YSaxon

# Add this to your zshrc etc

# modified from #http://broken-by.me/lazy-load-nvm/

setup_nvm(){
    unset -f nvm node npm

    export NVM_DIR="$HOME/.nvm"
    [ -s "/opt/homebrew/opt/nvm/nvm.sh" ] && \. "/opt/homebrew/opt/nvm/nvm.sh"  # This loads nvm
    [ -s "/opt/homebrew/opt/nvm/etc/bash_completion.d/nvm" ] && \. "/opt/homebrew/opt/nvm/etc/bash_completion.d/nvm"  # This loads nvm bash_completion

YSaxon

Initial setup (paths are assuming an Android target but you can obviously modify it)

cat << EOF > /data/local/tmp/shell1.sh
echo echo START >> /data/local/tmp/shell/infile
tail -n 1 -f /data/local/tmp/shell/infile | sh -i >> /data/local/tmp/shell/outfile 2>>/data/local/tmp/shell/outfile
EOF

chmod +x /data/local/tmp/shell1.sh

mkdir /data/local/tmp/shell

YSaxon

Analyzing Cortex-M Firmware Binary Files with Ghidra

Opening the Firmware Binary

1. Open the firmware binary in Ghidra

Establishing the Initial Memory Offset

1. Go to the data view and copy all the string addresses, and paste them into a Jupyter notebook with the code below
2. Sort and copy all the possible pointers (probably undefined4 type) similarly

YSaxon

def find_and_extract_dex(file_path, output_path):
    try:
        with open(file_path, 'rb') as file:
            data = file.read()

        # DEX file header magic number and offset for file size
        dex_magic = b'dex\n'
        size_offset = 32
        size_length = 4

YSaxon

// a more generalized version of https://gist.github.com/YSaxon/bdd00ce836dee657518d1937047e4ec6

function createCriteriaFunction(propertyNames) {
    if (!Array.isArray(propertyNames)) {
        propertyNames = [propertyNames];
    }

    return function(obj) {
        if (!obj || typeof obj !== 'object') return false;

YSaxon

function isReduxStore(obj) {
    return obj && typeof obj === 'object' && 
        typeof obj.getState === 'function' && 
        typeof obj.dispatch === 'function' && 
        typeof obj.subscribe === 'function';
}

function isValidIdentifier(key) {
    return /^[a-zA-Z_$][a-zA-Z_$0-9]*$/.test(key);
}

YSaxon

import re
from ghidra.program.model.data import Undefined
from java.io import File
from ghidra.app.util.exporter import CppExporter
from ghidra.util.task import TaskMonitor
from ghidra.app.util import Option
from ghidra.program.model.listing import Function
from ghidra.program.database.symbol import FunctionSymbol
from ghidra.app.decompiler import DecompInterface
from ghidra.program.model.listing import CodeUnit

YSaxon

Installing xdebug

Manually

apt install php7.4-debug

nano etc/php/7.4/apache2/php.ini

[Xdebug]
xdebug.mode = debug
xdebug.client_host = host.docker.internal

YSaxon

netstat -an | awk '{if ($5 ~ /[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/) print $5}' | cut -d. -f1-4 | sort -u | while read -r line; do host $line; done | grep pointer | awk '{print $NF}' | sort -u

YSaxon

How to export messages from MQTT-Explorer to CSV

(copied from my comment here: thomasnordquist/MQTT-Explorer#632 (comment))

Open DevTools (should be an option in the file menu) Now in the JS Console

const reactRoot = document.querySelector('#app')._reactRootContainer;
const store = reactRoot._internalRoot.current.child.memoizedProps.store;
var tree = store.getState().connection.tree