This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
def __process_manifest_json(self, fullpath): | |
"""The manifest.json files contain less information | |
then the Preferences files, so we'll use this menthod | |
on if the preferences file is unavaible""" | |
extension = fullpath.split(self.os.SLASH)[-3] | |
if path.isfile(fullpath): | |
with open(fullpath, 'rb') as f: | |
manifest = json.load(f) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
def __check_preferences_json(self, preferences): | |
"""Pulls Extension information out of the preferences file | |
""" | |
extensions = [] | |
with open(preferences, 'rb') as f: | |
prefs_json = json.load(f) | |
extensions_json = prefs_json['extensions']['settings'] | |
for extension in extensions_json.iterkeys(): | |
name = None |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
function Make-Extension | |
{ | |
Param([string]$clsid, [string]$name, [string]$dll) | |
$extension = New-Object PSObject -Prop (@{'CLSID' = $clsid; | |
'Name' = $name; | |
'DLL' = $dll }) | |
$extension | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
function Lookup-Clsid | |
{ | |
Param([string]$clsid) | |
$CLSID_KEY = 'HKLM:\SOFTWARE\Classes\CLSID' | |
If ( Test-Path $CLSID_KEY\$clsid) { | |
$name = (Get-ItemProperty -Path $CLSID_KEY\$clsid).'(default)' | |
$dll = (Get-ItemProperty -Path $CLSID_KEY\$clsid\InProcServer32).'(default)' | |
} | |
$name, $dll |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
inv = investigate.Investigate('12345678-1234-1234-1234-1234567890ab') | |
inv.search('searchregex', start=datetime.timedelta(days=1), limit=100, include_category=False) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Create mappings for every character, for instance: | |
s=['s','5','z','es','2'] | |
alphabet={ 's':s } | |
def get_permutations(self, letter): | |
try: | |
permutations = alphabet[letter] | |
except KeyError: # The letter is not in alphabet | |
permutations = letter | |
regex = '[' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
""" | |
Quick binary xor for WildFire | |
@brad_anton | |
Bigrmkwhrr.png 645e7f63886d74c5edd149caac1b41cd | |
Bigrmkwhrr.png.exe (output) ec5921b64581a7c6414680c36d50805c | |
""" | |
from itertools import cycle |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
while(list($key, $val) = each($_POST)) { | |
$GLOBALS[$key] = $val; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$DestinationAddress = "[email protected]"; | |
$Subject = "Contact Form Inquiry"; | |
while(list($key, $val) = each($_POST)) { | |
$GLOBALS[$key] = $val; | |
} | |
$Header = "From: $name <$email>\r\n"; | |
$Header .= "Reply-To: $name <$email>\r\n"; | |
mail($DestinationAddress, $Subject, $Message, $Header); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$DestinationAddress = "[email protected]"; | |
$Subject = "Contact Form Inquiry"; | |
while(list($key, $val) = each($_POST)) { | |
$GLOBALS[$key] = $val; | |
} | |
$Header = "From: $name <$email>\r\n"; | |
$Header .= "Reply-To: $name <$email>\r\n"; | |
mail($DestinationAddress, $Subject, $Message, $Header); |
OlderNewer