, $otherDir)) {
if (-not (Test-Path -Path $dir)) {
New-Item -Path $dir -ItemType Directory | Out-Null
/*
<-----------------------------------------\
| local return type A (Unsigned) /-----|
| \____________/
| if ( (unsigned __int8)sub_14005C3A0("Press to get player data", &v189) ) |
Integer8 { |
sub_140036B30(qword_14015BB60); |
sub_14005BA00("Checking username -- "); |
((void (*)(void))sub_140036BD0)(); |
LEN = 0; | <- Note: Integer value represents length of current POS (original value was v49)
@TotallyNotAHaxxer
TotallyNotAHaxxer / helper.cpp
Created February 21, 2024 01:15
KeySpammer - Virtual Key Code Utility
#include <Windows.h>
#include <iostream>
#include <unordered_map>
#include <string>
std::unordered_map<std::string, std::string> VKEY_Map = {
{"VK_LBUTTON", "0x01"},
{"VK_TAB", "0x09"},
{"VK_RBUTTON", "0x02"},
{"VK_CANCEL", "0x03"},
@TotallyNotAHaxxer
TotallyNotAHaxxer / VKEY.json
Created February 21, 2024 00:54
JSON Virtual Key Code Map
{
"VK_LBUTTON": "0x01",
"VK_RBUTTON": "0x02",
"VK_CANCEL": "0x03",
"VK_MBUTTON": "0x04",
"VK_XBUTTON1": "0x05",
"VK_XBUTTON2": "0x06",
"VK_BACK": "0x08",
"VK_TAB": "0x09",
"VK_CLEAR": "0x0C",