Skip to content

Instantly share code, notes, and snippets.

View throwaway96's full-sized avatar

throwaway96

View GitHub Profile
@NeatMonster
NeatMonster / README.md
Last active August 25, 2024 20:55
A simple hexdump module for Python

Simple Hexdump

A simple hexdump module for Python.

Installation

The preferred installation method is:

pip install simple-hexdump
@wohali
wohali / steps.md
Last active October 2, 2025 15:34
Multi-Function Tester TC1 flashing

Updating U4

  1. Unscrew the case via the 4 screws on the back.
  2. Desolder the positive lead of the rechargeable battery. This is necessary because the bootloader of U4 is only present immediately after power-on.
  3. Configure Tigard (or other USB-TTL device) as follows:
    1. VTGT switch to 3V3
    2. TX to P1 (left side of U4, clearly marked
    3. RX to P2 (just above P1)
    4. GND to GND (just below P1, unmarked)
    5. Prep VTGT to connect to VTGT (just above P2, unmarked, trace goes to pin 2 of U4)
/*
Decompiled from GetMeIn: https://forum.xda-developers.com/web-os/general/getmein-one-time-rooting-jailbreaking-t3887904
tl;dr it scans memory for its own `struct cred` in memory, changes its uid/gids to root.
*/
int __fastcall do_the_patching(uint8_t *a1, unsigned __int8 *creds, int a3, unsigned int a4)
{
int i; // [sp+20h] [bp-Ch]
uint8_t *memptr; // [sp+24h] [bp-8h]
@DavidBuchanan314
DavidBuchanan314 / root_my_vm.py
Last active August 18, 2024 03:00
Get root any running *nix VM by patching it's memory from the host.
#!/usr/bin/python3
import sys
import os
import signal
PATTERN = b"root:x:0:0:root"
REPLACE = b"root::00:0:root"
using System;
using System.IO.Ports;
using System.Threading;
namespace LGTV_BootloaderAccess
{
internal class Program
{
private static void Main(string[] args)
{
@0xgalz
0xgalz / AutoFunc.py
Last active November 20, 2024 07:23
IDAPython- Change Function Names in IDA According to their corresponding debug prints
import idc
import idautils
import idaapi
FUNCTIONS_REGISTERS = {"g_log": "rcx", "g_log_error": "rdx"}
def get_string_for_function(call_func_addr, register):
"""
:param start_addr: The function call address