book

PoC||GTFO

by Manul Laphroaig

October 2017

Intermediate to advanced

312 pages

14h 14m

English

No Starch Press

Read now

Unlock full access

0:1 Let us begin!0:2 iPod Antiforensics0:3 ELFs are dorky, Elves are cool0:4 Epistle to Hats of All Colors0:5 Returning from ELF to Libc0:6 GTFO or #FAIL
1:1 Lend me your ears!1:2 RNG in four lines of Javascript1:3 Serena Butler’s TV Typewriter1:4 Making a Multi-Windows PE1:5 This ZIP is also a PDF1:6 Burning a Phone1:7 Sermon on the Divinity of Languages
2:1 Ring them Bells!2:2 Build your own birdfeeder.2:3 A PGP Matryoshka Doll2:4 Code Execution on a Tamagotchi2:5 Shellcode for MSP4302:6 Calling putchar() from ELF2:7 POKE of Death for the TRS 80/M1002:8 This OS is also a PDF2:9 A Vulnerability in Reduced Dakarand2:10 Juggernauty
3:1 Fear Not!3:2 Greybeard’s Luck3:3 This PDF is a JPEG.3:4 Netwatch for SMM3:5 Packet-in-Packet Mitigation Bypass3:6 An RDRAND Backdoor in Bochs3:7 Kosher Firmware for the Nokia 27203:8 Tetranglix Boot Sector3:9 Defusing the Qualcomm Dragon3:10 Tales of Python’s Encoding3:11 Angecryption
4:1 Let me tell you a story4:2 Epistle on the Bountiful Seeds of 0Day4:3 This OS is a Boot Sector4:4 Prince of PoC4:5 New Facedancer Framework4:6 Power Glitching Tamagotchi4:7 A Plausibly Deniable Cryptosystem4:8 Hardening Pin Tumbler Locks4:9 Intro to Chip Decapsulation4:10 Forget Not the Humble Timing Attack4:11 This Truecrypt is a PDF4:12 How to Manually Attach a File to a PDF4:13 Ode to ECB

5:1 It started like this5:2 A Sermon on Hacker Privilege.5:3 ECB: Electronic Coloring Book5:4 An Easter Egg in PCI Express5:5 A Flash PDF Polyglot5:6 This Multiprocessing OS is a Boot Sector5:7 A Breakout Board for Mini-PCIe5:8 Prototyping a generic x86 backdoor in Bochs5:9 Your Cisco blade is booting PoC∥GTFO.5:10 I am my own NOP Sled.5:11 Abusing JSONP with Rosetta Flash5:12 Sexy collision PoCs5:13 Ancestral Voices
6:1 Communion with the Weird Machines6:2 On Giving Thanks6:3 Gekko the Dolphin6:4 This TAR archive is a PDF!6:5 x86 Alchemy and Smuggling6:6 Detecting MIPS Emulation6:7 More Cryptographic Coloring Books6:8 PCB Reverse Engineering6:9 Davinci Seal6:10 Observable Metrics
7:1 With what shall we commune this evening?7:2 The Magic Number: 0xAA557:3 Coastermelt7:4 The Lysenko Sermon7:5 When Scapy is too high-level7:6 Abusing file formats7:7 AES-NI Backdoors7:8 Innovations with Linux core files.7:9 Bambaata speaks from the past.7:11 Cyber Criminal’s Song
8:1 Please stand; now, please be seated8:2 Witches, Warlocks, and Wassenaar8:3 Compiler Bug Backdoors8:4 A Protocol for Leibowitz8:5 Jiggling into a New Attack Vector8:6 Hypervisor Exploit, Five Years Old8:7 Stegosploit8:8 On Error Resume Next8:9 Unbrick My Part8:10 Backdoors up my Sleeve8:11 Naughty Signals8:12 Weird Crypto
IntroductionChapter 0: A CFP with POCChapter 1: Proceedings of the Society of PoC∥GTFOChapter 2: The Children’s Bible Coloring Book of PoC∥GTFOChapter 3: Address on the Smashing of Idols to Bits and BytesChapter 4: Tract de la Société SecrèteChapter 5: Address to the Inhabitants of EarthChapter 6: Old Timey ExploitationChapter 7: PoC∥GTFO, Calisthenics and OrthodontiaChapter 8: Exploits Sit Lonely on the Shelf

Content preview from PoC||GTFO

6 PoC||GTFO brings that Old Timey Exploitation with a Weird Machine Jamboree and our world-famous Funky File Flea Market not to be ironic, but because We Love the Music!

6:1 Communion with the Weird Machines

This release is dedicated to Jean Serrière, F8CW, who used his technical knowledge and an illegal shortwave transceiver to fight against the Nazi occupation of France. When occupying soldiers asked his wife Alice “Where are the tubes?” she wasted no time before muttering about “that useless of husband of mine” while leading them to the leaking pipes in the basement. They never found the radio.