olivierlemoal

Reverse / Debugging

• Instrumentation
  • LIEF - Library to Instrument Executable Formats
  • Frida - Dynamic instrumentation toolkit
• Binary analysis
  • Kaitai - A new way to develop parsers for binary structures.
  • binwalk - Firmware Analysis Tool
  • UEFItools - Working with UEFI firmware images
• 010 Editor - Professional Text/Hex Editor with Binary Templates

olivierlemoal

Linux

Local transparent proxy

Import CA

From https://wiki.archlinux.org/index.php/User:Grawity/Adding_a_trusted_CA_certificate

Currently Arch Linux uses p11-kit from Fedora, which has more features (e.g. explicit distrusts) than the older scripts from Debian. To import a trust anchor using p11-kit, do:

olivierlemoal

Moved to https://github.com/olivierlemoal/i3-swap-focus

olivierlemoal

# Wine wrapper
# - Create new prefix with custom wine version
# - Custom Wine options
# - Install/remove DXVK/D9VK
# - Support winetricks

## Wrapper options
WINE_PATH="/home/user/.local/share/lutris/runners/wine/"
WINE_VERSION="lutris-5.0-x86_64"
export WINEPREFIX="/path/to/prefix"

olivierlemoal

# Configure proxy
$ wine control 
> Paramètres internet > Connections
# Add certificate
> Paramètres internet > Contenu > Editeurs > Importer

olivierlemoal

// ==UserScript==
// @name     Opensubtitles Fake Extension
// @version  1
// @match    *://www.opensubtitles.org/*
// @match    *://www.opensubtitles.com/*
// @grant    none
// ==/UserScript==

var meta = document.createElement('meta');
meta.name = "accesslevel";

olivierlemoal

iptables -t mangle -I PREROUTING -m policy --pol ipsec --dir in -j NFLOG --nflog-group 5
iptables -t mangle -I POSTROUTING -m policy --pol ipsec --dir out -j NFLOG --nflog-group 5
tcpdump -s 0 -n -i nflog:5

olivierlemoal

import socket
import time

IP = "127.0.0.1"
PORT = 9220


def receiv():
    data = None
    try:

olivierlemoal

[
    {"keys": ["ctrl+:"], "command": "toggle_comment", "args": { "block": false } },
    {"keys": ["ctrl+shift+:"], "command": "toggle_comment", "args": { "block": true } },

    { "keys": ["ctrl+space"], "command": "auto_complete" },
    { "keys": ["ctrl+space"], "command": "replace_completion_with_auto_complete", "context":
        [
            { "key": "last_command", "operator": "equal", "operand": "insert_best_completion" },
            { "key": "auto_complete_visible", "operator": "equal", "operand": false },
            { "key": "setting.tab_completion", "operator": "equal", "operand": true }

olivierlemoal

#! /usr/bin/env python3
import sys
import os
from path import path

if len(sys.argv) < 2:
    print("Usage : {} path".format(sys.argv[0]))
    exit(1)

path = path(sys.argv[1])