Skip to content

Instantly share code, notes, and snippets.

View llxiaoyuan's full-sized avatar
🚢
Where knowledge ended, speculation began.

Chase llxiaoyuan

🚢
Where knowledge ended, speculation began.
149 followers · 403 following
View GitHub Profile
@llxiaoyuan
llxiaoyuan / dllinjshim.cpp
Created January 7, 2022 10:46 — forked from w4kfu/dllinjshim.cpp
DLL Injection via Shim
/*
-------- dllinjshim.cpp --------
> cl /Fe:dllinjshim.exe dllinjshim.cpp
> dllinjshim.exe
> sdbinst moo.sdb
/!\ On Windows 10 there is a new function `SdbIsKnownShimDll` called
in `SdbGetDllPath` which will check the DLL name against the following list:
@llxiaoyuan
llxiaoyuan / drvscan.cpp
Created March 26, 2022 10:28 — forked from adrianyy/drvscan.cpp
vulnerable driver scanner
#include <string>
#include <vector>
#include <fstream>
#include <iostream>
#include <filesystem>
#include <Windows.h>
#include <winternl.h>
static_assert( sizeof( void* ) == 8 );
@llxiaoyuan
llxiaoyuan / firework-simulator-v2.markdown
Created April 13, 2022 14:39
Firework Simulator v2

Firework Simulator v2

Fireworks fan here. This simulation of various firework effects offers variety and an attempt at realism.

Be sure to check out the settings menu (cog icon on top right) for more features and controls.

🎆 Major v2 Update! 🎆

@llxiaoyuan
llxiaoyuan / pci-table.md
Created April 21, 2022 08:18 — forked from cuteribs-1/pci-table.md
PCI Vendor Data Table
Vendor Id Vendor Name
0x0033 Paradyne Corp.
0x003D master
0x0070 Hauppauge Computer Works Inc.
0x0100 USBPDO-8
0x0123 General Dynamics
0x0315 SK - Electronics Co., Ltd.
0x0402 Acer aspire one
0x046D Logitech Inc.
@llxiaoyuan
llxiaoyuan / qt5.6.3-msvc2017-openssl.txt
Created September 29, 2022 16:56 — forked from stychos/qt5.6.3-msvc2017-openssl.txt
Qt 5.6.3 + MSVC 2017 + OpenSSL 1.0.x (WinXP static build support)
0. Install Visual Studio 2017 (Community Edtion or whatever), select "Windows XP support".
1. Download and unpack OpenSSL 1.0.x sources and prepare build. Mind the paths.
"C:\Program Files (x86)\Microsoft Visual Studio\2017\Community\VC\Auxiliary\Build\vcvarsall.bat" x86
set PATH=C:\Jom;C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Bin;%PATH%
set INCLUDE=C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Include;%INCLUDE%
set LIB=C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Lib;%LIB%
set CL=/D_USING_V110_SDK71_
@llxiaoyuan
llxiaoyuan / build-qt-static-with-msvc.md
Last active October 8, 2022 10:42 — forked from rsouth/build-qt-static-with-msvc.md
Build a static version of Qt 5.15.0 with MSVC 2019.
@llxiaoyuan
llxiaoyuan / make_ipxe_uefi_usb.md
Created November 4, 2022 06:31 — forked from AdrianKoshka/make_ipxe_uefi_usb.md
Making a UEFI bootable iPXE USB drive

Making a UEFI bootable iPXE USB drive

Build the UEFI executable for iPXE

# First we'll clone iPXE
$ git clone git://git.ipxe.org/ipxe.git
# Go into the src directory of the cloned git repo
$ cd ipxe/src
# Compile the UEFI iPXE executable
@llxiaoyuan
llxiaoyuan / obtain_syscall_table_by_fn.c
Created January 18, 2023 06:12 — forked from GoldenOak/obtain_syscall_table_by_fn.c
Linux Kernel Module function for obtaining the syscall table address by seeking through the memory.
/*
* run over the memory till find the sys call talbe
* doing so, by searching the sys call close.
*/
unsigned long * obtain_syscall_table_bf(void)
{
unsigned long *syscall_table;
unsigned long int i;
for (i = (unsigned long int)sys_close; i < ULONG_MAX;
@llxiaoyuan
llxiaoyuan / decrypt.cpp
Created February 28, 2023 05:47 — forked from haram/decrypt.cpp
Escape From Tarkov encryption defeated
#include <stdio.h>
#include <stdint.h>
#include <stdlib.h>
#include <string.h>
// yousif, namazso, can1357, defcon42
namespace packet
{
constexpr size_t be_xor_key = 0xd774f59d;
@llxiaoyuan
llxiaoyuan / const_strcmp.h
Created March 30, 2023 06:58 — forked from kaidokert/const_strcmp.h
C++11 constexpr strcmp, from gcc 4.7.2+ and clang 3.5+
// https://godbolt.org/z/5G3Ah3
// API: constexpr int const_strcmp( "foo", "bar" );
// Much more readable version here: https://gist.github.com/kaidokert/dfc08be8e75a3fc650d3daf8e89c3fe9
// but that doesn't work with GCC before version 7
#include <cstddef>
#include <utility>
namespace detail {