wideglide

Friday, November 6, 2020

from: https://www.analysisman.com/2020/11/macos-staticroutes.html

How to add and delete Static Routes on macOS (persistently)

Problem

I have several networks at home, including 192.168.1.0/24 and 192.168.2.0/24. A problem occurred when I connected to a VPN site because it gives a route with 192.168.2.0/23. So my traffic on 192.168.2.0/24 routed through the VPN tunnel instead of my internal home network.

wideglide

function Get-Gzip64 {
    Param (
        $filename
    )
    $fd = [System.IO.File]::ReadAllBytes($filename)
    $ms = New-Object System.IO.MemoryStream
    $gz = New-Object System.IO.Compression.GZipStream($ms, [System.IO.Compression.CompressionMode]::Compress)
    $gz.Write($fd, 0, $fd.Length)
    $gz.Close();
    $ms.Close()

wideglide

1. Definition of function start and end.
2. Functions with exception handlers.
3. Functions like thunk functions (name?).

These examples are from the ByteWeight dataset using the file bap-dataset/pe-x86-64/binary/msvs_whatever_64_O2_vim.

Functions where end == start

The function bounds provided (ground truth) are:

wideglide

#!/usr/bin/env python3

from pprint import pprint
from pymongo import MongoClient

# Straight from the PyMongo Tutorial
#  https://pymongo.readthedocs.io/en/stable/tutorial.html

## Connection parameters (default for FACT)
##   need to change the host parameter

wideglide

;--------------------------------------------
; Name: Josh Bundt
; Class: IA6120
; Assignment 9
; File: decrypt_uuid.asm
; Last modified: 19 Mar 2019
;---------------------------------------------
; nasm -f bin decrypt_uuid.asm

wideglide

#include <idc.idc>

static main() {
  Batch(0);
  Wait();
  RunPlugin("zynamics_binexport_9", 2);
  Exit(0);
}

wideglide

version=1
encoding="UTF-8"
CID=fffffffe
parentCID=ffffffff
isNativeSnapshot="no"
createType="monolithicFlat"

RW 1 FLAT "cce4a5127f0ae2f86bd050a45badb85160597571.binary" 0

wideglide

#!/usr/bin/env python
from pwn import *
import argparse
from struct import pack

# challenge specific
FILE = './syscaller'
SVR = 'chal1.swampctf.com'
PORT = 1800

wideglide

• Create 10MB file filled with NULL bytes

$ dd if=/dev/zero of=/tmp/blank_ext2.img bs=512 count=20480
20480+0 records in
20480+0 records out
10485760 bytes (10 MB, 10 MiB) copied, 0.132602 s, 79.1 MB/s

• Create a EXT2 filesystem inside the blank file (default options).

wideglide

from pwn import *
import sys
from struct import pack

# challenge specific
FILE = './syscaller'
SVR = 'chal1.swampctf.com'
PORT = 1800

# set up environ