Skip to content

Instantly share code, notes, and snippets.

View strazzere's full-sized avatar
:shipit:
hacking intensifies

Tim Strazzere strazzere

:shipit:
hacking intensifies
1.3k followers · 117 following
View GitHub Profile
@strazzere
strazzere / gist:887599b61f99cf7b52cb95da72b78341
Created March 21, 2024 17:34
Find most recent ubuntu image on aws for cloudformation
aws ec2 describe-images --region us-gov-west-1 \  ⇣62.5 KiB/s ⇡4.33 KiB/s 192.168.1.140   98.97.58.200   96%   150 Mbps  
--filters "Name=name,Values=ubuntu-*-amd64*" \
--query 'Images[*].[ImageId,CreationDate]' --output text \
| sort -k2 -r \
| head
@strazzere
strazzere / gotcha.go
Created May 24, 2023 16:53
Spot the bug, point to array appending in golang
package main
import (
"fmt"
)
func test() []*int {
ints := []int{1, 2, 3, 4, 5}
var newInts []*int
@strazzere
strazzere / extract_gnu_debugdata_for_ida.sh
Created June 23, 2020 21:33 — forked from rpw/extract_gnu_debugdata_for_ida.sh
#!/bin/bash
# quick and dirty bash script to extract .gnu_debugdata section
# from ELF binaries to generate an IDC script that adds these
# names as symbols
# --rpw, 2020-06-21
SYMBOLFILE=debugdata_symbols.elf
if [ $# -lt 1 ]; then
echo "you need to supply a path to a binary"
@strazzere
strazzere / to_decrypt
Last active October 8, 2018 06:45
This file has been truncated, but you can view the full file.
antistatic/spinnerwheel/AbstractWheel$1
antistatic/spinnerwheel/AbstractWheel$2
antistatic/spinnerwheel/AbstractWheel$3
antistatic/spinnerwheel/AbstractWheel$SavedState
antistatic/spinnerwheel/g$1
antistatic/spinnerwheel/g$2
bolts/AndroidExecutors$UIThreadExecutor
bolts/BoltsExecutors$ImmediateExecutor
bolts/CancellationTokenSource$1
bolts/Task$10
@strazzere
strazzere / ADVDeobfuscator.py
Created May 17, 2018 17:41
Use unicorn to deobfuscate simple ADVobfuscator string encryptions, used by secneo
#!/usr/bin/env python
# fsck secneo
from __future__ import print_function
from unicorn import *
from unicorn.arm_const import *
from capstone import *
import binascii
DEBUG = False
@strazzere
strazzere / filename_validation.py
Created March 23, 2018 22:04
#!/usr/bin/env python
# diff
from __future__ import print_function
from unicorn import *
from unicorn.arm_const import *
import binascii
import sys
# code to be emulated
@strazzere
strazzere / test.config
Created October 24, 2017 02:55
test
# sample synergy configuration file
#
# comments begin with the # character and continue to the end of
# line. comments may appear anywhere the syntax permits.
# +-------+ +--------+ +---------+
# |Laptop | |Desktop1| |iMac |
# | | | | | |
# +-------+ +--------+ +---------+
section: screens
@strazzere
strazzere / LocationRequest.java
Last active September 13, 2017 06:07
LocationRequest
// Decompiled by Jad v1.5.8g. Copyright 2001 Pavel Kouznetsov.
// Jad home page: http://www.kpdus.com/jad.html
// Decompiler options: packimports(3)
package com.google.android.gms.location;
import android.os.*;
import com.google.android.gms.common.internal.ReflectedParcelable;
import com.google.android.gms.common.internal.safeparcel.AbstractSafeParcelable;
import com.google.android.gms.common.internal.zzz;
@strazzere
strazzere / output.bash
Created September 12, 2017 21:04
Baksmali to Smali
rigby:contents diff$ ls -l
total 12600
-rw-r--r-- 1 diff staff 13268 Dec 31 1979 AndroidManifest.xml
drwxr-xr-x 6 diff staff 204 Sep 12 14:03 META-INF
-rw-r--r-- 1 diff staff 623 Dec 31 1979 androidannotations-api.properties
drwxr-xr-x 4 diff staff 136 Sep 12 14:03 assets
-rw-r--r-- 1 diff staff 939 Dec 31 1979 build-data.properties
-rw-r--r-- 1 diff staff 5646628 Dec 31 1979 classes.dex
drwxr-xr-x 3 diff staff 102 Sep 12 14:03 jsr305_annotations
drwxr-xr-x 5 diff staff 170 Sep 12 14:03 lib
@strazzere
strazzere / blah.c
Created September 6, 2017 18:53
Example of calling android method from native code
void Log(std::string s){
JNIEnv *env;
g_JavaVM->GetEnv((void**)&env, JNI_VERSION_1_6);
jstring jstr1 = env->NewStringUTF(s.c_str());
jclass clazz = env->FindClass("diff/strazzere/secret/method");
// Later part is dalvik notation for parameters and return value, string param and void return value here
jmethodID mid = env->GetStaticMethodID(clazz, "methodname", "(Ljava/lang/String;)V");