Kai Yuan Thng thngkaiyuan
thngkaiyuan
/ dl_man.py
Created
November 23, 2016 18:24
A simple download accelerator written in Python
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import os | |
| import sys | |
| import time | |
| import shutil | |
| import threading | |
| import requests | |
| from urllib2 import urlparse | |
| url = sys.argv[1] | |
| conns = 8 |
thngkaiyuan
/ log_module_api_call.py
Last active
May 27, 2016 10:39
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import idaapi | |
| idaapi.CompileLine('static run() { RunPythonStatement("run()"); }') | |
| AddHotkey("Alt-L", "run") | |
| def print_fn_calls(fn_names): | |
| for name in fn_names: | |
| print name |
thngkaiyuan
/ deobfuscation.py
Last active
May 13, 2018 13:52
IDA script for deobfuscation of Nymaim malware
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import idaapi | |
| idaapi.CompileLine('static deobfuscate() { RunPythonStatement("deobfuscate()"); }') | |
| AddHotkey("Alt-N", "deobfuscate") | |
| repl_pairs = { | |
| "e8 3a 00 00 00" : "b8 01 00 00 00", # mov eax, 1 | |
| } | |
| def chunk(string, length): |