0xdevalias

Deobfuscating / Unminifying Obfuscated Web App / JavaScript Code

Some notes and tools for reverse engineering / deobfuscating / unminifying obfuscated web app code.

Table of Contents

• tl;dr: AKA: devalias's shortlist
• PoC
• Benchmarks / Leaderboards / etc

jachiam

# Script for converting a HF Diffusers saved pipeline to a Stable Diffusion checkpoint.
# *Only* converts the UNet, VAE, and Text Encoder.
# Does not convert optimizer state or any other thing.
# Written by jachiam

import argparse
import os.path as osp

import torch

tenzap

Introduction

This works to install OpenGApps into the Android Emulator

Features:

• uses opengapps installer script (that we patch slightly)
• linux only because we mount the ext2/4 disk images to modify them. Could be adapted for macos if you use hdiutil instead of kpartx and have installed tools to mount ext2/4 filesystems on macos
• root permissions mandatory to mount disk images and enter chroot
• removes verity/verified-boot from the virtual device (so that the AVD can boot, otherwise it would not boot because we didn't update the dm_params)

cobusc

from datetime import date, timedelta
from unittest import TestCase
from integration_layer.transformation import Mapping, Transformation


def tomorrow(today: date) -> date:
    return today + timedelta(days=1)


class TestTransformation(TestCase):

imrvelj

Problem

In Arch Linux mkinitcpio -p linux

shows

Possibly missing firmware for module: aic94xx
 Possibly missing firmware for module: wd719x

stephanschielke

#!/bin/bash
echo ==========
echo Check root
echo ==========
if [[ $UID == 0 ]]; then
	echo "Please run this script WITHOUT sudo:"
	echo "$0 $*"
	exit 1
fi

eyecatchup

Mr. Robot Season 2 Easter Egg Sites

1. Ransomware webpage

• Page Name: AdobeTracking.pageName = 'Mr. Robot : S2 Easter Egg Sites : Ransomware : Home';
• URL: http://i239.bxjyb2jvda.net/
• JS: http://i239.bxjyb2jvda.net/web_analytics.js
• Credit: https://0x41.no/mr-robot-s02e01-easter-egg/

On load, this page displays a countdown timer starting at 24:00:00. When time is over, the following "hidden" message is revealed:

ArthurHub

/// <summary>
/// Wrapper for GDI text rendering functions<br/>
/// This class is not thread-safe as GDI function should be called from the UI thread.
/// </summary>
/// <remarks>
/// http://theartofdev.com/2013/08/12/using-native-gdi-for-text-rendering-in-c/<br/>
/// The MIT License (MIT) Copyright (c) 2014 Arthur Teplitzki.
/// </remarks>
public sealed class NativeTextRenderer : IDisposable
{

justlaputa

jobs

jenkins_url + /api/json?tree=jobs[name,color]

builds

jenkins_url + /job/${job_name}/api/json?tree=builds[number,status,timestamp,id,result]

last build

johntyree

#!/usr/bin/env sh

# Download lists, unpack and filter, write to stdout
curl -s https://www.iblocklist.com/lists.php \
  | sed -n "s/.*value='\(http:.*=bt_.*\)'.*/\1/p" \
  | xargs wget -O - \
  | gunzip \
  | egrep -v '^#'