aziz

aziz (10)

I love hacking shit and surf fishing.

Bsides 2020, chameleon reverse engineering writeup

This was originally published on sousse.love BsidesSF had really really good reverse engineering challenges, but I loved two challenges. One windows reverse challenge called chameleon and another esp32 firmware reverse challenge called smart-locky which I didn't manage to solve in time. We are given…

Continue reading...

Export chrome bookmarks to org

Simple code to parse chrome bookmarks output, and spit it to an org file. (spit BOOKMARKSFILEORG (let [file (slurp BOOKMARKSFILEHTML) hickorystuff (-> file h/parse h/as-hickory)] (clojure.string/join "\n" (map (fn [x] (let [content (:content x) link (-> x :attrs :href)] (format "* [[%s][%s]]" link (clojure.string/replace…

Continue reading...

Some of my ghidra scripts

AllCyclomaticComplexity.java   This a script to calculate the cyclomatic complexity of all the functions, as the name implies the metric is correlated with function complexity, it is the sum of unique paths within the CFG. read more about it here. Ghidra offers the functionality…

Continue reading...

Cryptopals - set3

Challenge 17 attacking CBC with a padding attack was really interesting, here is my solution from set2 import aes_cbc_decrypt, aes_cbc_encrypt, paddpkcs7, validatepkcs7, split_blocksfrom Crypto import Randomfrom Crypto.Util.strxor import strxordef get_block(text, block, blocksize): return split_blocks(text, blocksize)[block]def produce_ciphertext(plaintext, key): blocksize = len(key) iv = Random.new().read(blocksize) return…

Continue reading...