thewh1teagle

Prepare project

mkdir project
cd project
cargo init --lib

Edit Cargo.toml and add

thewh1teagle

Install mold linker on macos

Build

cd /tmp
git clone https://github.com/bluewhalesystems/sold.git
cd sold

cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_CXX_COMPILER=clang -B build

thewh1teagle

Manual compile rustc program

# Rust -> AST -> HIR -> MIR -> IR -> Assembly -> Object -> Link -> Executable
rustc main.rs --emit=llvm-ir # clang IR
llc main.ll # Assembly
clang -c -o main.o main.s # Object file
clang main.o -o main.exe -l"C:\Users\yaako\.rustup\toolchains\stable-x86_64-pc-windows-msvc\lib\rustlib\x86_64-pc-windows-msvc\lib\std-2df1f22abef96888.dll.lib" # Executable
$env:PATH += "C:\Users\yaako\.rustup\toolchains\stable-x86_64-pc-windows-msvc\lib\rustlib\x86_64-pc-windows-msvc\lib"
.\main.exe

thewh1teagle

Fresh urlencoding v2.1.3
       Dirty vibe v0.0.6 (D:\vibe\desktop\src-tauri): the file `desktop\src-tauri\src\main.rs` has changed (13376000199.285733200s, 32s after last build at 13376000167.154701100s)
   Compiling vibe v0.0.6 (D:\vibe\desktop\src-tauri)
     Running `set CARGO=\\?\C:\Users\yaako\.rustup\toolchains\nightly-2024-11-09-x86_64-pc-windows-msvc\bin\cargo.exe&& set CARGO_BIN_NAME=vibe&& set CARGO_CRATE_NAME=vibe&& set CARGO_MANIFEST_DIR=D:\vibe\desktop\src-tauri&& set CARGO_MANIFEST_PATH=D:\vibe\desktop\src-tauri\Cargo.toml&& set CARGO_PKG_AUTHORS=@thewh1teagle&& set CARGO_PKG_DESCRIPTION=Vibe&& set CARGO_PKG_HOMEPAGE=""&& set CARGO_PKG_LICENSE=MIT&& set CARGO_PKG_LICENSE_FILE=""&& set CARGO_PKG_NAME=vibe&& set CARGO_PKG_README=""&& set CARGO_PKG_REPOSITORY=https://github.com/thewh1teagle/vibe&& set CARGO_PKG_RUST_VERSION=""&& set CARGO_PKG_VERSION=0.0.6&& set CARGO_PKG_VERSION_MAJOR=0&& set CARGO_PKG_VERSION_MINOR=0&& set CARGO_PKG_VERSION_PATCH=6&& set CARGO_PKG_VERSION_PRE=""&& set CARGO_PRIM

thewh1teagle

Sign tauri app with self signed certificate

See https://v2.tauri.app/distribute/sign/windows/

1. Create cert

$cert = New-SelfSignedCertificate -Type CodeSigning -Subject "CN=thewh1teagle" -KeyAlgorithm RSA -KeyLength 2048 -CertStoreLocation "cert:\CurrentUser\My"
Write-Output $cert.Thumbprint

thewh1teagle

"""
pip install colorama
"""

import sys
import threading
import time
from colorama import init, Fore, Style

thewh1teagle

"""
Bypass Chrome v20 appbound encryption and extract cookies using Chrome Remote Debugging without admin rights.
Including HTTP Only and Secure cookies.

Developed by: github.com/thewh1teagle  
License: MIT  
For educational purposes only.  
Usage:
pip install websocket-client requests
python main.py

thewh1teagle

"""
pip install pywin32 pycryptodome
python main.py
"""
import ctypes, win32api, win32con, win32security, win32crypt, win32process
from ctypes import wintypes
import os, json, binascii, sqlite3, pathlib
from Crypto.Cipher import AES

thewh1teagle

package main

import (
	"fmt"
	"log"
	"syscall"
	"unsafe"

	"golang.org/x/sys/windows"
	_ "modernc.org/sqlite"

thewh1teagle

"""
Decrypt chrome v20 cookies with app bound protection
Tested in 2024-10-23 with Chrome version 130.0.6723.70 on Windows 11 23H2

pip install pywin32 pycryptodome pypsexec
python main.py
"""
import os
import json
import sys