RSSAmplifier

Blog

nullteilerfrei

zurückgleiten bitte

blag.nullteilerfrei.deRSS feed ↗17 posts

Latest posts

Resuming a Claude Session When Your Budget Resets

It was late. I wanted to sleep. But Claude said that my session would reset at 00:40 in the morning. And that was _only_ 2 hours from now. I thought way too long about what I should do. I failed thinking of this, but I realized it the next morning, this is what I should have done: [ ]

CrimeEnjoyor: Hunting EIP-7702 Sweeper Contracts on Ethereum

I recently came across a a href='https://x.com/SpecterAnalyst/status/2070152064051605517' Tweet by Specter /a : It appears there may be a phishing attack targeting Polymarket users, with estimated losses of $2.94M so far. The attacker has drained funds from 11+ victim wallets holding PUSD, swapped the stolen assets for ETH, and consolidated the proceeds into the following address: ``` [ ]

Helping Move The German Educational System to Linux

The goal of this blag post is to get a legacy software used by teachers to run under Linux. The software is used to put grades of pupils into a database. img src='https://blag.nullteilerfrei.de/wp-content/uploads/2026/03/Schild-Notenmodul-1024x652.png' alt='Screenshot of running application' width='1024' height='652' class='aligncenter size-large' / span id='more-6172' /span # Target Software…

Use Babel to Deobfuscate JavaScript Malware

In this blob post, I will describe how I wrote a config extractor for obfuscated JavaScript-based GootLoader component. The hard part of automating the config extraction is the obfuscation: the C2 servers are just plain text in the last stage. All a href='https://github.com/larsborn/gootloader-babel-deobfuscator' code is on Github /a if you are just interested in that. # Intro A fellow [ ]

Warframe Maths Vol.1: How Much Crit Does a Crit Arcane Crit

# For Warframe Players [Secondary Enervate](https://wiki.warframe.com/w/Secondary_Enervate) is amazing and has become a very interesting option for many exalted secondaries since the rework. But have you ever wondered what average crit chance it actually yields when theory crafting? We can answer this with math! # The Math Guns in the looter-shooter game Warframe can score [critical…

Complete First; Correct Later: Writing a Pascal Script Emulator

# Summary Malware uses InnoSetup and hides the installer password in obfuscated, compiled PascalScript, but this article is not about this malware. I abandoned all sanity and wrote an emulator for this arcane language to recover them. This article is about the process of reverse engineering the runtime: While IFPS has an open-source interpreter, I found it [ ]

Upgrading to Windows 11 with (pre)existing VeraCrypt system encryption

I ve tried upgrading a laptop to Windows 11, with an existing VeraCrypt system encryption. I decrypted the partition and removed the system encryption first, then tried the update. It always failed with error 0xc190012e. I couldn t find any details about that error code, or helpful advice. I ve tried a bunch of generic stuff (upgrading via either Windows [ ]

My Quest for a Reliable Co2 Sensor in Home Assistant

I ve been using a Co2 sensor for a long time now to remind myself to regularly open the window and vent the used up air. With my recently newly acquired hobby of home automation, I wanted to get its data into HomeAssistant to _automatically_ switch on the ventilation. This blag post documents my journey with a couple [ ]

BroadLink RM4 Pro in Home Assistant Without the App

I ve recently fallen into the rabbit hole of using home-automation. The obvious choice is Home Assistant and I ve enjoyed the journey a lot so far. This blag post documents my process of automating all those crappy remote controlled gadget that accumulated in the house: that cheap light bulb, those cheap fairy lights, or that cheap LED strip [ ]

Programmatic Internet Connection Sharing

I have a Windows VM that can has an internet connection that acts as a tunnel into a VPN, and this VM is supposed to share this internet connection with the host. This works perfectly in principle: On that Windows VM, I have a network interface named `Outbound` which represents the VPN connection, and an interface named [ ]

Another Approach to Wrapping Integer Arithmetic in Python

When you write a lot of Python that is intended to mimic arithmetic that was taken from C or assembly code, one giant advantage of Python sometimes becomes a burden: The integers are arbitrary precision, and the 'built-in' wrapping of fixed-width integer types is something that has to be added manually, sometimes a truly arduous process. I [ ]

Ghidra Font Size for Presentations

I m known for my Ghidra stand-up comedy routines. In order to make them enjoyable for everyone in the room, the font size better be not as tiny as it normally is when you do your day-to-day reverse engineering. There are two places to consider: 1. menus, dialogs, etc. 2. specialized components like the assembly listing view and [ ]

Ghidra: YARA scanning

This blag post covers scanning the Ghidra virtual memory with YARA. span id='more-5903' /span # What is YARA YARA is the industry standard when it comes to signatures matching on malware. If you don t know YARA: It s a simple pattern-matching language that has some features tailored for searching in binary data. Logical expressions for matches and the capability [ ]

Advertisement for the EU Keyboard Layout

This is a quick one: If you are living in Germany but enjoy using a US keyboard layout — for one reason or another — I recommend using the EU keyboard layout instead. span id='more-5901' /span If you are not interested in motivation, scroll down to the very bottom to 'Installation'. ## Benefit 1: Umlaute and Stuff If [ ]

Install NSQ on Debian with init.d and NGINX

NSQ is an awesome and extremely simple distributed message queue. You can simply use it by publishing messages — that is arbitrary text, I often use JSON — on a so called 'topic'. A second process can than attach to a topic to consume messages on a so called 'channel'. Each messages is forwarded into each channel [ ]

Symfony Production Server Deployment Gotcha

Assume you did all the proper and mature building steps for your Symfony application. You have a build environment independent of your development environment. You really made sure all the environment variables like `COMPOSER_NO_DEV` and `NODE_ENV` are set correctly without getting the double negatives confused. And you execute `composer`, `yarn`, and whatnot with all the good switches [ ]

FILTER for entry in list of objects in AQL (ArangoDB)

Just a quick blag for my future self: ``` FOR row IN coll FOR entry in doc.array FILTER entry.field_name != @field_name LIMIT @limit RETURN DISTINCT doc ``` Didn t give me what I wanted. While slapping `DISTINCT` on the `RETURN` fixed the problem of 'I m getting the same document over and over again' it now doesn t return `@limit` [ ]