hugsy

/**
 * Poor version of checksec.sh script for PE (checks for ASLR, NX, Integrity, SEH flags)
 *
 * Copy/Paste commands
 * c:\> dir /s /b *.dll > DllList.txt
 * c:\> checksec.exe -f DllList.txt > DllList_checksec.txt
 *
 * @ref
 * https://msdn.microsoft.com/en-us/library/windows/desktop/ms680339(v=vs.85).aspx
 */

mkropat

import ctypes, sys
from ctypes import windll, wintypes
from uuid import UUID

class GUID(ctypes.Structure):   # [1]
    _fields_ = [
        ("Data1", wintypes.DWORD),
        ("Data2", wintypes.WORD),
        ("Data3", wintypes.WORD),
        ("Data4", wintypes.BYTE * 8)

rofl0r

#define _XOPEN_SOURCE 700
#include <signal.h>
#include <unistd.h>

int main()
{
	sigset_t set;
	int status;

	if (getpid() != 1) return 1;

quiver

import collections
import ctypes
import ctypes.util

# bit masks
IN_ISDIR      = 0x40000000
IN_ALL_EVENTS = 0xfff

class inotify_event_struct(ctypes.Structure):
    """

bcse