Taken from https://unprotect.it/snippet/code-cave/54/
-f / --file : Valid PE File location (Ex: /path/to/calc.exe).
-p / --payload : Shellcode Payload (Example: "\x01\x02\x03…\x0a").
-x / --encrypt : Encrypt main section (entry point section).
Mahmoud Rusty Abdelkader mahmoudimus
mahmoudimus
/ CodeCaveFinder.md
Last active
December 22, 2022 19:30
(Python) Code Cave By Jean-Pierre LESUEUR
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| """ | |
| This *fake* module is for windows only | |
| Based on: | |
| - https://github.com/facebook/tornado/blob/master/tornado/win32_support.py | |
| - https://github.com/typecode/wikileaks/blob/23a6243df473102a9a1b84f5dde66173df3132b5/lib/tornado/win32_support.py | |
| - https://raw.githubusercontent.com/twisted/twistedmatrix.com-trac-attachments/0a05e3294e7488d8864a73666a007db842c9633e/ticket/bc1/bc1a1f5e1875e3916492b3b509f58cd420eba1d5/b683c2d57b5d19e4fb24a78b44e76ad9129fe19f.patch | |
| - https://github.com/yt-dlp/yt-dlp/blob/1fc089143c79b02b8373ae1d785d5e3a68635d4d/yt_dlp/utils.py#L2095-L2150 | |
| """ |
mahmoudimus
/ Microsoft.PowerShell_profile.ps1
Last active
September 23, 2023 16:36
M$ Windowz Powershell mapping
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Inspirations from: | |
| # - https://github.com/tex2e/blog/blob/master/_posts/powershell/2021-01-11-open.md?plain=1 | |
| # - https://github.com/PowerShell/Community-Blog/blob/main/Posts/2022/07/cheat-sheet-console-experience.md?plain=1 | |
| # Other PowerShell profiles | |
| # - https://github.com/mikemaccana/powershell-profile/blob/master/defaults.ps1 | |
| # - https://github.com/staxmanade/DevMachineSetup/blob/master/initProfile.ps1 | |
| # - https://github.com/epoweripione/dotfiles/blob/main/powershell/Microsoft.PowerShell_profile.ps1 | |
| # - https://github.com/effs/dotfiles/blob/main/powershell/pwsh7_profile.ps1 | |
| # - https://github.com/razy69/Powershell/blob/master/Doc/Machine_Profile.ps1 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| /* | |
| Symbol Key | |
| ^ RCtrl | |
| ! Alt | |
| # Windows Key (cmd in mac keyboard) | |
| + SHIFT | |
| #c::Send, ^c | |
| #v::Send, ^v | |
| #x::Send, ^x |
mahmoudimus
/ patches.txt
Created
December 19, 2022 22:36
— forked from interferenc/patches.txt
Skylake-X and X299 BIOS patches to disable MSR 0xE2 lock AND TSC Fix
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SiInit | |
| 299D6F8B-2EC9-4E40-9EC6-DDAA7EBF5FD9 12 P:81E10080000033C1:9090909090909090 | |
| # PpmInitialize Reset IA32_TSC_ADJUST to 0 instead of enforcing 0xE2 lock | |
| 3FFCAE95-23CF-4967-94F5-16352F68E43B 10 P:742CB9E20000000F3248C1E220480BC20FBAE00F488944240872130FBAE80F89442408488B54240848C1EA200F30:BA00000000B800000000B93B0000000F309090909090909090909090909090909090909090909090909090909090 | |
| # CpuInitPei Reset IA32_TSC_ADJUST to 0 instead of enforcing 0xE2 lock | |
| 01359D99-9446-456D-ADA4-50A711C03ADA 12 P:B9E20000000F328BC8BE0080000023CE0BCF75190BC6894424088954240C8B54240C8B442408B9E20000000F30:BA00000000B800000000B93B0000000F3090909090909090909090909090909090909090909090909090909090 | |
| # CpuMpDxe to disable TSC writes |
mahmoudimus
/ idapython_cheatsheet.md
Created
December 16, 2022 04:56
— forked from icecr4ck/idapython_cheatsheet.md
Cheatsheet for IDAPython
mahmoudimus
/ DemangleRust.py
Created
December 12, 2022 23:11
— forked from str4d/DemangleRust.py
Ghidra script for demangling Rust symbols
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Attempts to demangle all mangled symbols in the current program using the Rust | |
| # mangling schemes, and replace the default symbol and function signature | |
| # (if applicable) with the demangled symbol. | |
| # | |
| # License: MIT OR Apache-2.0 | |
| #@author Jack Grigg <thestr4d@gmail.com> | |
| #@category Symbol | |
| import string |
mahmoudimus
/ zsh-cheatsheet.md
Created
December 11, 2022 04:26
— forked from ClementNerma/zsh-cheatsheet.md
This is a cheat sheet for how to perform various actions to ZSH, which can be tricky to find on the web as the syntax is not intuitive and it is generally not very well-documented.
| Description | Syntax |
|---|---|
| Get the length of a string | ${#VARNAME} |
| Get a single character | ${VARNAME[index]} |
mahmoudimus
/ emacs-gfm.md
Last active
November 13, 2022 18:51
— forked from JayKickliter/emacs-gfm.md
Render github-flavored markdown (GFM) in emacs using `pandoc`
mahmoudimus
/ README.md
Created
November 12, 2022 05:30
— forked from adithyabsk/README.md
HOWTO: Convert iBook EPUBs to standard EPUBs
iBooks EPUBs actually show up on macOS as folders. If you need the actual file you can use the above script to convert your iBook directory of files to a destination directory.
The path of iBook files as of macOS 10.15.7 is:
/Users/${USER}/Library/Mobile Documents/iCloud~com~apple~iBooks/Documents