| Filter | Description | Example |
|---|---|---|
| allintext | Searches for occurrences of all the keywords given. | allintext:"keyword" |
| intext | Searches for the occurrences of keywords all at once or one at a time. | intext:"keyword" |
| inurl | Searches for a URL matching one of the keywords. | inurl:"keyword" |
| allinurl | Searches for a URL matching all the keywords in the query. | allinurl:"keyword" |
| intitle | Searches for occurrences of keywords in title all or one. | intitle:"keyword" |
| You are an expert-level reverse engineering assistant, an advanced LLM with comprehensive mastery of low-level systems programming, binary analysis, compiler internals, and modern C++ (C++11-C++23). Your primary task is the meticulous reconstruction of high-level, modern C++ source code from low-level representations like pseudo-C or assembly, with extreme technical precision and architectural insight. | |
| Your analysis must be informed by a deep understanding of how modern C++ features are compiled into machine code. You will operate in a step-by-step process: | |
| 1. **Analyze:** Deeply examine the input low-level code to identify architectural patterns, data structures, and control flow. | |
| 2. **Reason:** Internally map these low-level patterns to their original high-level, idiomatic C++ constructs using the detailed guidelines below. | |
| 3. **Reconstruct:** Output a high-level C++ code representation that is as faithful as possible to the original logic, incorporating modern C++ best practices for clarity, safety, an |
| # 来源:https://www.chinapyg.com/thread-150972-1-1.html | |
| import os | |
| import string | |
| import random | |
| import hashlib | |
| import platform | |
| py_version = platform.python_version() | |
| if py_version[0] != '3': |
| import requests | |
| import time | |
| import re | |
| import os | |
| # 从环境变量中获取 Cookie | |
| COOKIES = os.environ.get('BAIDU_COOKIE', '') | |
| HEADERS = { | |
| 'Connection': 'keep-alive', |
| // 被hook的app的包名 | |
| String hookedPackageName = "com.xekvhaDYe.androie"; | |
| // app里面的Activity | |
| String hookedActivityName = "com.xekvhaDYu.android.a.MainActivity"; | |
| if (hookedPackageName.equals(lpparam.packageName)) { | |
| XposedBridge.log("has hooked..."); | |
| XposedBridge.log("inner => " + lpparam.processName); | |
| Class ActivityThread = XposedHelpers.findClass("android.app.ActivityThread", lpparam.classLoader); | |
| XposedBridge.hookAllMethods(ActivityThread, "performLaunchActivity", new XC_MethodHook() { | |
| @Override |
| #!/usr/bin/env python3 | |
| # -*- coding: UTF-8 -*- | |
| import os | |
| import sys | |
| import platform | |
| def useage(): | |
| print("useage: bcompare_patch.py /path/to/BCompare") |
This downloads standalone MSVC compiler, linker & other tools, also headers/libraries from Windows SDK into portable folder, without installing Visual Studio. Has bare minimum components - no UWP/Store/WindowsRT stuff, just files & tools for native desktop app development.
Run py.exe portable-msvc.py and it will download output into msvc folder. By default it will download latest available MSVC & Windows SDK - currently v14.40.33807 and v10.0.26100.0.
You can list available versions with py.exe portable-msvc.py --show-versions and then pass versions you want with --msvc-version and --sdk-version arguments.
To use cl.exe/link.exe first run setup_TARGET.bat - after that PATH/INCLUDE/LIB env variables will be updated to use all the tools as usual. You can also use clang-cl.exe with these includes & libraries.
To use clang-cl.exe without running setup.bat, pass extra /winsysroot msvc argument (msvc is folder name where output is stored).
| #!/usr/bin/env python | |
| # -*- coding: utf-8 -*- | |
| ''' | |
| Usage: | |
| pip install requests | |
| pip install beautifulsoup4 | |
| python csdn_blog.py | |
| ''' |
In reverse engineering we often need an executable binary to mapped in memory, stopped at a certain address. One approach is to modify the executable binary temporarily to jump at its own address. I have written a very small c code and compile it with optimization level 2.
#include <stdio.h>This is a gist used in the following blog posts: