d0now

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname

d0now

for func in bv.functions:
    fastcall = False
    for block in func:
        for toks, _ in block:
            if str(toks[0]) == 'fret':
                fastcall = True
    if fastcall:
        print(func.name)
        regs = func.clobbered_regs.regs
        if 'a11' in regs:

d0now

#!/bin/bash
set -ex

apt update
apt install -y dante-server

useradd socks

cat <<EOF >/etc/danted.conf
logoutput: syslog stdout /var/log/danted.log

d0now

#
#
from binaryninja.binaryview import BinaryView
from binaryninja.lowlevelil import LowLevelILStore, LowLevelILOperation
from binaryninja.variable import RegisterValueType
from binaryninja.demangle import demangle_gnu3
from binaryninja.exceptions import ILException


def get_llil_lifted(bv: BinaryView):

d0now

from glob import glob
from pathlib import Path
from zipfile import ZipFile


def main(args):
    with ZipFile(str(args.out), 'w') as zip:
        for _f in glob(f"{args.dir}/**", recursive=True):
            file = Path(_f)
            if file.is_file():

d0now

import requests
import json
import pathlib


def query(cpe: str, results_per_page=20, startIndex=0):
    return requests.get(
        "https://services.nvd.nist.gov/rest/json/cves/2.0",
        params={
            'cpeName': cpe,

d0now

#!/usr/bin/env zsh

# Note:
# CMake, Clang, clang-format, Ninja, and sed are required to build

PRINT_CONFIG_AND_EXIT=0
FORCE_CREATE_LINK=0

while getopts b:d:cfl opt
do

d0now

from binaryninja.binaryview import BinaryView
from binaryninja.enums import HighlightStandardColor
from binaryninja.log import log_warn, log_info
from binaryninja.interaction import OpenFileNameField, get_form_input
from binaryninja.plugin import PluginCommand
from typing import List


class LiteCov:

d0now

1. you can dump stack
2. get canary, elf base, libc base leak
3. ROP with no pac included gadgets
4. profit

d0now

#!/usr/bin/env bash

NEWUSER=d0now

set -ex

cd `dirname $0`

export DEBIAN_FRONTEND=noninteractive
export DEBCONF_NONINTERACTIVE_SEEN=true