Netspooky's Blog

tmp.0ut Article: https://tmpout.sh/2/3.html

This is the version I did for tmp.0ut Volume 2.

https://tmpout.sh/2/13.html

tmp.0ut Article: https://tmpout.sh/2/14.html

https://www.alchemistowl.org/pocorgtfo/pocorgtfo21.pdf

https://github.com/netspooky/importsort

https://github.com/netspooky/dissectors/blob/main/bgblink.lua

https://github.com/netspooky/uJunk/blob/main/art/asciifonts/six-fo.flf

https://github.com/netspooky/uJunk/blob/main/art/asciifonts/koholint.flf

Link: https://github.com/binarygolf/BGGP/tree/main/2021

Source Code: https://github.com/netspooky/golfclub/blob/master/windows/ns.bggp2021.asm

RE Tips: Timestamps Originally Posted: 2021-09-10 If you’re analyzing an unknown protocol or binary format, know your time stamps!

https://github.com/netspooky/dissectors/blob/main/pgstats.lua

https://tmpout.sh/2/11.html TODO Convert to markdown

Shellcode Tricks I originally wrote this to send to a friend who had some questions about crafting x86 payloads.

https://github.com/netspooky/kimagure

https://n0.lol/bggp/2021/ TODO: Link to binary.golf site with the proper pages.

Code: # 2021-06-09 # Use this to send raw packets with python # $ printf "somebytes" | sudo python3 sendframe.py # https://twitter.com/netspooky/status/1402647501090459653 from socket import * import sys interface = "ens33" # Change data = sys.stdin.bu…

tmp.0ut Article: https://tmpout.sh/1/9.html

This writeup will be a quick rundown of how Base64 works, and how ambiguity in the decoding process can be used to an attacker or defender’s advantage.

Fun Fact: A Py3.7+ .pyc code object contains a header for various things like the number of local variables, stack size, flags etc, as well as the bytecode for the code block.

https://tmpout.sh/1/Linux.Precinct3.asm

Misc Useful Find duplicate files find . !

Original post: https://twitter.com/netspooky/status/1309158304426479616 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 import base64 x ='\x2b\x0d\x06\x3c\x2d\x39\x1e\x3d' x+='\x2f\x77\x1a\x3c\x07\x0f\x05\x38' x+='\x15\x05\x34\x37\x17\x31\x0c\x39' x+=…

Code: # 2020-09-20 # Used to generate this import time import urllib.request l0 = '8b........d8...............................................................................................................88..88.........................................…

https://www.youtube.com/watch?

This is my entry for the first annual Binary Golf Grand Prix.

Slides: hellabooters.pdf Video: https://www.youtube.com/watch?

A script I made for diffing packets from a pcap.

https://n0.lol/bggp/ TODO: Link to binary.golf site with the proper pages.

Dec Hex Char Dec Hex Char Dec Hex Char Dec Hex Char -------------- -------------- -------------- -------------- 0 00h NUL (null) 32 20h SP 64 40h @ 96 60h ` 1 01h SOH (start of heading) 33 21h !

Video: https://www.youtube.com/watch?

Here’s a quick note on some malware targeting exotic processor architectures.

I’ve been wanting to learn more about Windows exploits and shellcode techniques for a bit, but a lot of resources out there (similarly to Linux), are based on 32 bit version of Windows, are very version specific, and simply don’t work on modern systems.

Establishing the goals for doing firmware analysis is important, ask yourself the following: Are you looking for modify functionality?

References https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/commands https://github.com/hugsy/defcon_27_windbg_workshop/blob/master/windbg_cheatsheet.md https://medium.com/@yardenshafir2/windbg-the-fun-way-part-1-2e4978791f9b https://med…

Here are some notes and things I’ve referenced for gdb.

https://github.com/threatland/TL-BOTS

https://github.com/netspooky/inhale

https://github.com/threatland/TL-TROJAN

Intro Configuration management is hard, expecially at scale.

https://github.com/threatland/TL-FRAUD

This script iterates over endpoints on a self-hosted Jira instance and downloads them.

Hey y’all, thanks for all the support !

Greetings everyone, and welcome to part two of the Binary Mangling series.

Okay, so you want to see how small you can make a 64 bit binary.

Here are some notes on experimenting with small ARM32 binaries.

Listing some generic GSM / GPRS Modem AT commands.

Bootloaders at their core are very simple pieces of code.