A simple hexdump module for Python.
The preferred installation method is:
pip install simple-hexdump
| import collections | |
| import os | |
| import sys | |
| import hashlib | |
| paths = [] | |
| for root, dirs, files in os.walk(sys.argv[1]): | |
| for file in files: | |
| paths.append(os.path.join(root, file)) |
| 7plus.com.au,0 | |
| 720p-izle.com,0 | |
| 1plus1tv.ru,1 | |
| 18av.mm-cg.com,1 | |
| 123movies.net,1 | |
| 159i.com,1 | |
| 1000mg.jp,1 | |
| 101.ru,1 | |
| 10.16.100.244,1 | |
| khoai.tv,0 |
| import uuid | |
| import ida_bytes | |
| import ida_hexrays | |
| import ida_idaapi | |
| import ida_kernwin | |
| from PyQt5.Qt import QApplication | |
| class Plugin(ida_idaapi.plugin_t): |
| """ | |
| @file patmake.py | |
| @brief Creates a pattern file from a database | |
| @author neat | |
| """ | |
| import os | |
| import idautils | |
| import ida_bytes | |
| import ida_funcs |
| import argparse | |
| from construct import Int16ul, Int64ul | |
| def main(args): | |
| with open(args.kernel, 'rb') as f: | |
| data = f.read() | |
| sym_addrs = data.find(Int64ul.build(0xffffff8008080000) * 2) | |
| for offset in range(0, len(data), 0x100): |
| import java.io.BufferedReader; | |
| import java.io.File; | |
| import java.io.FileReader; | |
| import java.io.IOException; | |
| import java.util.HashMap; | |
| import java.util.Map; | |
| import org.objectweb.asm.ClassVisitor; | |
| import org.objectweb.asm.ClassWriter; | |
| import org.objectweb.asm.commons.ClassRemapper; |
| import os | |
| import sys | |
| from construct import * | |
| BOOT_IMG_HDR = Struct( | |
| "magic" / Const(b"ANDROID!"), | |
| "kernel_size" / Int32ul, | |
| "kernel_addr" / Int32ul, | |
| "ramdisk_size" / Int32ul, |
| 97 Pearson | |
| 76 Codility | |
| 52 Stereoarts | |
| 43 Webkul | |
| 43 FHAdmin | |
| 41 Attributor | |
| 37 OffensiveSecurity | |
| 35 Odoo | |
| 35 Jetbrains | |
| 29 Mobiscroll |
| import ida_netnode | |
| """ | |
| You can also switch the shell into IDC mode and enter del_user_info(). | |
| You can also edit your `~/ida-x/cfg/ida.cfg` and set `STORE_USER_INFO` to `NO`. | |
| """ | |
| # This will replace the original user blob with the evaluation version blob. | |
| ORIGINAL_USER = \ |