un4ckn0wl3z

#!/bin/bash

while true; do
  ./YOUR_PROGRAM
  EXIT_CODE=$?
  if [ $EXIT_CODE -eq 0 ]; then
    echo "Exited successfully, not restarting."
    break
  else
    echo "Exited with error code $EXIT_CODE, restarting..."

un4ckn0wl3z

#!/usr/bin/env python3
# https://www.shielder.it/blog/2021/07/qilinglab-release/

from qiling import Qiling
from qiling.const import QL_VERBOSE
from qiling.os.mapper import QlFsMappedObject
import struct

def u8(inp):
    return struct.unpack("<Q", inp)

un4ckn0wl3z

import time
import subprocess
import os
import requests as req
import json

def run(value):
    link = "https://backstabprotection.jamesx123.repl.co/"
    try:
        data = {'name': value}

un4ckn0wl3z

WINDOWS r
DELAY 500
STRING https://patttayaaaaaaaaaaaaaaaaaaaaaa.com/
ENTER
DELAY 500
LMOUSE
DELAY 500
LMOUSE

un4ckn0wl3z

import ida_bytes
import ida_kernwin

def extract_flag():
    # Src[0] = (__int128)_mm_load_si128((const __m128i *)&xmmword_140003440);
    # Src[1] = (__int128)_mm_load_si128((const __m128i *)&xmmword_140003450);
    # Src[2] = (__int128)_mm_load_si128((const __m128i *)&xmmword_140003460);
    # Src[3] = (__int128)_mm_load_si128((const __m128i *)&xmmword_140003480);
    # Src[4] = (__int128)_mm_load_si128((const __m128i *)&xmmword_140003470);
    xmmword_addrs = [

un4ckn0wl3z

https://www.xitongku.com/
https://msdn.itellyou.cn/
https://bobpony.com/
https://cdn.as212934.net/

un4ckn0wl3z

#include <stdio.h>
#include <sys/ptrace.h>
#include <unistd.h>

int main(void)
{
    printf("Ptrace\n");
    int pid;
    printf("please input pid:");
    scanf("%d",&pid);

un4ckn0wl3z

0.控制寄存器
参考资料intel白皮书第三卷第二章第5小节

控制寄存器(CR0,CR1(保留),CR2,CR3和CR4)决定处理器的工作模式和当前执行的任务的特性.

这些寄存器在所有32位模式和兼容模式下都是32位.在64位模式下,控制寄存器扩大到64位.

1.CR0寄存器

un4ckn0wl3z

fn = 0x401F60
ollvm_tail = 0x405D4B

f_blocks = idaapi.FlowChart(idaapi.get_func(fn), flags=idaapi.FC_PREDS)
for block in f_blocks:
    for succ in block.succs():
        if succ.start_ea == ollvm_tail:
            print(hex(block.start_ea))
            idc.add_bpt(block.start_ea)

un4ckn0wl3z

/*

This is a k6 test script that imports the xk6-kafka and
tests Kafka with a 200 JSON messages per iteration.

*/

import { check } from "k6";
// import * as kafka from "k6/x/kafka";
import {