romainthomas

import frida
DEVICE = frida.get_usb_device()

def inject_spawn(package, library):
    pid = DEVICE.spawn([package])
    print(f"{package}:{pid:d}")

    with open(library, "rb") as library_file:
        library_blob = library_file.read()
    DEVICE.inject_library_blob(pid, library_blob, "__my_init_func", "")

romainthomas

#!/usr/bin/env python3.6
import lief
import pathlib
from lief.ELF import Symbol

from lief import Logger
Logger.set_level(lief.LOGGING_LEVEL.INFO)

CURRENT_DIR = pathlib.PosixPath(".").resolve().as_posix()

romainthomas

#!/usr/bin/env python

import lief

shellx = lief.parse("libshellx-2.10.3.1.so")


# .dynsym
dt_symtab = shellx[lief.ELF.DYNAMIC_TAGS.SYMTAB]
dynsym_section = shellx.get_section(".dynsym")

romainthomas

#!/usr/bin/env python3
import time
import ctypes

annoying_list = [
    'Alerte de Symantec',
]

while True:
  buffer_window = ctypes.c_char_p(bytes(200*4))

romainthomas

# 
# Show a hint when the user's mouse is on a register
#
from idaapi import *
import idautils

def extract_reg(line, cx):
    linelen = len(line)
    if cx >= linelen:
        return

romainthomas

# 
# Callback when the user click on a register
#

from idaapi import *

def extract_reg(line, cx):
    linelen = len(line)
    if cx >= linelen:
        return

romainthomas

#
# Show a hint when the user has his mouse on an instruction
#
import idaapi
import idautils

class Hooks(idaapi.UI_Hooks):
    def get_custom_viewer_hint(self, view, place):
        insn = idautils.DecodeInstruction(place.toea())
        if insn: