Skip to content

Instantly share code, notes, and snippets.

View angea's full-sized avatar

Ange Albertini angea

View GitHub Profile
@angea
angea / mycar.sh
Last active December 21, 2024 07:41
Generate an EICAR CRC collision
#!/bin/bash
# Generate an EICAR CRC collision
# Albertini Stevens 2024
echo -n 'AAAAAA<=EICAR CRC collision? Use Shake128/Kangaroo12/Blake3 instead!' > text
#sha256sum text
#xxd text
#echo
cat text | crchack -b 0.0:+.8*6:1 -b 0.1:+.8*6:1 -b 0.2:+.8*6:1 -b 0.3:+.8*6:1 -b 0.4:+.8*6:1 -b 0.5:+.8*6:1 - 6851cf3c > mycar
@angea
angea / sqlbuddy.py
Last active January 25, 2025 15:11
Scans SQLite files for known features (UserVersion, AppId, Schema...)
#!/usr/bin/env python3
# Scans SQLite files for known features (UserVersion, AppId, Schema...)
# Ange Albertini 2024
import argparse
import hashlib
import sqlite3
import sys
user_versions = {
@angea
angea / inject_pickle.py
Created December 21, 2024 16:08
Demonstrates pickled file injection via the Fickling module
#!/usr/bin/env python3
# Demonstrates pickled file injection via the Fickling module
# Ange Albertini 2024
import ast
import pickle
import fickling
import string
FILENAME = "message.pkl"
@angea
angea / filecraft.py
Last active December 23, 2024 14:41
a file crafting tool
#!/usr/bin/env python3
# FileCraft - Ange Albertini 2024
import hashlib
import struct
import sys
import zlib
def crc32(data):
@angea
angea / waddump.py
Last active January 18, 2025 12:01
Doom WAD tool
#!/usr/bin/env python3
# WadDump
import argparse
SIZE_MIN = 4 + 4 + 4
signatures = {
b"IWAD": "Wad",
b"PWAD": "Patch Wad",