← Feed

Posts

• Post #4408924

  An exercise in translating Abstract Syntax Tree back to Python source code: https://www.youtube.com/watch?v=iztSu3rKmH8

• Post #3645450

  Story time! A few weeks ago I was at the AREA41 conference and there were A LOT of CTFs there - it was almost like every village and every sponsor's booth had one. I had some time before my talk so I decided to play one of these and I ended up selecting the InfoGuard one (shoutout to super friendly organizers). One of the tasks had MQTT in the name, so I expected to have to play with the standard IoT messaging protocol, but that's not what ended up happening at all - I ended up accident...

• Post #2970180

  I've signed up two amazing K8s experts to my edu platform, and they're making a pwning K8s challenge/mini-CTF on Wed 29th Apr evening (it will run for two weeks). If you want to check it out → https://hackarcana.com/challenge/2026-Q2-k8s-challenge/gynvaels-invitation

• Post #1537787

  RE: https://infosec.exchange/@PagedOut/116362415442678434 This article (recommended if you're learning RE!) reminded me of a GOATed FPGA bistream reversing task from Google CTF (GPURTL by Robin), where the key to solving it for me was observing the pattern of changing bits in FPGA's registers. The pattern itself was enough to pinpont the exact algorithm. @liveoverflow made a video about this task: https://www.youtube.com/watch?v=3ac9HAsfV8c

• Post #1083326

  Want to support security researchers from Dragon Sector in covering legal costs piling up after they went public with logic bombs in train firmware? IBAN for donations is available here: https://www.ccc.de/en/updates/2024/das-ist-vollig-entgleist Talks for context https://media.ccc.de/v/37c3-12142-breaking_drm_in_polish_trains https://streaming.media.ccc.de/38c3/relive/336 #38c3 #dragonsector

• Post #962299

  https://www.youtube.com/watch?v=gJM9pZydzVg ← my new old talk was released as a standalone; it's a fun story of how you go from being able to write '2' (0x32, 1 byte) anywhere on the FS to full RCE with admin/root privs

• Post #939503

  You can write '2' (0x32) anywhere in the filesystem of a Linux-based network switch. How do you get root? That's basically what my talk at GreHack conference was about - enjoy! https://youtu.be/F4CudbWHZ7Y?t=504 https://youtu.be/X-ZJH4d2tuE?t=1162

• Post #939502

  RE: https://infosec.exchange/@PagedOut/115666186257021540 One of my favorite projects just hit a HUGE milestone of 1 million downloads! Kudos to the team and everyone who supported us!

• Post #939501

  𝙿𝙰𝙶𝙴𝙳 𝙾𝚄𝚃! #𝟾 𝙳𝙴𝙰𝙳𝙻𝙸𝙽𝙴: 𝟺 𝙹𝚊𝚗𝚞𝚊𝚛𝚢 𝟸𝟶𝟸𝟼 𝙴𝚘𝙳 𝙴𝚘𝙰 Save the date if you're planning to write an article or showcase your digital art in the next issue of our magazine. https://pagedout.institute/ P.S. We're looking for sponsors for issue #8 as well.

• Post #939500

  Ah Saturday morning! What a great time to... ...write a 1-page article for Paged Out! zine! Deadline is 4th Jan - just a week away. CFP: https://pagedout.institute/?page=cfp.php

• Post #939499

  Glitches in games, especially used for speedrunning, are one of the most fun aspects of hacking to watch! As an example, check out this video "How Speedrunners BEAT Hollow Knight Silksong In 10 Minutes!" by Abyssoft https://www.youtube.com/watch?v=M6Jnj-y0G9w

• Post #939497

  A useful chart on what type to use for flags in C/C++ depending on your D&D alignment:

• Post #939496

  @mkj Yeah, I think that might have been a better choice for chaotic evil ;)

• Post #939495

  Just got this link on my discord - https://www.kickstarter.com/projects/bitman/bootblock-rebels - passing it along because this book looks fun!

• Post #939492

  My article in newest Paged Out! about everyone's favorite Python party trick: https://pagedout.institute/webview.php?issue=8&page=63&article=Trying+to+demo+Python%27s+is #python #goingtoapythonprogrammersparty #pythonprogramminglanguagethemedparty #whatispythonsis

• Post #690082

  My second article in Paged Out! #8 was about the architecture of the terminal emulator on Linux - it's a really obvious thing until you start digging into details, as usual. Web viewer: https://pagedout.institute/webview.php?issue=8&page=43&article=Linux+terminal+emulator+architecture PDF download: https://pagedout.institute/?page=issues.php