pyllyukko

# Run with r2 -q -i red_pill.r2 --
agn "red pill"
agn "see how deep the rabbit hole goes"
agn "story ends"
age "red pill" "see how deep the rabbit hole goes"
age "red pill" "story ends"
agg

pyllyukko

FINEID

Card

pcsc_scan (from pcsc-tools) output:

3B 7F 96 00 00 80 31 B8 65 B0 85 04 02 1B 12 00 F6 82 90 00

pyllyukko

# 02 - known
# 435366bfc2e8aff17ff107bf1274b7dca0b189be54e7251aa192ec8e73064424

# few analysis commands to find the functions
aa
aac
# type analysis for win API calls
aaft
# name functions
afn strlen @0x00401000

pyllyukko

#!/bin/bash

# pkg_audit.sh for FreeBSD
# Run from cron so it will mail the diff

umask 077

oldlog="/root/pkg_audit.txt"
newlog="$( /usr/bin/mktemp )"

pyllyukko

#!/bin/sh
if [ -z "${R2PIPE_IN}" ]; then
  echo "r2 -wqi ${0} /path/to/binary"
  exit 1
fi
R="r2p"
hit="$(${R} '/x 83f81e0f8417')"
if [ -z "${hit}" ]
then
  ${R} '?E Failed :(' 1>&2

pyllyukko

#
# Makefile that downloads & verifies Firefox
#

FF_VERSION:=57.0
ARCH:=x86_64
SHELL:=/bin/bash

.PHONY: download
download: firefox/linux-$(ARCH)/en-US/firefox-$(FF_VERSION).tar.bz2

pyllyukko

#!/bin/sh
function ip_to_int() {
  local -ai M=(16777216 65536 256 1)
  local -i  INT=0
  local     OIFS=${IFS}
  IFS="."
  set -- ${*}
  for I in {1..4}
  do
    let INT+=$[${!I}*${M[I-1]}]

pyllyukko

oo+
wx eb0e @ 0x0040137a

pyllyukko

#!/bin/sed

# https://hashcat.net/wiki/doku.php?id=example_hashes
# https://github.com/magnumripper/JohnTheRipper/blob/bleeding-jumbo/run/pass_gen.pl

s/^\(.*\)::\(.*\):\(.*\):\(.*\):\(.*\)$/\2\\\1:::\3:\4:\5::/

pyllyukko

/******
  ghacks user.js * date: 18 Feb 2017 vs pyllyukko user.js
  WHAT ghacks has that pyllyukko doesn't
 ******/

/*** 0100: STARTUP ***/
// 0101: disable "slow startup" options
   // warnings, disk history, welcomes, intros, EULA, default browser check
user_pref("browser.slowStartup.notificationDisabled", true);
user_pref("browser.slowStartup.maxSamples", 0);