mahmoudimus

Usage

In IDAPython,

execfile('<path>/cxxparser.py')
parse_file('<path>/a.cpp',[r'-I<path>\LuaJIT-2.0.5\src', '-D__NT__', '-D__X64__', '-D__EA64__'])
parse_file('<path>/malloc.c',['-target=x86_64-linux-gnu'])

mahmoudimus

# from https://reverseengineering.stackexchange.com/a/11835/13408
# ported to python3 and IDA 8.0+ by Mahmoud Abdelkader


import idaapi
import ida_bytes
import ida_kernwin

def apply_dif_file(dif_file_name):
    print("Applying " + dif_file_name + " to database.")

junron

import real_ctypes

arr = (char[16])(b'I love Python+C!')
print("A big integer:", (uint128)(arr))

arr2 = (long[:])(arr)
print("Chunked:", arr2)

arr2 += 1
print("Back to bytes, but offset:", bytes((char[:])(arr2)))

mahmoudimus

@echo off
REM Place this file into the cheat engine directory and run it.
REM
REM If you've downloaded Cheat Engine and installed it from a non-standard installer, 
REM you might periodically hear a creepy man's laugh lasting three seconds or so. It
REM seems like it might be a virus, malware or something untoward but it is not. It
REM turns out, for non-Patreon users, cheat engine software has a two-stage installer.
REM
REM The first stage is basically adware. The second stage downloads the actual 
REM installer, which can malfunction if not launched by the ad-filled installer. 

mahmoudimus

Obviously the normal ones are: Ctrl-x, Ctrl-u

Alt can be a good leader prefix. Alt-x is emacs-extended-command. Alt-m is used by spacemacs.

Visual Studio has Ctrl-k, Ctrl-e, but IMO, they are not good. Those are very "hot" keys that are used all the time

Tmux has Ctrl-b, which is almost always rebound to Ctrl-a for memory compatibility with Screen's Ctrl-a. It's also not good IMO, but Tmux is used very often that it is reasonable to include Ctrl-a as a leader key.

One I've started playing with is Ctrl-Insert - it has almost no conflicts. There are also Ctrl-Numlock and Ctrl-Scrolllock

mahmoudimus

Here's the link: https://mega.nz/folder/jZR2RLhA#QRSj8BY2b4a27YXvX2Rbyg

Mahmoud Abdelkader found it by going to: https://web.archive.org/web/20220702044249/http://maposafe.net/index/news/show/id/14.html

mahmoudimus

function install() {
  wget https://apt.llvm.org/llvm.sh
  chmod u+x llvm.sh
  sudo ./llvm.sh 17
  locate clang-17
  clang-17 --version
}

function uninstall() {
  sudo rm /etc/apt/sources.list.d/archive_uri-http_apt_llvm_org_*.list

mahmoudimus

# ....
alias sudo="sudo -A"

mahmoudimus

#!/bin/sh

# Explore: 
# https://github.com/howardabrams/hamacs/blob/main/README-Linux.org
# https://batsov.com/articles/2021/12/19/building-emacs-from-source-with-pgtk/
# https://practical.li/blog/build-emacs-from-source-on-debian-linux/
# https://github.com/konstare/emacs-gcc-pgtk/blob/master/Dockerfile

# First determine your gcc version with gcc --version,
# then modify libgccjit-12-dev below to the major version number you have!

neggles

#!/usr/bin/env bash
set -euo pipefail

# please don't run this script as an actual script. it's not remotely error checked. paste command blocks in one by one
# and make sure the output looks vaguely sane.

# remove this once you've read below!
echo "You didn't actually read the instructions, did you?"; exit 1
# first up, `sudo nano /etc/wsl.conf` and add this:
[boot]