poc_or_gtfo_bible.pdf

(52320 KB) Pobierz
PoC||GTFO
P
r
o
o
f
o
f
C
o
n
c
e
p
t
o
r
G
e
t
T
h
e
F
u
c
k
O
u
t
THE BOOK OF POC||GTFO.
Copyright
©
2017 by Travis Goodspeed.
While you are more than welcome to copy pieces of this book and distribute it electroni-
cally, only No Starch Press may produce this printed compilation commercially. Feel free
to photocopy these articles for classroom use, or just to do your part in the самиздат
tradition.
Printed in China
First printing
21 20 19 18 17   1 2 3 4 5 6 7 8 9
ISBN-10: 1-59327-880-2
ISBN-13: 978-1-59327-880-9
For information on distribution, translations, or bulk sales,
please contact No Starch Press, Inc. directly:
No Starch Press, Inc.
245 8th Street, San Francisco, CA 94103
phone: 1.415.863.9900; info@nostarch.com
www.nostarch.com
No Starch Press and the No Starch Press logo are registered trademarks of No Starch
Press, Inc. Other product and company names mentioned herein may be the trademarks
of their respective owners. Rather than use a trademark symbol with every occurrence
of a trademarked name, we are using the names only in an editorial fashion and to the
benefit of the trademark owner, with no intention of infringement of the trademark.
The information in this book is distributed on an “As Is” basis, without warranty. While
every precaution has been taken in the preparation of this work, neither the author nor
No Starch Press, Inc. shall have any liability to any person or entity with respect to any
loss or damage caused or alleged to be caused directly or indirectly by the information
contained in it.
Anyone who cannot understand that
a useful science can be built on stunt hacking
will not understand this book, either.
Man of The Book
Manul Laphroaig, T.G. S.B.
Editor of Last Resort
Melilot
TEXnician
Evan Sultanik
Editorial Whipping Boy
Jacob Torrey
Funky File Supervisor
Ange Albertini
Assistant Scenic Designer
Philippe Teuwen
and sundry others
Contents
Introduction
0 A CFP with POC
0:1 Let us begin! . . . . . . . . . .
0:2 iPod Antiforensics
by Travis Goodspeed . . . . . .
0:3 ELFs are dorky, Elves are cool
by S. Bratus and J. Bangert . .
0:4 Epistle to Hats of All Colors
by Manul Laphroaig . . . . . .
0:5 Returning from ELF to Libc
by Rebecca .Bx Shapiro . . . .
0:6 GTFO or #FAIL
by FX of Phenoelit . . . . . . .
9
13
. . . . . . . . . . . 13
. . . . . . . . . . . 15
. . . . . . . . . . . 20
. . . . . . . . . . . 29
. . . . . . . . . . . 32
. . . . . . . . . . . 35
37
. . . . . . . 37
. . . . . . . 39
. . . . . . . 47
. . . . . . . 58
. . . . . . . 62
1 Proceedings of the Society of PoC GTFO
1:1 Lend me your ears! . . . . . . . . . . .
1:2 RNG in four lines of Javascript
by Dan Kaminsky . . . . . . . . . . .
1:3 Serena Butler’s TV Typewriter
by Travis Goodspeed . . . . . . . . . .
1:4 Making a Multi-Windows PE
by Ange Albertini . . . . . . . . . . .
1:5 This ZIP is also a PDF
by Julia Wolf . . . . . . . . . . . . . .
1
Zgłoś jeśli naruszono regulamin