Skip to content

Instantly share code, notes, and snippets.

@v-p-b
v-p-b / diff.txt
Created November 6, 2024 14:42
ghidra_docs 11.2 to 11.2.1
Files /var/www/ghidra_docs/GHIDRA_VERSION and /tmp/ghidra_docs/GHIDRA_VERSION differ
Files /var/www/ghidra_docs/javadoc/ghidra/app/util/opinion/DyldCacheProgramBuilder.html and /tmp/ghidra_docs/javadoc/ghidra/app/util/opinion/DyldCacheProgramBuilder.html differ
Files /var/www/ghidra_docs/javadoc/ghidra/app/util/opinion/MachoPrelinkProgramBuilder.html and /tmp/ghidra_docs/javadoc/ghidra/app/util/opinion/MachoPrelinkProgramBuilder.html differ
Files /var/www/ghidra_docs/javadoc/ghidra/app/util/opinion/MachoProgramBuilder.html and /tmp/ghidra_docs/javadoc/ghidra/app/util/opinion/MachoProgramBuilder.html differ
Files /var/www/ghidra_docs/javadoc/ghidra/pcode/exec/PcodeFrame.html and /tmp/ghidra_docs/javadoc/ghidra/pcode/exec/PcodeFrame.html differ
Files /var/www/ghidra_docs/javadoc/index-all.html and /tmp/ghidra_docs/javadoc/index-all.html differ
Files /var/www/ghidra_docs/javadoc/member-search-index.js and /tmp/ghidra_docs/javadoc/member-search-index.js differ
@v-p-b
v-p-b / ImportGhidraProject2Eclipse.md
Last active July 10, 2024 16:54
Import existing Ghidra project to Eclipse

Import Existing Ghidra Project to Eclipse

⚠️ Since Ghidra 11.1 the GhidraDev plugin has an Import feature, you can just use that!

Prerequisites

  • Working Eclipse installation
  • Installed GhidraDev extension in Eclipse
@v-p-b
v-p-b / exchange-ssrf-fileleak.py
Last active December 7, 2023 20:13
ZDI-CAN-22101 / ZDI-23-1581 - Exchange SSRF PoC exploit with response retrieval for Burp Suite
# -*- coding: utf-8 -*-
from burp import IBurpExtender
from burp import IHttpListener
import json
# ZDI-CAN-22101 / ZDI-23-1581 - Exchange SSRF PoC exploit with response retrieval for Burp Suite
# by buherator, original research by Piotr Bazydło (@chudypb)
#
@v-p-b
v-p-b / csv2textile.py
Last active September 17, 2024 09:01
CSV to Textile with Python Tabulate
import csv
import sys
import tabulate # https://pypi.org/project/tabulate/
with open(sys.argv[1], newline='') as csvfile:
reader = csv.DictReader(csvfile)
print(tabulate.tabulate(reader, tablefmt="textile", headers="keys"))
@v-p-b
v-p-b / kaitai-dump-offsets.py
Created April 16, 2023 10:34
Dump substructure offsets from objects parsed by Kaitai Struct
# This function recurively traverses a KaitaiStruct objects and dumps the offsets of the substructures encountered.
#
# This is similar to how the WebIDE points you to specific substructers in the parsed tree when you click on some
# byte in the hex editor.
# Unfortunately I couldn't use any IDE tools for this capability, because [JavaScript sucks](https://github.com/kaitai-io/kaitai_struct/issues/183)
# You should generate the Kaitai parser with the `--read-pos` command line option
# The behavior is documented with this issue: https://github.com/kaitai-io/kaitai_struct/issues/331
import string
Randall Munroe - Mi lenne, ha?
ISBN: 978-963-293-368-9
Athenaeum Kiadó, 2014.
Változatlan utánnyomás, 2
Felelős szerkesztő: Kónya Orsolya
Felelős vezető: Tóth Béláné
Fordította: Varga Krisztina
16. oldal: "A rejtélyes [csen]d bizonyára megzavarná őket"
Typo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@v-p-b
v-p-b / call_tree_strings.py
Created October 4, 2020 18:49
Stupid little Ghidra script to find identifiable strings referenced from a function or its descendants
#Stupid little script to find identifiable strings referenced from a function or its descendants
#@author buherator
#@category Test
#@keybinding
#@menupath
#@toolbar
from ghidra.util.task import TaskMonitor
from docking.widgets import OptionDialog
from ghidra.program.model.symbol import RefType
@v-p-b
v-p-b / CodeQL_Workspace_without_starter.md
Last active July 25, 2020 20:26
Setting up a CodeQL workspace without the starter repository