spnow’s gists

spnow / stack.c

Created December 24, 2013 12:26 — forked from vanhoefm/stack.c

	#include <stdio.h>

	int main(int argc, char argv[], char envp[])
	{
	int esp;

	printf("env: %p\narg: %p\nesp: %p\n", envp, argv, &esp);
	while (*envp != NULL) {
	printf("%s\n", *envp);
	++envp;

spnow / sysdeps\posix\system.c

Created December 24, 2013 12:27 — forked from vanhoefm/sysdeps\posix\system.c

	#define SHELL_PATH "/bin/sh" /* Path of the shell. */
	#define SHELL_NAME "sh" /* Name to give it. */

	static int do_system(const char *line)
	{
	if (fork() == 0) {
	const char *new_argv[4];
	new_argv[0] = SHELL_NAME;
	new_argv[1] = "-c";
	new_argv[2] = line;

spnow / getkeys.py

Created December 31, 2013 13:50 — forked from trietptm/getkeys.py

	#---------------------------------------------------------------------
	# Simple IDA script to extract RSA private keys and certificates.
	# kyprizel, 2010
	#
	# Based on original idea and PoC by Tobias Klein
	# http://www.trapkit.de/research/sslkeyfinder/
	#---------------------------------------------------------------------
	import os
	import idaapi
	from idautils import *

spnow / WM_VK.py

Created December 31, 2013 13:52 — forked from trietptm/WM_VK.py

	# (C) 20013 Minh Triet Pham Tran
	# Web: https://gist.github.com/trietptm
	# This IDAPython script adds two enum 'eWINDOWS_MESSAGES' and 'eVIRTUALKEYS'
	# Virtual-Key Codes (Windows): http://msdn.microsoft.com/en-us/library/windows/desktop/dd375731%28v=vs.85%29.aspx
	# Window Notifications (Windows): http://msdn.microsoft.com/en-us/library/windows/desktop/ff468922(v=vs.85).aspx
	# http://nah6.com/~itsme/cvs-xdadevtools/ida/idcscripts/wm.idc

	import idaapi

	id = idc.AddEnum(0, "eWINDOWS_MESSAGES", idaapi.hexflag());

spnow / getkeys.py

Created August 10, 2014 20:25 — forked from trietptm/getkeys.py

	#---------------------------------------------------------------------
	# Simple IDA script to extract RSA private keys and certificates.
	# kyprizel, 2010
	#
	# Based on original idea and PoC by Tobias Klein
	# http://www.trapkit.de/research/sslkeyfinder/
	#---------------------------------------------------------------------
	import os
	import idaapi
	from idautils import *

spnow / proxy_urls.txt

Created August 16, 2014 22:07 — forked from trietptm/proxy_urls.txt

	http://gatherproxy.com/proxylist/country/?c=Venezuela
	http://gatherproxy.com/proxylist/country/?c=Peru
	http://gatherproxy.com/proxylist/country/?c=Netherlands
	http://gatherproxy.com/proxylist/country/?c=United%20Kingdom
	http://gatherproxy.com/proxylist/country/?c=Colombia
	http://gatherproxy.com/proxylist/country/?c=Guatemala
	http://gatherproxy.com/proxylist/country/?c=India
	http://gatherproxy.com/proxylist/country/?c=Japan
	http://gatherproxy.com/proxylist/country/?c=Unknow
	http://gatherproxy.com/proxylist/country/?c=Germany

spnow / .screenrc

Last active August 29, 2015 14:06 — forked from cvonkleist/.screenrc

	startup_message off
	defflow auto
	defscrollback 5000
	altscreen on
	autodetach on
	msgwait 3

	#change the hardstatus settings to give an window list at the bottom of the
	#screen, with the time and date and with the current window highlighted
	defutf8 on

spnow / disk_serial_extractor.py

Created August 17, 2016 10:22 — forked from trietptm/disk_serial_extractor.py

Extract the disk serial number from the SOFTWARE hive

	#!/usr/bin/env python
	#######################################################################
	##
	## Extract the disk serial number from the SOFTWARE hive
	##
	#######################################################################

	__AUTHOR__ = '@herrcore'

	import datetime

spnow / redirect_hunter.js

Created August 17, 2016 10:23 — forked from trietptm/redirect_hunter.js

Simple CasperJS script to load page with fake referrer and follow all redirects. The HTML for the final page is printed along with the redirect URLs.


	//setup casper
	var casper = require('casper').create({
	verbose: true,
	//Fake the user agent
	pageSettings: {
	userAgent: 'Mozilla/5.0 (Windows NT 5.1; chromeframe/25.0.1364.152) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.152 Safari/537.22'
	},
	logLevel: "debug"
	//logLevel: "error"

spnow / strings.py

Created August 17, 2016 10:23 — forked from trietptm/strings.py

Extract ASCII and Unicode strings using Python.

	#!/usr/bin/env python

	##########################################################################################################
	##
	## Like steroids for your strings!
	##
	## Original idea: @williballenthin
	## Original link: https://gist.github.com/williballenthin/8e3913358a7996eab9b96bd57fc59df2
	##
	## Lipstick and rouge by: @herrcore