FINALLY no need for tricks!
bonus tip: for more darkness > https://darkreader.org/
thatreguy
mnem
/ ConEmu.xml
Last active
January 20, 2019 09:22
My ConEmu.xml file. See comment for further details and how to install. To find out more about ConEmu, see: https://code.google.com/p/conemu-maximus5/
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?xml version="1.0" encoding="utf-8"?> | |
| <key name="Software"> | |
| <key name="ConEmu"> | |
| <key name=".Vanilla" modified="2013-08-29 11:28:09" build="130827"> | |
| <value name="ColorTable00" type="dword" data="00000000"/> | |
| <value name="ColorTable01" type="dword" data="00ee0000"/> | |
| <value name="ColorTable02" type="dword" data="0000cd00"/> | |
| <value name="ColorTable03" type="dword" data="00cdcd00"/> | |
| <value name="ColorTable04" type="dword" data="000000cd"/> | |
| <value name="ColorTable05" type="dword" data="00cd00cd"/> |
masthoon
/ SystemCMD.cpp
Last active
October 3, 2024 18:16
Launch SYSTEM CMD in user current session (from a service)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #include "stdafx.h" | |
| #include <windows.h> | |
| #include <Winbase.h> | |
| #include <Wtsapi32.h> | |
| #include <Userenv.h> | |
| #include <malloc.h> | |
| #pragma comment(lib, "Wtsapi32.lib") | |
| #pragma comment(lib, "Userenv.lib") |
muety
/ rclone_sync.txt
Last active
December 20, 2022 20:32
Automated Google Drive sync for Linux using rclone
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Script that will trigger a local to remote sync when any changes below your local Google Drive folder occur - but at max. every 10 minutes - and a remote to local sync every x (e.g. 30 minutes) via a cron job. | |
| 0. Install rclone and configure it for Google Drive | |
| 1. Create files listed below | |
| 2. Configure rclone_watch_local.sh to be run on startup (e.g. using a systemd service unit) | |
| 3. Add a cron job that runs rclone_remote2local.sh every x (e.g. 30) minutes | |
| ---------------------- | |
| rclone_local2remote.sh | |
| ---------------------- |
| IDA Plugins | Preferred | Neutral | Unreviewed |
|---|
slick1015
/ halcyon_heap_write-up.md
Last active
April 13, 2019 11:47
200 points
Welcome to the sunny land of Halcyon Heap, where the fastbins are fast and the smallbins don't exist! (libc)
Hint: If you want smallbins done right you do it on your own.
Before we even run the binary let's check the security features with checksec:
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| org 100h | |
| bits 16 | |
| section .text | |
| global __start | |
| jmp __start | |
| Unsupported db 'This application requires at least an 80386 processor.', 0x0d, 0x0a, '$' ; $-terminated message | |
| AlreadyInit db 'Already in Protected Mode!', 0x0d, 0x0a, '$' ; $-terminated message | |
| A20LineFail db 'A20 Line is Disabled or Not Present.', 0x0d, 0x0a, '$' ; $-terminated message |
darkarnium
/ ida-procedures-from-kallsyms.py
Last active
November 14, 2022 15:33
IDA - Uses kallsyms to mark procedures and names.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ''' | |
| Attempts to mark all addresses indicated by kallsyms as procedures, and renames | |
| to match. | |
| This script assumes that the contents of /proc/kallsyms from the target device | |
| has been copied into the same directory as this script. It also assumes that | |
| the relocation base / offset is properly set below. | |
| Author: Peter Adkins (@Darkarnium) | |
| ''' |