Skip to content

Instantly share code, notes, and snippets.

@huyna
huyna / 122313
Last active December 25, 2015 08:29
1449130208829
ret2usr
https://tc.gtisc.gatech.edu/bss/2014/r/ret2dir-slides.pdf
http://securityintelligence.com/memgc-use-after-free-exploit-mitigation-in-edge-and-ie-on-windows-10/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SecurityIntelligence+%28Security+Intelligence%29
http://blogs.technet.com/b/srd/archive/2016/01/12/triaging-the-exploitability-of-ie-edge-crashes.aspx
http://expdev-kiuhnm.rhcloud.com/2015/05/19/mona-2/
https://www.corelan.be/index.php/2014/08/16/analyzing-heap-objects-with-mona-py/
https://www.corelan.be/index.php/2013/01/18/heap-layout-visualization-with-mona-py-and-windbg/
https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/
@huyna
huyna / 123414
Created February 18, 2016 08:57
https://drive.google.com/file/d/0B9Cw8k5__G16c05aeG81QjVRRlk/view?pref=2&pli=1
@huyna
huyna / gist:41a8579ed9d86cf770f3
Created February 26, 2016 03:44 — forked from bNull/gist:6003874
IDA Python script that will allow you to highlight a range of bytes and turn it into dwords (for manually fixing up tables or whatever).
# hotkey_utils.py - bNull
#
# Some useful shortcuts for binding to hotkeys. Current output/hotkeys:
#
# [+] Bound make_dwords to Ctrl-Alt-D
# [+] Bound make_cstrings to Ctrl-Alt-A
# [+] Bound make_offset to Ctrl-Alt-O
import idaapi
import idc
az667904.vo.msecnd.net
@ECHO OFF
SETLOCAL
ECHO ASLR Enable / Diable Batch Script - Please run as admin
set /p Choice=Want to Enable or Disable ASLR? (e or d):%=%
if "%Choice%"=="e" goto :ENABLE
if "%Choice%"=="d" goto :DISABLE
:ENABLE
@huyna
huyna / DexGuardDecoder.java
Created March 9, 2016 12:05 — forked from AKosterin/DexGuardDecoder.java
New Dexguard String decoder for JEB 1.5. Tested on GFE 3.1.3. This release auto parse decoder function.
import jeb.api.IScript;
import jeb.api.JebInstance;
import jeb.api.ast.*;
import jeb.api.ast.Class;
import jeb.api.dex.*;
import jeb.api.ui.JavaView;
import jeb.api.ui.View;
import java.util.Arrays;
import java.util.HashMap;
@huyna
huyna / slab slub
Last active April 13, 2023 14:42
http://phrack.org/issues/64/6.html
https://loccs.sjtu.edu.cn/~romangol/download/papers/gossip_ccs2015.pdf
http://resources.infosecinstitute.com/exploiting-linux-kernel-heap-corruptions-slub-allocator/
http://www.slideshare.net/nullthreat/fund-linux-priv-esc-wprotections
http://www.slideshare.net/sciosecurity/linux-kernel-exploitation
http://events.linuxfoundation.org/sites/events/files/slides/slaballocators.pdf
https://github.com/xairy/kaslr-bypass-via-prefetch
http://www.jikos.cz/jikos/Kmalloc_Internals.html
https://github.com/Fuzion24/AndroidKernelExploitationPlayground
http://dcjtech.info/topic/linux-kernel-slab-allocators/
@huyna
huyna / LicenseEngine.cs
Created March 23, 2016 22:18 — forked from gythialy/LicenseEngine.cs
remove license validation of MarkdownPad 2 by Mono Cecil
public bool VerifyLicense(string licenseKey, string email)
{
if (string.IsNullOrEmpty(licenseKey) || string.IsNullOrEmpty(email))
{
return false;
}
try
{
this.License = this.Decrypt(licenseKey);
this.LicenseProcessed = true;