This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#include <stdio.h> | |
#include <windows.h> | |
#include <bcrypt.h> | |
#define NT_SUCCESS(x) (x == 0) | |
#define STATUS_SUCCESS ((NTSTATUS)0) | |
#define STATUS_ERROR ((NTSTATUS)1) | |
NTSTATUS SaveFile(PUCHAR dataBlob, ULONG dataSz, LPCWSTR filePath) | |
{ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python | |
""" | |
Based on pdb_downloader.py v0.1 by Steeve Barbeau | |
""" | |
import sys | |
import argparse | |
import requests | |
import pefile | |
import struct |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
''' | |
Microsoft Correlation Vector, used for telemetry purposes by Microsoft Web APIs | |
Source: https://github.com/Microsoft/Telemetry-Client-for-Android/blob/master/AndroidCll/src/main/java/com/microsoft/cll/android/CorrelationVector.java | |
''' | |
import re | |
import math | |
import random | |
class MsCorrelationVector(object): | |
MAX_CORRELATION_VECTOR_LENGTH = 20 |
NewerOlder