Skip to content

Instantly share code, notes, and snippets.

@goofwear
goofwear / hactool_key_verify.py
Created January 26, 2019 21:53 — forked from khang06/hactool_key_verify.py
hactool key verifier
'''
hactool key verifier v0.2 by Khangaroo
a very badly made script to verify your hactool keys
Hash sources:
https://gist.github.com/roblabla/d8358ab058bbe3b00614740dcba4f208
My own console
https://github.com/SocraticBliss/hactool/blob/4169184c88a10cde0db8eaa83d38bd32a7f35751/KEYS.md
Some places that I can't link
'''
@goofwear
goofwear / hosts
Created February 7, 2019 02:13
Hosts File to Block Facebook from my Machine
127.0.0.1 api.ak.facebook.com
127.0.0.1 api.connect.facebook.com
127.0.0.1 api.facebook.com
127.0.0.1 app.facebook.com
127.0.0.1 apps.facebook.com
127.0.0.1 ar-ar.facebook.com
127.0.0.1 badge.facebook.com
127.0.0.1 blog.facebook.com
127.0.0.1 connect.facebook.com
127.0.0.1 connect.facebook.net
@goofwear
goofwear / gist:bca41e3e8a6edcc8ce3aac0f804956b8
Created January 12, 2020 00:54 — forked from Pusungwi/gist:7212599
A List of Javascript Emulator
@goofwear
goofwear / 20200114-TLP-WHITE_CVE-2020-0601.md
Created January 19, 2020 03:29 — forked from SwitHak/20200114-TLP-WHITE_CVE-2020-0601.md
BlueTeam CheatSheet * CVE-2020-0601 * crypt32.dll | Last updated: 2020-01-17 2220 UTC

CVE-2020-0601 AKA ChainOfFools OR CurveBall

General

  • Microsoft disclosed a vulnerability in their monthly Patch Tuesday referenced under CVE-2020-0601.
  • The vulnerability was discovered by the U.S. National Security Agency, anounced today (2020-01-14) in their press conference, followed by a blog post and an official security advisory.
  • The flaw is located in the "CRYPT32.DLL" file under the C:\Windows\System32\ directory.

Vulnerability explanation

  • NSA description:
  • NSA has discovered a critical vulnerability (CVE-2020-0601) affecting Microsoft Windows® cryptographic functionality.
@goofwear
goofwear / ChromeAppDownloader.py
Created January 19, 2020 04:23 — forked from arulrajnet/ChromeAppDownloader.py
Python Script to download the Chrome Extensions (CRX) file directly from the google chrome web store.
# -*- coding: utf-8 -*-
"""
Python Script to download the Chrome Extensions (CRX) file directly from the google chrome web store.
Referred from http://chrome-extension-downloader.com/how-does-it-work.php
"""
from __future__ import division
import argparse
import requests
@goofwear
goofwear / switchEMMCUpgradeSteps.txt
Created January 30, 2020 03:40 — forked from znxDomain/switchEMMCUpgradeSteps.txt
Nintendo Switch 32G -> 256G Upgrade Steps for MacOS
Based on this: http://www.nathanbunn.com/NandUpgradeSteps/
using this: https://github.com/ihaveamac/ninfs
and using this: https://github.com/rajkosto/memloader
Using native MacOS tools + NinFS and memloader on the switch.
- Make Backup of 32G NAND
Use Hekate
- Install 256G NAND
- Restore boot0/1 backups with hekate
@goofwear
goofwear / README.md
Created January 30, 2020 19:23 — forked from nikcub/README.md
Facebook PHP Source Code from August 2007
@goofwear
goofwear / gist:ee6a5efaffc2f0980e95e8a9aee0a8ef
Created January 30, 2020 19:26 — forked from philfreo/gist:7257723
Facebook Perl source code from 2005. When browsing around thefacebook.com in 2005 the server spit out some server-side source code rather than running it. I believe this was for their old graph feature that let you visualize the graph between all your friends. The filename is `mygraph.svgz` and contains some gems such as a commented out "zuck" d…
#!/usr/bin/perl
use Mysql;
use strict;
use vars qw($school_name);
use vars qw($pass);
require "./cgi-lib.pl";
from Crypto.Cipher import AES
from Crypto.Util import Counter
import struct
"""
typedef struct boot_dat_hdr
{
unsigned char ident[0x10];
unsigned char sha2_s2[0x20];
unsigned int s2_dst;
###########################################################
# TX SX OS MIPS VM disassembler - by hexkyz and naehrwert #
###########################################################
import os
import re
import struct
host_calls_0 = {
0x8E943DA2 : "host_crc32 (ptr r4r5, len r6)",