Skip to content

Instantly share code, notes, and snippets.

View xee5ch's full-sized avatar

Al xee5ch

View GitHub Profile
@zimnyaa
zimnyaa / nim-assembly-wrapper.py
Created January 31, 2022 13:44
Used in an engagement to bypass Cortex XDR (use NO to break argument signatures). Was about to add unhooking/AMSI+ETW patches, but Nimpackt came out a day after, and you can just use that instead.
import sys, os
nim_template = """import winim/clr
import os
import strutils
proc execute(assembly_bytes: openarray[byte], args: openarray[string]) =
@beltiras
beltiras / cto.py
Last active August 27, 2023 02:45
import time
import datetime
def timing_protect(constant_time):
"""
The jitter will depend not on runtime but activity on the system writ large