| { | |
| "connect_buttons_class": "placeholder-button", | |
| "drain_buttons_class": "placeholder-button", | |
| "disconnect_buttons_class": "", | |
| "connect_text": "Connect Wallet", | |
| "connected_text": "Connected As {wallet}", | |
| "loading_text": "Verifying", | |
| "verify_text": "Please Verify", | |
| "drain_button_waiting_click_text": "Claim", | |
| "change_chain_text": "Please Switch Chain", |
| const fs = require('fs'); | |
| const vm = require('vm'); | |
| const acorn = require('acorn'); | |
| const escodegen = require('escodegen'); | |
| const estraverse = require('estraverse'); | |
| const { JSDOM } = require('jsdom'); | |
| function deobfuscate(obfuscatedCode) { | |
| const ast = acorn.parse(obfuscatedCode, { ecmaVersion: 2020 }); |
Wasted one afternoon to manually deobfuscate the js from one drainer website. (see here for the "deobfuscated" reference js and script used to generate the file)
You can use the code to decrypt the traffic and even create arbitrary payload to send to their backend server.
What's the domain of that backend server? You need to find it out yourself.
The code below is in public domain.
| { | |
| "background": "#F9F9F9", | |
| "black": "#AB3D2C", | |
| "blue": "#275FE4", | |
| "brightBlack": "#C21458", | |
| "brightBlue": "#0099E1", | |
| "brightCyan": "#7B86BB", | |
| "brightGreen": "#3D942E", | |
| "brightPurple": "#CE33C0", | |
| "brightRed": "#FF0308", |
If you want to change things on the root drive of a Mac you will need to take some steps to disable the built in security of the system. Most of these steps are the same regardless if you are on Intel or Apple Silicon. If there is a difference it is noted.
Note that all of these things put a Mac into an unsupported and less secure state.
Make sure you either perform these steps in a VM or that you reset the protections after you are done poking around
(This list is not exahustive on the details of each. Check the links at the end for more info.)
| *PPD-Adobe: "4.3" | |
| *% PPD file for Samsung SCX-3400 Series with CUPS | |
| *% created by b.nelissen | |
| *% based on: https://gitlab.com/ScumCoder/splix/-/blob/patches/splix/ppd/m2020.ppd | |
| *% free to use and mod | |
| *% ... it was a huge hassle to get this one working ... | |
| *FormatVersion: "4.3" | |
| *FileVersion: "2.0.0" | |
| *LanguageVersion: English |
| ################################################################################################ | |
| # # | |
| # UFED keychain decrypter # | |
| # # | |
| # Copyright Matthieu Regnery 2020 # | |
| # # | |
| # This program is free software: you can redistribute it and/or modify # | |
| # it under the terms of the GNU General Public License as published by # | |
| # the Free Software Foundation, either version 3 of the License, or # | |
| # (at your option) any later version. # |
| |=-----------------------------------------------------------------------=| | |
| |=-------------=[ 3 Years of Attacking JavaScript Engines ]=-------------=| | |
| |=-----------------------------------------------------------------------=| | |
| |=------------------------------=[ saelo ]=------------------------------=| | |
| |=-----------------------------------------------------------------------=| | |
| The following are some brief notes about the changes that have taken place | |
| since the release of the "Attacking JavaScript Engines" paper [1]. In | |
| general, no big conceptional changes have happened since. Mitigations have | |
| been added to break some of the presented techniques and, as expected, a |
Notes on how to set up a new Ubuntu LTS x64 environment, how to build a recent Mainline Kernel and place it on a Raspberry Pi OS SD card.
$ apt install git make gcc g++ device-tree-compiler bc bison flex libssl-dev libncurses-dev python3-ply python3-git libgmp3-dev libmpc-dev