This is a cheatsheet I use for Ghidra scripting.
NOTE: Some of these functions use each other 😄
def get_bytes(address, size):
#!/usr/bin/env python | |
import sys | |
import json | |
import onnx | |
import glob | |
import os | |
os.environ['TF_CPP_MIN_LOG_LEVEL'] = '3' | |
os.environ["GRPC_VERBOSITY"] = 'error' |
#!/usr/bin/env bash | |
# Author: @c3rb3ru5d3d53c | |
# Requires: ffplay, piper | |
# piper : https://github.com/rhasspy/piper | |
# Global Variable Configuration | |
PIPER=/home/c3rb3ru5/Tools/piper/piper | |
PIPER_VOICE=/home/c3rb3ru5/Tools/piper/piper-voices/en/en_US/hfc_female/medium/en_US-hfc_female-medium.onnx | |
PIPER_PITCH=1 |
--[[ | |
NeoVIM NVChad Configuration Setup | |
sudo add-apt-repository ppa:neovim-ppa/unstable | |
sudo apt update | |
sudo apt install -y neovim clangd python-is-python3 python3-pip | |
sudo pip install pyright | |
git clone https://github.com/NvChad/NvChad ~/.config/nvim --depth 1 | |
curl https://gist.github.com/c3rb3ru5d3d53c/init.lua >> ~/.config/nvim/init.lua | |
wget https://github.com/ryanoasis/nerd-fonts/releases/download/v3.0.2/DroidSansMono.zip | |
unzip DroidSansMono.zip -d ~/.fonts/ |
#!/usr/bin/env bash | |
# AI Helper powered by ollama AI and piper TTS | |
# Author: @c3rb3ru5d3d53c | |
# Requires: ffplay, ollama and piper | |
# ollama: https://github.com/jmorganca/ollama | |
# piper : https://github.com/rhasspy/piper | |
# start ollama first with ollama serve | |
# Global Variable Configuration |
#Find YARA Matches | |
#@author @c3rb3ru5d3d53c | |
#@category YARA | |
#@keybinding | |
#@menupath | |
#@toolbar | |
import yara | |
from dataclasses import dataclass |
#!/usr/bin/env python | |
# pip install malduck | |
import re | |
import argparse | |
from malduck import lznt1, rc4 | |
__version__ = '1.0.0' | |
__author__ = '@c3rb3ru5d3d53c' |
rule pikabot_0 { | |
meta: | |
author = "@c3rb3ru5d3d53c" | |
description = "Detects PikaBot" | |
created = "2023-03-02" | |
tlp = "white" | |
rev = 1 | |
strings: | |
$trait_0 = { | |
8d 85 ?? ?? ?? ?? 89 b5 ?? ?? ?? ?? 50 8d 85 ?? |
#! /usr/bin/env python3 | |
import os, sys | |
#import requests | |
from urllib import request | |
import traceback | |
from shutil import copyfile | |
from hashlib import md5 | |
import binascii |
// LNK Data Structures | |
// https://docs.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-showwindow | |
enum SHOWCOMMAND : u16 { | |
SW_HIDE = 0x0000, | |
SW_SHOWNORMAL = 0x0001, | |
SW_SHOWMINIMIZED = 0x0002, | |
SW_SHOWMAXIMIZED = 0x0003, | |
SW_SHOWNOACTIVATE = 0x0004, | |
SW_SHOW = 0x0005, |