mahmoudimus

# (c) Tim Blazytko 2021
# implementation based on the blog post "Automated Detection of Control-flow Flattening"
# https://synthesis.to/2021/03/03/flattening_detection.html
import sys

from miasm.analysis.binary import Container
from miasm.analysis.machine import Machine
from miasm.core.locationdb import LocationDB

mahmoudimus

IDA Microcode notes

References

• Ilfak's presentation at Recon 2018
• Microcode in pictures
• Hex-Rays Microcode API vs. Obfuscating Compiler
• Scripts vds10, vds11, vds12 and vds13 from Hex-Rays SDK

Implementation

mahmoudimus

Usage

In IDAPython,

execfile('<path>/cxxparser.py')
parse_file('<path>/a.cpp',[r'-I<path>\LuaJIT-2.0.5\src', '-D__NT__', '-D__X64__', '-D__EA64__'])
parse_file('<path>/malloc.c',['-target=x86_64-linux-gnu'])

mahmoudimus

# /etc/nsmb.conf - macOS 11.3 - 2021-04-29
#------------------------------------------------------------------------------
# SMB configuration for macOS 11.3 <-> Synology
#------------------------------------------------------------------------------
# Additional information:
# -----------------------
# https://support.apple.com/de-de/HT211927
# https://support.apple.com/en-us/HT208209
# https://apple.stackexchange.com/questions/309016/smb-share-deadlocks-since-high-sierra
# https://photographylife.com/afp-vs-nfs-vs-smb-performance

mahmoudimus

Preparation
1 - Download lua source in https://www.lua.org/download.html
2 - Unpack (use 7-zip)
3 - Create an C:\src\lua
4 - In C:\src\lua create dirs: include, lib, bin and doc
5 - Copy 'doc' from lua.tar.gz to C:\src\lua\doc
6 - Copy all files from lua.tar.gz src, to C:\src\lua\include

Creating a .lib and .dll
1 - Create a new blank project in Visual Studio

mahmoudimus

-------------------------------
ODbgScript english plugin by E3
site : http://odbgscript.sf.net
-------------------------------

1. About OllyScript and ODbgScript
2. Status
 2.1 What's new?
3. Documentation
 3.1 Language

mahmoudimus

/** 
* @file   endianness.h
* @brief  Convert Endianness of shorts, longs, long longs, regardless of architecture/OS
*
* Defines (without pulling in platform-specific network include headers):
* bswap16, bswap32, bswap64, ntoh16, hton16, ntoh32 hton32, ntoh64, hton64
*
* Should support linux / macos / solaris / windows.
* Supports GCC (on any platform, including embedded), MSVC2015, and clang,
* and should support intel, solaris, and ibm compilers as well.

mahmoudimus

// system resources physical memory map VM detection trick
// written by Graham Sutherland (@gsuberland) for Nettitude

// based on prior work done as part of the al-khaser project
// https://github.com/LordNoteworthy/al-khaser/

// ref: https://blog.xpnsec.com/total-meltdown-cve-2018-1038/
// ref: https://gist.github.com/xpn/3792ec34d712425a5c47caf5677de5fe

// compile:

mahmoudimus

Mythic Fyrak Macro/WA Setup & Troubleshooting

The Macro - You probably already have this from Smolderon prog

Liquid

/run WeakAuras.ScanEvents("LIQUID_PRIVATE_AURA_MACRO", true)

NS

/run WeakAuras.ScanEvents("NS_PA_MACRO", true)

Bonus stuff

• Some people like including a Squeaky Bat use in their macro, so that you can see in logs when people pressed the macro.
  • The bats cost like 5-10k on the AH and are NOT consumed on use, so everyone in your raid only needs one.
• This way, any casts of Squeaky Bat (179295) in logs would indicate a macro press.

mahmoudimus

TensorRT + Ubuntu 22.04 (on WSL2)

I revolced the following warnings related to libnvinfer.so.7 and libnvinfer_plugin.so.7

W tensorflow/stream_executor/platform/default/dso_loader.cc:64] Could not load dynamic library 'libnvinfer.so.7'; dlerror: libnvinfer.so.7: cannot open shared object file: No such file or directory; LD_LIBRARY_PATH: xxxxx
W tensorflow/stream_executor/platform/default/dso_loader.cc:64] Could not load dynamic library 'libnvinfer_plugin.so.7'; dlerror: libnvinfer_plugin.so.7: cannot open shared object file: No such file or directory; LD_LIBRARY_PATH: xxxxx
W tensorflow/compiler/tf2tensorrt/utils/py_utils.cc:38] TF-TRT Warning: Cannot dlopen some TensorRT libraries. If you would like to use Nvidia GPU with TensorRT, please make sure the missing libraries mentioned above are installed properly.