-
Notifications
You must be signed in to change notification settings - Fork 98
/
README.htm
596 lines (589 loc) · 111 KB
/
README.htm
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" lang="" xml:lang="">
<head>
<meta charset="utf-8" />
<meta name="generator" content="pandoc" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes" />
<title>README</title>
<style type="text/css">
code{white-space: pre-wrap;}
span.smallcaps{font-variant: small-caps;}
span.underline{text-decoration: underline;}
div.column{display: inline-block; vertical-align: top; width: 50%;}
</style>
<style type="text/css">
a.sourceLine { display: inline-block; line-height: 1.25; }
a.sourceLine { pointer-events: none; color: inherit; text-decoration: inherit; }
a.sourceLine:empty { height: 1.2em; position: absolute; }
.sourceCode { overflow: visible; }
code.sourceCode { white-space: pre; position: relative; }
div.sourceCode { margin: 1em 0; }
pre.sourceCode { margin: 0; }
@media screen {
div.sourceCode { overflow: auto; }
}
@media print {
code.sourceCode { white-space: pre-wrap; }
a.sourceLine { text-indent: -1em; padding-left: 1em; }
}
pre.numberSource a.sourceLine
{ position: relative; }
pre.numberSource a.sourceLine:empty
{ position: absolute; }
pre.numberSource a.sourceLine::before
{ content: attr(data-line-number);
position: absolute; left: -5em; text-align: right; vertical-align: baseline;
border: none; pointer-events: all;
-webkit-touch-callout: none; -webkit-user-select: none;
-khtml-user-select: none; -moz-user-select: none;
-ms-user-select: none; user-select: none;
padding: 0 4px; width: 4em;
color: #aaaaaa;
}
pre.numberSource { margin-left: 3em; border-left: 1px solid #aaaaaa; padding-left: 4px; }
div.sourceCode
{ }
@media screen {
a.sourceLine::before { text-decoration: underline; }
}
code span.al { color: #ff0000; font-weight: bold; } /* Alert */
code span.an { color: #60a0b0; font-weight: bold; font-style: italic; } /* Annotation */
code span.at { color: #7d9029; } /* Attribute */
code span.bn { color: #40a070; } /* BaseN */
code span.bu { } /* BuiltIn */
code span.cf { color: #007020; font-weight: bold; } /* ControlFlow */
code span.ch { color: #4070a0; } /* Char */
code span.cn { color: #880000; } /* Constant */
code span.co { color: #60a0b0; font-style: italic; } /* Comment */
code span.cv { color: #60a0b0; font-weight: bold; font-style: italic; } /* CommentVar */
code span.do { color: #ba2121; font-style: italic; } /* Documentation */
code span.dt { color: #902000; } /* DataType */
code span.dv { color: #40a070; } /* DecVal */
code span.er { color: #ff0000; font-weight: bold; } /* Error */
code span.ex { } /* Extension */
code span.fl { color: #40a070; } /* Float */
code span.fu { color: #06287e; } /* Function */
code span.im { } /* Import */
code span.in { color: #60a0b0; font-weight: bold; font-style: italic; } /* Information */
code span.kw { color: #007020; font-weight: bold; } /* Keyword */
code span.op { color: #666666; } /* Operator */
code span.ot { color: #007020; } /* Other */
code span.pp { color: #bc7a00; } /* Preprocessor */
code span.sc { color: #4070a0; } /* SpecialChar */
code span.ss { color: #bb6688; } /* SpecialString */
code span.st { color: #4070a0; } /* String */
code span.va { color: #19177c; } /* Variable */
code span.vs { color: #4070a0; } /* VerbatimString */
code span.wa { color: #60a0b0; font-weight: bold; font-style: italic; } /* Warning */
</style>
<link rel="stylesheet" href="pandoc.css" />
<!--[if lt IE 9]>
<script src="//cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7.3/html5shiv-printshiv.min.js"></script>
<![endif]-->
</head>
<body>
<h1 id="contents">Contents</h1>
<p><a href="#pocgtfo"><img src=extras/pdftagram.svg width=75px alt="PoC||GTFO's PDFtagram"/> PoC||GTFO</a> 2017-08, 327p</p>
<p><a href="#0x00"><img src=contents/issue00.png width=75px alt="issue 00"/></a> <a href="#0x01"><img src=contents/issue01.png width=75px alt="issue 01"/></a> <a href="#0x02"><img src=contents/issue02.png width=75px alt="issue 02"/></a> <a href="#0x03"><img src=contents/issue03.png width=75px alt="issue 03"/></a> <a href="#0x04"><img src=contents/issue04.png width=75px alt="issue 04"/></a> <a href="#0x05"><img src=contents/issue05.png width=75px alt="issue 05"/></a> <a href="#0x06"><img src=contents/issue06.png width=75px alt="issue 06"/></a> <a href="#0x07"><img src=contents/issue07.png width=75px alt="issue 07"/></a></p>
<ul>
<li><a href="#0x00">0x00</a> 2013-08-05, 14p: International Journal</li>
<li><a href="#0x01">0x01</a> 2013-10-06, 17p: Proceedings of the Society</li>
<li><a href="#0x02">0x02</a> 2013-12-28, 32p: Children’s Bible Coloring Book</li>
<li><a href="#0x03">0x03</a> 2014-03-02, 40p: An Address to the Secret Society</li>
<li><a href="#0x04">0x04</a> 2014-06-27, 48p: Tract de la Société Secrète</li>
<li><a href="#0x05">0x05</a> 2014-08-10, 56p: Addressed to the Inhabitants of Earth</li>
<li><a href="#0x06">0x06</a> 2014-11-25, 56p: Old Timey Exploitation</li>
<li><a href="#0x07">0x07</a> 2015-03-19, 64p: Calisthenics & orthodontia</li>
</ul>
<p><a href="#volume-"><img src=extras/glyphsign.svg width=75px alt="Volume II's glyph'"/> Volume II</a> 2018-08, 408p</p>
<p><a href="#0x08"><img src=contents/issue08.png width=75px alt="issue 08"/></a> <a href="#0x09"><img src=contents/issue09.png width=75px alt="issue 09"/></a> <a href="#0x10"><img src=contents/issue10.jpg width=75px alt="issue 10"/></a> <a href="#0x11"><img src=contents/issue11.jpg width=75px alt="issue 11"/></a> <a href="#0x12"><img src=contents/issue12.jpg width=75px alt="issue 12"/></a> <a href="#0x13"><img src=contents/issue13.png width=75px alt="issue 13"/></a></p>
<ul>
<li><a href="#0x08">0x08</a> 2015-06-20, 64p: Export–Controlled Church Newsletter</li>
<li><a href="#0x09">0x09</a> 2015-09-14, 64p: Reverent Elegies of the Second Crypto War</li>
<li><a href="#0x10">0x10</a> 2016-01-16, 88p: The Engine that Runs the World</li>
<li><a href="#0x11">0x11</a> 2016-03-17, 40p: Welcoming Shores of the Great Unknown</li>
<li><a href="#0x12">0x12</a> 2016-06-18, 80p: A Look Behind the Curtain</li>
<li><a href="#0x13">0x13</a> 2016-10-04, 72p: Stones from the ivory tower</li>
</ul>
<p><a href="#volume-iii">Volume III</a> 2021-01, 800p</p>
<p><a href="#0x14"><img src=contents/issue14.png width=75px alt="issue 14"/></a> <a href="#0x15"><img src=contents/issue15.jpg width=75px alt="issue 15"/></a> <a href="#0x16"><img src=contents/issue16.jpg width=75px alt="issue 16"/></a> <a href="#0x17"><img src=contents/issue17.jpg width=75px alt="issue 17"/></a> <a href="#0x18"><img src=contents/issue18.png width=75px alt="issue 18"/></a></p>
<ul>
<li><a href="#0x14">0x14</a> 2017-03-20, 60p: High Five to the Heavens</li>
<li><a href="#0x15">0x15</a> 2017-06-17, 100p: I Slipped a Little</li>
<li><a href="#0x16">0x16</a> 2017-10-20, 60p: Laphroaig Races the Runtime Relinker</li>
<li><a href="#0x17">0x17</a> 2017-12-30, 60p: It's damned cold outside</li>
<li><a href="#0x18">0x18</a> 2018-06-26, 64p: Montessory Soldering School...</li>
</ul>
<p><a href="#next">next...?</a></p>
<p><a href="#0x19"><img src=contents/issue19.png width=75px alt="issue 19"/></a> <a href="#0x20"><img src=contents/issue20.png width=75px alt="issue 20"/></a> <a href="#0x21"><img src=contents/issue21.png width=75px alt="issue 21"/></a></p>
<ul>
<li><a href="#0x19">0x19</a> 2019-03-27, 80p: Janky Old Piano</li>
<li><a href="#0x20">0x20</a> 2020-01-21, 80p: Gifts from the Genizah</li>
<li><a href="#0x21">0x21</a> 2022-02-12, 80p: Notebook of Disassembly</li>
<li><a href="#0x22">0x22</a> 2024-02-12, 68p: Through desert & wilderness</li>
</ul>
<p><a href="#extras">Extras</a></p>
<h1 id="issues">Issues</h1>
<h2 id="pocgtfo">PoC||GTFO</h2>
<p><a href="https://nostarch.com/gtfo"><img src=extras/pdftagram.svg width=100px alt="PoC||GTFO's PDFtagram"/> Buy</a></p>
<h3 id="0x00">0x00</h3>
<p><a href="releases/pocorgtfo00.pdf">pocorgtfo00.pdf</a> <a href="https://www.virustotal.com/gui/file/c4d1d1091187b98a9bb28452bc6564a1e8c0ce10d20ba2b4a20f8b7798f7ab64/details"><code>c4d1d109..98f7ab64</code></a> polyglot: PDF (<a href="contents/issue00.pdf">PDF-only</a>)</p>
<ol>
<li>Call to Worship (<a href="contents/articles/00-01.pdf">article</a>, <a href="contents/issue00.pdf#page=1">in issue</a>, <a href="https://archive.org/details/Pocorgtfo00#page/n0/mode/1up">archive.org</a>)</li>
<li>Ipod Antiforensics (<a href="contents/articles/00-02.pdf">article</a>, <a href="contents/issue00.pdf#page=2">in issue</a>, <a href="https://archive.org/details/Pocorgtfo00#page/n1/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a></li>
<li>ELFs are dorky, elves are cool (<a href="contents/articles/00-03.pdf">article</a>, <a href="contents/issue00.pdf#page=4">in issue</a>, <a href="https://archive.org/details/Pocorgtfo00#page/n3/mode/1up">archive.org</a>) by <a href="https://twitter.com/@sergeybratus">Sergey Bratus</a>, <a href="https://twitter.com/@JulianBangert">Julian Bangert</a></li>
<li>The Pastor Manul Laphroaig's First Epistle to Hacker Preachers of All Hats, in the sincerest hope that we might shut up about hats, and get back to hacking. (<a href="contents/articles/00-04.pdf">article</a>, <a href="contents/issue00.pdf#page=9">in issue</a>, <a href="https://archive.org/details/Pocorgtfo00#page/n8/mode/1up">archive.org</a>)</li>
<li>Returning from ELF to Libc (<a href="contents/articles/00-05.pdf">article</a>, <a href="contents/issue00.pdf#page=10">in issue</a>, <a href="https://archive.org/details/Pocorgtfo00#page/n9/mode/1up">archive.org</a>) by <a href="https://twitter.com/@bxsays">Rebecca "Bx" Shapiro</a></li>
<li>GTFO or #FAIL (<a href="contents/articles/00-06.pdf">article</a>, <a href="contents/issue00.pdf#page=12">in issue</a>, <a href="https://archive.org/details/Pocorgtfo00#page/n11/mode/1up">archive.org</a>) by <a href="https://twitter.com/@41414141">FX of Phenoelit</a></li>
<li>A Call for PoC (<a href="contents/articles/00-07.pdf">article</a>, <a href="contents/issue00.pdf#page=13">in issue</a>, <a href="https://archive.org/details/Pocorgtfo00#page/n12/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<img src=contents/issue00.png width=200px alt="An epistle from the desk of Rt. Revd. Pastor Manul Laphroaig"/>
<h3 id="0x01">0x01</h3>
<p><a href="releases/pocorgtfo01.pdf">pocorgtfo01.pdf</a> <a href="https://www.virustotal.com/gui/file/a0f93a265d38257a06fd7fd210f73ea9c55a94ac1305c65c0510ada236c2cc88/details"><code>a0f93a26..36c2cc88</code></a> polyglot: ZIP, PDF (<a href="contents/issue01.pdf">PDF-only</a>)</p>
<ol>
<li>Call to Worship (<a href="contents/articles/01-01.pdf">article</a>, <a href="contents/issue01.pdf#page=1">in issue</a>, <a href="https://archive.org/details/Pocorgtfo01#page/n0/mode/1up">archive.org</a>)</li>
<li>Four Lines of Javascript that Can't Possibly Work So why do they? (<a href="contents/articles/01-02.pdf">article</a>, <a href="contents/issue01.pdf#page=2">in issue</a>, <a href="https://archive.org/details/Pocorgtfo01#page/n1/mode/1up">archive.org</a>) by <a href="https://twitter.com/@dakami">Dan Kaminsky</a></li>
<li>Weird Machines from Serena Butler's TV Typewriter (<a href="contents/articles/01-03.pdf">article</a>, <a href="contents/issue01.pdf#page=5">in issue</a>, <a href="https://archive.org/details/Pocorgtfo01#page/n4/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a></li>
<li>Making a Multi-Windows PE (<a href="contents/articles/01-04.pdf">article</a>, <a href="contents/issue01.pdf#page=9">in issue</a>, <a href="https://archive.org/details/Pocorgtfo01#page/n8/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>This ZIP is also a PDF (<a href="contents/articles/01-05.pdf">article</a>, <a href="contents/issue01.pdf#page=11">in issue</a>, <a href="https://archive.org/details/Pocorgtfo01#page/n10/mode/1up">archive.org</a>) by <a href="https://twitter.com/@foxgrrl">Julia Wolf</a></li>
<li>Burning a Phone (<a href="contents/articles/01-06.pdf">article</a>, <a href="contents/issue01.pdf#page=13">in issue</a>, <a href="https://archive.org/details/Pocorgtfo01#page/n12/mode/1up">archive.org</a>) by <a href="https://twitter.com/@m0nk_dot">Josh "@m0nk" Thomas</a></li>
<li>A Sermon concerning the Divinity of Languages; or, Dijkstra considered Racist (<a href="contents/articles/01-07.pdf">article</a>, <a href="contents/issue01.pdf#page=15">in issue</a>, <a href="https://archive.org/details/Pocorgtfo01#page/n14/mode/1up">archive.org</a>) by Rt. Rvd. Pastor Manul Laphroaig</li>
<li>A Call for PoC (<a href="contents/articles/01-08.pdf">article</a>, <a href="contents/issue01.pdf#page=17">in issue</a>, <a href="https://archive.org/details/Pocorgtfo01#page/n16/mode/1up">archive.org</a>) by Rt. Revd. Preacherman Pastor Manul Laphroaig</li>
</ol>
<img src=contents/issue01.png width=200px alt="From the writing desk, not the raven, of Rt. Revd. Preacherman Pastor Manul Laphroaig"/>
<h3 id="0x02">0x02</h3>
<p><a href="releases/pocorgtfo02.pdf">pocorgtfo02.pdf</a> <a href="https://www.virustotal.com/gui/file/f427e8d95c0ac15abe61d96fb75cfb55df1fd5ac9e713cf968f3602267ca155e/details"><code>f427e8d9..67ca155e</code></a> polyglot: MBR, ZIP, PDF (<a href="contents/issue02.pdf">PDF-only</a>)</p>
<ol>
<li>Call to Worship (<a href="contents/articles/02-01.pdf">article</a>, <a href="contents/issue02.pdf#page=1">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n0/mode/1up">archive.org</a>)</li>
<li>A Parable on the Importance of Tools; or, Build your own fucking birdfeeder. (<a href="contents/articles/02-02.pdf">article</a>, <a href="contents/issue02.pdf#page=3">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n2/mode/1up">archive.org</a>) by Rt. Rvd. Pastor Manul Laphroaig</li>
<li>A PGP Matryoshka Doll (<a href="contents/articles/02-03.pdf">article</a>, <a href="contents/issue02.pdf#page=5">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n4/mode/1up">archive.org</a>) by Brother Myron Aub</li>
<li>Reliable Code Execution on a Tamagotchi (<a href="contents/articles/02-04.pdf">article</a>, <a href="contents/issue02.pdf#page=7">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n6/mode/1up">archive.org</a>) by <a href="https://twitter.com/@natashenka">Natalie Silvanovich</a></li>
<li>Some Shellcode Tips for MSP430 and Related MCUs (<a href="contents/articles/02-05.pdf">article</a>, <a href="contents/issue02.pdf#page=10">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n9/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a></li>
<li>Calling putchar() from an ELF Weird Machine. (<a href="contents/articles/02-06.pdf">article</a>, <a href="contents/issue02.pdf#page=14">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n13/mode/1up">archive.org</a>) by <a href="https://twitter.com/@bxsays">Rebecca "Bx" Shapiro</a></li>
<li>POKE of Death for the TRS 80 Model 100 (<a href="contents/articles/02-07.pdf">article</a>, <a href="contents/issue02.pdf#page=19">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n18/mode/1up">archive.org</a>) by Dave Weinstein</li>
<li>This OS is also a PDF (<a href="contents/articles/02-08.pdf">article</a>, <a href="contents/issue02.pdf#page=21">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n20/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>A Vulnerability in Reduced Dakarand from PoC||GTFO 01:02 (<a href="contents/articles/02-09.pdf">article</a>, <a href="contents/issue02.pdf#page=25">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n24/mode/1up">archive.org</a>) by <a href="https://twitter.com/@joernchen">joernchen of Phenoelit</a></li>
<li>Juggernauty (<a href="contents/articles/02-10.pdf">article</a>, <a href="contents/issue02.pdf#page=30">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n29/mode/1up">archive.org</a>) by <a href="https://twitter.com/@rantyben">Ben Nagy</a></li>
<li>A Call for PoC (<a href="contents/articles/02-11.pdf">article</a>, <a href="contents/issue02.pdf#page=32">in issue</a>, <a href="https://archive.org/details/Pocorgtfo02#page/n31/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue02.png width=200px alt="Composed by the Rt. Revd. Pastor Manul Laphroaig to put pwnage before politics."/> <img src=contents/issue02mbr.png width=350px alt="Master Boot Record polyglot"/></p>
<h3 id="0x03">0x03</h3>
<p><a href="releases/pocorgtfo03.pdf">pocorgtfo03.pdf</a> <a href="https://www.virustotal.com/gui/file/7094f5c6a3936e0d0b8f5e42b4d1940413f568e9a3617be0d7d6dc73cb3420e1/details"><code>7094f5c6..cb3420e1</code></a> polyglot: JPG, AES(PNG), ZIP, AFSK, PDF* (<a href="contents/issue03.pdf">PDF-only</a>)</p>
<ol>
<li>Call to Worship (<a href="contents/articles/03-01.pdf">article</a>, <a href="contents/issue03.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n2/mode/1up">archive.org</a>)</li>
<li>Greybeard's Luck (<a href="contents/articles/03-02.pdf">article</a>, <a href="contents/issue03.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n4/mode/1up">archive.org</a>) by Rt. Revd. Dr. Pastor Manul Laphroaig</li>
<li>This PDF is a JPEG; or, This Proof of Concept is a Picture of Cats (<a href="contents/articles/03-03.pdf">article</a>, <a href="contents/issue03.pdf#page=8">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n7/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>NetWatch: System Management Mode is not just for Governments. (<a href="contents/articles/03-04.pdf">article</a>, <a href="contents/issue03.pdf#page=10">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n9/mode/1up">archive.org</a>) by Joshua Wise, Jacob Potter</li>
<li>An Advanced Mitigation Bypass for Packet-in-Packet; or, I'm burning 0day to use the phrase 'eighth of a nybble' in print. (<a href="contents/articles/03-05.pdf">article</a>, <a href="contents/issue03.pdf#page=15">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n14/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a></li>
<li>Prototyping an RDRAND Backdoor in Bochs (<a href="contents/articles/03-06.pdf">article</a>, <a href="contents/issue03.pdf#page=18">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n17/mode/1up">archive.org</a>) by <a href="https://twitter.com/@DefuseSec">Taylor Hornby</a></li>
<li>Patching Kosher Firmware for Nokia 2720 (<a href="contents/articles/03-07.pdf">article</a>, <a href="contents/issue03.pdf#page=22">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n21/mode/1up">archive.org</a>) by Assaf Nativ, Anonymous</li>
<li>Tetranglix: This Tetris is a Boot Sector (<a href="contents/articles/03-08.pdf">article</a>, <a href="contents/issue03.pdf#page=30">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n29/mode/1up">archive.org</a>) by Juhani Haverinen, Owen Shepherd, <a href="https://twitter.com/@idraumr">Shikhin Sethi</a></li>
<li>Defusing the Qualcomm Dragon (<a href="contents/articles/03-09.pdf">article</a>, <a href="contents/issue03.pdf#page=33">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n32/mode/1up">archive.org</a>) by <a href="https://twitter.com/@m0nk_dot">Josh "m0nk" Thomas</a></li>
<li>Tales of Python's Encoding (<a href="contents/articles/03-10.pdf">article</a>, <a href="contents/issue03.pdf#page=35">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n34/mode/1up">archive.org</a>) by <a href="https://twitter.com/@freddyb">Frederik Braun</a></li>
<li>A Binary Magic Trick, Angecryption (<a href="contents/articles/03-11.pdf">article</a>, <a href="contents/issue03.pdf#page=37">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n36/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a>, <a href="https://twitter.com/@veorq">Jean-Philippe Aumasson</a></li>
<li>A Call for PoC (<a href="contents/articles/03-12.pdf">article</a>, <a href="contents/issue03.pdf#page=40">in issue</a>, <a href="https://archive.org/details/pocorgtfo03#page/n39/mode/1up">archive.org</a>) by Rt. Revd. Dr.Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue03.png width=200px alt="AN ADDRESS to the SECRET SOCIETY of POC || GTFO concerning THE GOSPEL OF THE WEIRD MACHINES and also THE SMASHING OF IDOLS TO BITS AND BYTES by the Rt. Revd. Dr. PASTOR MANUL LAPHROAIG"/> <img src=contents/issue03.jpg width=300px alt="JPG polyglot"/> <img src=contents/issue03aes(png).png width=250px alt="PNG via AngeCryption"/> <img src=contents/issue03audio.png width=400px alt="AFSK raw audio"/></p>
<h3 id="0x04">0x04</h3>
<p><a href="releases/pocorgtfo04.pdf">pocorgtfo04.pdf</a> <a href="https://www.virustotal.com/gui/file/1d1567b8ac533cd142a8af560266ca60939fed02e3af1f6fd0816b26473afd01/details"><code>1d1567b8..473afd01</code></a> polyglot: TrueCrypt, ZIP, PDF (<a href="contents/issue04.pdf">PDF-only</a>)</p>
<ol>
<li>Call to Worship (<a href="contents/articles/04-01.pdf">article</a>, <a href="contents/issue04.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n2/mode/1up">archive.org</a>)</li>
<li>First Epistle Concerning the Bountiful Seeds of 0Day (<a href="contents/articles/04-02.pdf">article</a>, <a href="contents/issue04.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n3/mode/1up">archive.org</a>) by Manul Laphroaig</li>
<li>This OS is a Boot Sector (<a href="contents/articles/04-03.pdf">article</a>, <a href="contents/issue04.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n4/mode/1up">archive.org</a>) by <a href="https://twitter.com/@idraumr">Shikhin Sethi</a></li>
<li>Prince of PoC; or, A 16-sector version of Prince of Persia for the Apple II. (<a href="contents/articles/04-04.pdf">article</a>, <a href="contents/issue04.pdf#page=12">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n11/mode/1up">archive.org</a>) by <a href="https://twitter.com/@a2_qkumba">Peter Ferrie</a></li>
<li>A Quick Introduction to the New Facedancer Framework (<a href="contents/articles/04-05.pdf">article</a>, <a href="contents/issue04.pdf#page=16">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n15/mode/1up">archive.org</a>) by gil</li>
<li>Dumping Firmware from Tamagotchi Friends by Power Glitching (<a href="contents/articles/04-06.pdf">article</a>, <a href="contents/issue04.pdf#page=19">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n18/mode/1up">archive.org</a>) by <a href="https://twitter.com/@natashenka">Natalie Silvanovich</a></li>
<li>Lenticrypt: a Provably Plausibly Deniable Cryptosystem; or, This Picture of Cats is Also a Picture of Dogs (<a href="contents/articles/04-07.pdf">article</a>, <a href="contents/issue04.pdf#page=22">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n21/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ESultanik">Evan Sultanik</a></li>
<li>Hardening Pin Tumbler Locks against Myriad Attacks for Less Than a Sawbuck (<a href="contents/articles/04-08.pdf">article</a>, <a href="contents/issue04.pdf#page=27">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n26/mode/1up">archive.org</a>) by <a href="https://twitter.com/@deviantollam">Deviant Ollam</a></li>
<li>Introduction to Reflux Decapsulation and Chip Photography (<a href="contents/articles/04-09.pdf">article</a>, <a href="contents/issue04.pdf#page=32">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n31/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a></li>
<li>Forget Not the Humble Timing Attack (<a href="contents/articles/04-10.pdf">article</a>, <a href="contents/issue04.pdf#page=37">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n36/mode/1up">archive.org</a>) by <a href="https://twitter.com/@colinoflynn">Colin O'Flynn</a></li>
<li>This Encrypted Volume is also a PDF; or, A Polyglot Trick for Bypassing TrueCrypt Volume Detection (<a href="contents/articles/04-11.pdf">article</a>, <a href="contents/issue04.pdf#page=42">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n41/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>How to Manually Attach a File to a PDF (<a href="contents/articles/04-12.pdf">article</a>, <a href="contents/issue04.pdf#page=44">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n43/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>Ode to ECB (<a href="contents/articles/04-13.pdf">article</a>, <a href="contents/issue04.pdf#page=46">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n45/mode/1up">archive.org</a>) by <a href="https://twitter.com/@rantyben">Ben Nagy</a></li>
<li>A Call for PoC (<a href="contents/articles/04-14.pdf">article</a>, <a href="contents/issue04.pdf#page=48">in issue</a>, <a href="https://archive.org/details/pocorgtfo04#page/n47/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue04.png width=200px alt="TRACT de la SOCIÉTÉ SECRÈTE de POC || GTFO sur L’ÉVANGILE DES MACHINES ÉTRANGES et autres SUJETS TECHNIQUES par le prédicateur PASTEUR MANUL LAPHROAIG"/> <img src=contents/issue04tc.png width=300px alt="TrueCrypt polyglot"/></p>
<h3 id="0x05">0x05</h3>
<p><a href="releases/pocorgtfo05.pdf">pocorgtfo05.pdf</a> <a href="https://www.virustotal.com/gui/file/9623609a9c0ecd95674e6da3de322baa141f5460cbcb93eeaade22eaf2c80640/details"><code>9623609a..f2c80640</code></a> polyglot: ISO, SWF, ZIP, PDF* (<a href="contents/issue05.pdf">PDF-only</a>)</p>
<ol>
<li>Call to Worship (<a href="contents/articles/05-01.pdf">article</a>, <a href="contents/issue05.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n2/mode/1up">archive.org</a>)</li>
<li>Stuff is broken, and only you know how (<a href="contents/articles/05-02.pdf">article</a>, <a href="contents/issue05.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n3/mode/1up">archive.org</a>) by Rvd. Dr. Manul Laphroaig</li>
<li>ECB as an Electronic Coloring Book (<a href="contents/articles/05-03.pdf">article</a>, <a href="contents/issue05.pdf#page=7">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n6/mode/1up">archive.org</a>) by <a href="https://twitter.com/@doegox">Philippe Teuwen</a></li>
<li>An Easter Egg in PCI Express (<a href="contents/articles/05-04.pdf">article</a>, <a href="contents/issue05.pdf#page=11">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n10/mode/1up">archive.org</a>) by <a href="https://twitter.com/@JacobTorrey">Jacob Torrey</a></li>
<li>A Flash PDF Polyglot (<a href="contents/articles/05-05.pdf">article</a>, <a href="contents/issue05.pdf#page=15">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n14/mode/1up">archive.org</a>) by <a href="https://twitter.com/@insertScript">Alex Inführ</a></li>
<li>These Philosophers Stuff on 512 Bytes; or, This Multiprocessing OS is a Boot Sector. (<a href="contents/articles/05-06.pdf">article</a>, <a href="contents/issue05.pdf#page=17">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n16/mode/1up">archive.org</a>) by <a href="https://twitter.com/@idraumr">Shikhin Sethi</a></li>
<li>A Breakout Board for Mini-PCIe; or, My Intel Galileo has less RAM than its Video Card! (<a href="contents/articles/05-07.pdf">article</a>, <a href="contents/issue05.pdf#page=23">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n22/mode/1up">archive.org</a>) by <a href="https://twitter.com/@securelyfitz">Joe FitzPatrick</a></li>
<li>Prototyping a generic x86 backdoor in Bochs; or, I'll see your RDRAND backdoor and raise you a covert channel! (<a href="contents/articles/05-08.pdf">article</a>, <a href="contents/issue05.pdf#page=27">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n26/mode/1up">archive.org</a>) by Matilda</li>
<li>From Protocol to PoC; or, Your Cisco blade is booting PoC||GTFO. (<a href="contents/articles/05-09.pdf">article</a>, <a href="contents/issue05.pdf#page=35">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n34/mode/1up">archive.org</a>) by <a href="https://twitter.com/@mik235">Mik</a></li>
<li>i386 Shellcode for Lazy Neighbors; or, I am my own NOP Sled. (<a href="contents/articles/05-10.pdf">article</a>, <a href="contents/issue05.pdf#page=40">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n39/mode/1up">archive.org</a>) by <a href="https://twitter.com/@brainsmoke">Brainsmoke</a></li>
<li>Abusing JSONP with Rosetta Flash (<a href="contents/articles/05-11.pdf">article</a>, <a href="contents/issue05.pdf#page=42">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n41/mode/1up">archive.org</a>) by <a href="https://twitter.com/@mikispag">Michele Spagnuolo</a></li>
<li>A cryptographer and a binarista walk into a bar (<a href="contents/articles/05-12.pdf">article</a>, <a href="contents/issue05.pdf#page=48">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n47/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a>, <a href="https://www.iaik.tugraz.at/content/about_iaik/people/eichlseder_maria/">Maria Eichlseder</a></li>
<li>Ancestral Voices Or, a vision in a nightmare. (<a href="contents/articles/05-13.pdf">article</a>, <a href="contents/issue05.pdf#page=54">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n53/mode/1up">archive.org</a>) by <a href="https://twitter.com/@rantyben">Ben Nagy</a></li>
<li>A Call for PoC (<a href="contents/articles/05-14.pdf">article</a>, <a href="contents/issue05.pdf#page=56">in issue</a>, <a href="https://archive.org/details/pocorgtfo05#page/n55/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue05.png width=200px alt="PoC || GTFO; addressed to the INHABITANTS of EARTH on the following and other INTERESTING SUBJECTS written for the edification of ALL GOOD NEIGHBORS"/> <img src=contents/issue05iso.png width=200px alt="ISO polyglot"/> <img src=contents/issue05swf.png width=200px alt="Flash polyglot"/></p>
<h3 id="0x06">0x06</h3>
<p><a href="releases/pocorgtfo06.pdf">pocorgtfo06.pdf</a> <a href="https://www.virustotal.com/gui/file/bf4d8846fbbb1071c7ec033004eda8ea8809676fe388db6faa020d781cb8ac26/details"><code>bf4d8846..1cb8ac26</code></a> polyglot: TAR, ZIP, PDF (<a href="contents/issue06.pdf">PDF-only</a>)</p>
<ol>
<li>Sacrament of Communion with the Weird Machines (<a href="contents/articles/06-01.pdf">article</a>, <a href="contents/issue06.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n2/mode/1up">archive.org</a>)</li>
<li>On Giving Thanks (<a href="contents/articles/06-02.pdf">article</a>, <a href="contents/issue06.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n3/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
<li>Gekko the Dolphin (<a href="contents/articles/06-03.pdf">article</a>, <a href="contents/issue06.pdf#page=6">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n5/mode/1up">archive.org</a>) by <a href="https://twitter.com/@FioraAeterna">Fiora</a></li>
<li>This TAR archive is a PDF! (as well as a ZIP, but you are probably used to it by now, <a href="contents/articles/06-04.pdf">article</a>, <a href="contents/issue06.pdf#page=15">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n14/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>x86 Alchemy and Smuggling with Metalkit (<a href="contents/articles/06-05.pdf">article</a>, <a href="contents/issue06.pdf#page=17">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n16/mode/1up">archive.org</a>) by <a href="https://twitter.com/@scanlime">Micah Elizabeth Scott</a></li>
<li>Detecting MIPS Emulation (<a href="contents/articles/06-06.pdf">article</a>, <a href="contents/issue06.pdf#page=25">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n24/mode/1up">archive.org</a>) by <a href="https://twitter.com/@devttyS0">Craig Heffner</a></li>
<li>More Cryptographic Coloring Books (<a href="contents/articles/06-07.pdf">article</a>, <a href="contents/issue06.pdf#page=29">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n28/mode/1up">archive.org</a>) by <a href="https://twitter.com/@doegox">Philippe Teuwen</a></li>
<li>Introduction to Delayering and Reversing PCBs (<a href="contents/articles/06-08.pdf">article</a>, <a href="contents/issue06.pdf#page=37">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n36/mode/1up">archive.org</a>) by <a href="https://twitter.com/@joegrand">Joe Grand</a></li>
<li>Davinci Seal: Self-decrypting Executables (<a href="contents/articles/06-09.pdf">article</a>, <a href="contents/issue06.pdf#page=41">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n40/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ryan_elfmaster">Ryan "ElfMaster" O'Neill</a></li>
<li>Observable Metrics (<a href="contents/articles/06-10.pdf">article</a>, <a href="contents/issue06.pdf#page=50">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n49/mode/1up">archive.org</a>) by <a href="https://twitter.com/@DonAndrewBailey">Don A. Bailey</a>, Tamara L. Rhoads, <a href="https://twitter.com/@ACKFlags">Jaime Cochran</a></li>
<li>A Call for PoC (<a href="contents/articles/06-11.pdf">article</a>, <a href="contents/issue06.pdf#page=56">in issue</a>, <a href="https://archive.org/details/pocorgtfo06#page/n55/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
</ol>
<img src=contents/issue06.png width=200px alt="PoC || GTFO; brings that OLD TIMEY EXPLOITATION with a WEIRD MACHINE JAMBOREE and our world-famous FUNKY FILE FLEA MARKET not to be ironic, but because WE LOVE THE MUSIC!"/>
<div class="sourceCode" id="cb1"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb1-1" data-line-number="1">$ <span class="fu">tar</span> -tvf pocorgtfo06.pdf</a>
<a class="sourceLine" id="cb1-2" data-line-number="2"><span class="ex">-rw-r--r--</span> Manul/Laphroaig 0 2014-10-06 21:33 %PDF-1.5</a>
<a class="sourceLine" id="cb1-3" data-line-number="3"><span class="ex">-rw-r--r--</span> Manul/Laphroaig 525849 2014-10-06 21:33 1.png</a>
<a class="sourceLine" id="cb1-4" data-line-number="4"><span class="ex">-rw-r--r--</span> Manul/Laphroaig 273658 2014-10-06 21:33 2.bmp</a></code></pre></div>
<h3 id="0x07">0x07</h3>
<p><a href="releases/pocorgtfo07.pdf">pocorgtfo07.pdf</a> <a href="https://www.virustotal.com/gui/file/601534f4355c5e0eb292c6dd6edaf5055625d23e0de869f88193606415e6a35f/details"><code>601534f4..15e6a35f</code></a> polyglot: BPG, HTML, ZIP, PDF (<a href="contents/issue07.pdf">PDF-only</a>)</p>
<ol>
<li>With what shall we commune this evening? (<a href="contents/articles/07-01.pdf">article</a>, <a href="contents/issue07.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n2/mode/1up">archive.org</a>)</li>
<li>AA55, the Magic Number (<a href="contents/articles/07-02.pdf">article</a>, <a href="contents/issue07.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n3/mode/1up">archive.org</a>) by Morgan Reece Phillips</li>
<li>Laser robots! (<a href="contents/articles/07-03.pdf">article</a>, <a href="contents/issue07.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n4/mode/1up">archive.org</a>) by <a href="https://twitter.com/@scanlime">Micah Elizabeth Scott</a></li>
<li>A Story of Settled Science (<a href="contents/articles/07-04.pdf">article</a>, <a href="contents/issue07.pdf#page=10">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n9/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
<li>Scapy is for Script Kiddies (<a href="contents/articles/07-05.pdf">article</a>, <a href="contents/issue07.pdf#page=13">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n12/mode/1up">archive.org</a>) by <a href="https://twitter.com/@XlogicX">Eric Davisson</a></li>
<li>Funky Files, the Novella! (<a href="contents/articles/07-06.pdf">article</a>, <a href="contents/issue07.pdf#page=18">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n17/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>Extending AES-NI Backdoors (<a href="contents/articles/07-07.pdf">article</a>, <a href="contents/issue07.pdf#page=42">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n41/mode/1up">archive.org</a>) by <a href="https://twitter.com/@bsdaemon">BSDaemon</a>, Pirata</li>
<li>Innovations with Core Files (<a href="contents/articles/07-08.pdf">article</a>, <a href="contents/issue07.pdf#page=49">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n48/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ryan_elfmaster">Ryan "ElfMaster" O'Neill</a></li>
<li>Bambaata on NASCAR (<a href="contents/articles/07-09.pdf">article</a>, <a href="contents/issue07.pdf#page=58">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n57/mode/1up">archive.org</a>) by Count Bambaata</li>
<li>Public Service Announcement (<a href="contents/articles/07-10.pdf">article</a>, <a href="contents/issue07.pdf#page=61">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n60/mode/1up">archive.org</a>)</li>
<li>A Modern Cybercriminal (<a href="contents/articles/07-11.pdf">article</a>, <a href="contents/issue07.pdf#page=62">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n61/mode/1up">archive.org</a>) by <a href="https://twitter.com/@rantyben">Ben Nagy</a></li>
<li>Fast Cash for Bugs! (<a href="contents/articles/07-12.pdf">article</a>, <a href="contents/issue07.pdf#page=64">in issue</a>, <a href="https://archive.org/details/pocorgtfo07#page/n63/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue07.png width=200px alt="PASTOR MANUL LAPHROAIG's INTERNATIONAL JOURNAL OF PoC || GTFO CALISTHENICS & ORTHODONTIA IN REMEMBRANCE OF OUR BELOVED DR. DOBB BECAUSE THE WORLD IS ALMOST THROUGH!"/> <img src=contents/issue07bpg.png width=200px alt="BPG payload"/> <img src=contents/issue07html.png width=200px alt="HTML payload"/></p>
<h2 id="volume-">Volume ][</h2>
<p><a href="https://nostarch.com/gtfo2"><img src=extras/glyphsign.svg width=100px alt="Volume II's glyph'"/> Buy</a></p>
<h3 id="0x08">0x08</h3>
<p><a href="releases/pocorgtfo08.pdf">pocorgtfo08.pdf</a> <a href="https://www.virustotal.com/gui/file/7a942c425f471f99d8cba8da117cc4a53cddb3551e4b16c8b9feae31b5654a33/details"><code>7a942c42..b5654a33</code></a> polyglot: Shell, ZIP, PDF (<a href="contents/issue08.pdf">PDF-only</a>)</p>
<ol>
<li>Please stand; now, please be seated. (<a href="contents/articles/08-01.pdf">article</a>, <a href="contents/issue08.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n2/mode/1up">archive.org</a>)</li>
<li>Witches, Warlocks, and Wassenaar; or, On the Internet, no one knows you are a witch. (<a href="contents/articles/08-02.pdf">article</a>, <a href="contents/issue08.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n3/mode/1up">archive.org</a>)</li>
<li>Backdoors from Compiler Bugs (<a href="contents/articles/08-03.pdf">article</a>, <a href="contents/issue08.pdf#page=7">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n6/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ScottyBauer1">Scott Bauer</a>, <a href="https://twitter.com/@volatile_void">Pascal Cuoq</a>, <a href="https://twitter.com/johnregehr">John Regehr</a></li>
<li>A Protocol for Leibowitz (<a href="contents/articles/08-04.pdf">article</a>, <a href="contents/issue08.pdf#page=10">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n9/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a>, Muur P.</li>
<li>Reprogramming a Mouse Jiggler (<a href="contents/articles/08-05.pdf">article</a>, <a href="contents/issue08.pdf#page=20">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n19/mode/1up">archive.org</a>) by Mickey Shkatov</li>
<li>Exploiting an Academic Hypervisor (<a href="contents/articles/08-06.pdf">article</a>, <a href="contents/issue08.pdf#page=24">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n23/mode/1up">archive.org</a>) by <a href="https://twitter.com/@djcapelis">DJ Capelis</a>, <a href="https://twitter.com/@danielbittman">Daniel Bittman</a></li>
<li>Weaponized Polyglots as Browser Exploits (<a href="contents/articles/08-07.pdf">article</a>, <a href="contents/issue08.pdf#page=27">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n26/mode/1up">archive.org</a>) by <a href="https://twitter.com/@therealsaumil">Saumil Shah</a></li>
<li>On Error Resume Next for Unix (<a href="contents/articles/08-08.pdf">article</a>, <a href="contents/issue08.pdf#page=45">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n44/mode/1up">archive.org</a>) by Jeffball</li>
<li>Sing Along with Toni Brixton (<a href="contents/articles/08-09.pdf">article</a>, <a href="contents/issue08.pdf#page=47">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n46/mode/1up">archive.org</a>) by <a href="https://twitter.com/@evm_sec">EVM</a>, Tommy Brixton</li>
<li>Backdooring Nothing-Up-My-Sleeve Numbers (<a href="contents/articles/08-10.pdf">article</a>, <a href="contents/issue08.pdf#page=48">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n47/mode/1up">archive.org</a>) by <a href="https://twitter.com/@veorq">Jean-Philippe Aumasson</a></li>
<li>Building a Wireless CTF (<a href="contents/articles/08-11.pdf">article</a>, <a href="contents/issue08.pdf#page=55">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n54/mode/1up">archive.org</a>) by <a href="https://twitter.com/@dntlookbehindu">Russell Handorf</a></li>
<li>Grammatically Correct Encryption (<a href="contents/articles/08-12.pdf">article</a>, <a href="contents/issue08.pdf#page=60">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n59/mode/1up">archive.org</a>) by <a href="https://twitter.com/@doegox">Philippe Teuwen</a></li>
<li>Fast Cash for Cyber Munitions! (<a href="contents/articles/08-13.pdf">article</a>, <a href="contents/issue08.pdf#page=64">in issue</a>, <a href="https://archive.org/details/pocorgtfo08#page/n63/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
</ol>
<img src=contents/issue08.png width=200px alt="AS EXPLOITS SIT LONELY, FORGOTTEN ON THE SHELF YOUR FRIENDLY NEIGHBORS AT PoC || GTFO PROUDLY PRESENT PASTOR MANUL LAPHROAIG’S EXPORT–CONTROLLED CHURCH NEWSLETTER"/>
<div class="sourceCode" id="cb2"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb2-1" data-line-number="1">$ <span class="bu">echo</span> <span class="st">"terrible raccoons achieve their escapades"</span> <span class="kw">|</span> <span class="ex">./pocorgtfo08.pdf</span> -d 4321</a>
<a class="sourceLine" id="cb2-2" data-line-number="2"><span class="ex">good</span> neighbors secure their communications</a></code></pre></div>
<h3 id="0x09">0x09</h3>
<p><a href="releases/pocorgtfo09.pdf">pocorgtfo09.pdf</a> <a href="https://www.virustotal.com/gui/file/8ad70d4dd0c0f53e8c479d1d573e5a365ea673acafa9fd61fa5231e18502a6ad/details"><code>8ad70d4d..8502a6ad</code></a> polyglot: WavPack, ZIP, PDF (<a href="contents/issue09.pdf">PDF-only</a>)</p>
<ol>
<li>Please stand; now, please be seated. (<a href="contents/articles/09-01.pdf">article</a>, <a href="contents/issue09.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n2/mode/1up">archive.org</a>)</li>
<li>A Sermon on Newton and Turing (<a href="contents/articles/09-02.pdf">article</a>, <a href="contents/issue09.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n3/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
<li>Globalstar Satellite Communications (<a href="contents/articles/09-03.pdf">article</a>, <a href="contents/issue09.pdf#page=7">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n6/mode/1up">archive.org</a>) by Colby Moore</li>
<li>Keenly Spraying the Kernel Pools (<a href="contents/articles/09-04.pdf">article</a>, <a href="contents/issue09.pdf#page=12">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n11/mode/1up">archive.org</a>) by <a href="https://twitter.com/@zer0mem">Peter Hlavaty of Keen Team</a></li>
<li>The Second Underhanded Crypto Contest (<a href="contents/articles/09-05.pdf">article</a>, <a href="contents/issue09.pdf#page=19">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n18/mode/1up">archive.org</a>) by <a href="https://twitter.com/@DefuseSec">Taylor Hornby</a></li>
<li>Cross VM Communications (<a href="contents/articles/09-06.pdf">article</a>, <a href="contents/issue09.pdf#page=21">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n20/mode/1up">archive.org</a>) by <a href="https://twitter.com/@Calaquendi44">Sophia D'Antoine</a></li>
<li>Antivirus Tumors (<a href="contents/articles/09-07.pdf">article</a>, <a href="contents/issue09.pdf#page=26">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n25/mode/1up">archive.org</a>) by <a href="https://twitter.com/@XlogicX">Eric Davisson</a></li>
<li>A Recipe for TCP/IPA (<a href="contents/articles/09-08.pdf">article</a>, <a href="contents/issue09.pdf#page=28">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n27/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ron_fab">Ron Fabela of Binary Brew Works</a></li>
<li>Mischief with AX.25 and APRS (<a href="contents/articles/09-09.pdf">article</a>, <a href="contents/issue09.pdf#page=34">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n33/mode/1up">archive.org</a>) by Vogelfrei</li>
<li>Napravi i ti Racunar „Galaksija" (<a href="contents/articles/09-10.pdf">article</a>, <a href="contents/issue09.pdf#page=40">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n39/mode/1up">archive.org</a>) by <a href="https://twitter.com/@Voja_Antonic">Voja Antonic</a></li>
<li>Root Rights are a Grrl's Best Friend! (<a href="contents/articles/09-11.pdf">article</a>, <a href="contents/issue09.pdf#page=60">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n59/mode/1up">archive.org</a>) by <a href="https://twitter.com/@fbz">Fbz</a></li>
<li>What If You Could Listen to This PDF? (<a href="contents/articles/09-12.pdf">article</a>, <a href="contents/issue09.pdf#page=61">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n60/mode/1up">archive.org</a>) by <a href="https://twitter.com/@doegox">Philippe Teuwen</a></li>
<li>Oona's Puzzle Corner! (<a href="contents/articles/09-13.pdf">article</a>, <a href="contents/issue09.pdf#page=62">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n61/mode/1up">archive.org</a>) by <a href="https://twitter.com/@windyoona">Oona Räisänen</a></li>
<li>Fast Cash for Cyber Munitions! (<a href="contents/articles/09-14.pdf">article</a>, <a href="contents/issue09.pdf#page=64">in issue</a>, <a href="https://archive.org/details/pocorgtfo09#page/n63/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue09.png width=200px alt="PoC || GTFO PASTOR MANUL LAPHROAIG’S TABERNACLE CHOIR SINGS REVERENT ELEGIES OF THE SECOND CRYPTO WAR"/> <img src=contents/issue09wv.png width=200px alt="WavPack polyglot"/></p>
<h3 id="0x10">0x10</h3>
<p><a href="releases/pocorgtfo10.pdf">pocorgtfo10.pdf</a> <a href="https://www.virustotal.com/gui/file/1e350e30383fd332678654b6067fe4b6ea3d25d7f41a24a4c81fe913b295c9de/details"><code>1e350e30..b295c9de</code></a> polyglot: LSMV, ZIP, PDF (<a href="contents/issue10.pdf">PDF-only</a>)</p>
<ol>
<li>Please stand; now, please be seated. (<a href="contents/articles/10-01.pdf">article</a>, <a href="contents/issue10.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo10#page/n2/mode/1up">archive.org</a>)</li>
<li>The Small Brown Dog and the Three Ghosts (<a href="contents/articles/10-02.pdf">article</a>, <a href="contents/issue10.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo10#page/n3/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
<li>Exploiting Pokémon in a Super GameBoy (<a href="contents/articles/10-03.pdf">article</a>, <a href="contents/issue10.pdf#page=7">in issue</a>, <a href="https://archive.org/details/pocorgtfo10#page/n6/mode/1up">archive.org</a>) by <a href="https://twitter.com/@MrTASBot">Allan Cecil (dwangoAC)</a>, Ilari Liusvaara (Ilari), <a href="https://twitter.com/@p4plus2">Jordan Potter (p4plus2)</a></li>
<li>Pokéglot! (<a href="contents/articles/10-04.pdf">article</a>, <a href="contents/issue10.pdf#page=24">in issue</a>, <a href="https://archive.org/details/pocorgtfo10#page/n23/mode/1up">archive.org</a>) by <a href="https://twitter.com/@MrTASBot">Allan Cecil (dwangoAC)</a>, Ilari Liusvaara (Ilari), <a href="https://twitter.com/@p4plus2">Jordan Potter (p4plus2)</a></li>
<li>Cortex M0 Marionettes with SWD (<a href="contents/articles/10-05.pdf">article</a>, <a href="contents/issue10.pdf#page=26">in issue</a>, <a href="https://archive.org/details/pocorgtfo10#page/n25/mode/1up">archive.org</a>) by <a href="https://twitter.com/@scanlime">Micah Elizabeth Scott</a></li>
<li>Reversing a Pregnancy Test (<a href="contents/articles/10-06.pdf">article</a>, <a href="contents/issue10.pdf#page=32">in issue</a>, <a href="https://archive.org/details/pocorgtfo10#page/n31/mode/1up">archive.org</a>) by Amanda Wozniak</li>
<li>Apple II Copy Protections (<a href="contents/articles/10-07.pdf">article</a>, <a href="contents/issue10.pdf#page=39">in issue</a>, <a href="https://archive.org/details/pocorgtfo10#page/n38/mode/1up">archive.org</a>) by <a href="https://twitter.com/@a2_qkumba">Peter Ferrie (qkumba, san inc)</a></li>
<li>Jailbreaking the TYT MD380 DMR Handheld (<a href="contents/articles/10-08.pdf">article</a>, <a href="contents/issue10.pdf#page=76">in issue</a>, <a href="https://archive.org/details/pocorgtfo10#page/n75/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed KK4VCZ</a>, <a href="https://twitter.com/@dd4cr">DD4CR</a>, W7PCH</li>
<li>Tithe us your Alms of 0day! (<a href="contents/articles/10-09.pdf">article</a>, <a href="contents/issue10.pdf#page=88">in issue</a>, <a href="https://archive.org/details/pocorgtfo10#page/n87/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue10.jpg width=200px alt="IN THE THEATER OF LITERATE DISASSEMBLY, PASTOR MANUL LAPHROAIG AND HIS MERRY BAND OF REVERSE ENGINEERS LIFT THE WELDED HOOD FROM THE ENGINE THAT RUNS THE WORLD!"/> <img src=contents/issue10lsmv.jpg width=200px alt="LSMV payload"/></p>
<h3 id="0x11">0x11</h3>
<p><a href="releases/pocorgtfo11.pdf">pocorgtfo11.pdf</a> <a href="https://www.virustotal.com/gui/file/44d56d717c7b3baf7e11aa6624d5a80a90b132a519e61b9682a5f4a635b04c78/details"><code>44d56d71..35b04c78</code></a> polyglot: RUBY, HTML, ZIP, PDF (<a href="contents/issue11.pdf">PDF-only</a>)</p>
<ol>
<li>Please stand; now, please be seated. (<a href="contents/articles/11-01.pdf">article</a>, <a href="contents/issue11.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n2/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
<li>In Praise of Junk Hacking (<a href="contents/articles/11-02.pdf">article</a>, <a href="contents/issue11.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n3/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
<li>Emulating Star Wars on a Vector Display (<a href="contents/articles/11-03.pdf">article</a>, <a href="contents/issue11.pdf#page=6">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n5/mode/1up">archive.org</a>) by <a href="https://twitter.com/@qrs">Trammell Hudson</a></li>
<li>One Boot Sector PoC Deserves Another (<a href="contents/articles/11-04.pdf">article</a>, <a href="contents/issue11.pdf#page=9">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n8/mode/1up">archive.org</a>) by <a href="https://twitter.com/@XlogicX">Eric Davisson</a></li>
<li>Defeating E7 Protection on the Apple II Platform (<a href="contents/articles/11-05.pdf">article</a>, <a href="contents/issue11.pdf#page=15">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n14/mode/1up">archive.org</a>) by <a href="https://twitter.com/@a2_qkumba">Peter Ferrie (qkumba, san inc)</a></li>
<li>Tourist's Phrasebook for the ARM Cortex M (<a href="contents/articles/11-06.pdf">article</a>, <a href="contents/issue11.pdf#page=20">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n19/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a>, <a href="https://twitter.com/@rmspeers">Ryan Speers</a></li>
<li>Ghetto CFI for X86 (<a href="contents/articles/11-07.pdf">article</a>, <a href="contents/issue11.pdf#page=24">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n23/mode/1up">archive.org</a>) by <a href="https://twitter.com/@jeffreycrowell">Jeffrey Crowell</a></li>
<li>Tourist's Guide to the MSP430 (<a href="contents/articles/11-08.pdf">article</a>, <a href="contents/issue11.pdf#page=28">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n27/mode/1up">archive.org</a>) by <a href="https://twitter.com/@rmspeers">Ryan Speers</a>, <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a></li>
<li>The Treachery of Files (<a href="contents/articles/11-09.pdf">article</a>, <a href="contents/issue11.pdf#page=33">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n32/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ESultanik">Evan Sultanik</a></li>
<li>Ben "bushing" Byer Memorial (<a href="contents/articles/11-10.pdf">article</a>, <a href="contents/issue11.pdf#page=38">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n37/mode/1up">archive.org</a>) by <a href="https://twitter.com/fail0verflow">fail0verflow</a></li>
<li>Tithe us your Alms of 0day! (<a href="contents/articles/11-11.pdf">article</a>, <a href="contents/issue11.pdf#page=40">in issue</a>, <a href="https://archive.org/details/pocorgtfo11#page/n39/mode/1up">archive.org</a>) by Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue11.jpg width=200px alt="IN A FIT OF STUBBORN OPTIMISM, PASTOR MANUL LAPHROAIG AND HIS CLEVER CREW SET SAIL TOWARD WELCOMING SHORES OF THE GREAT UNKNOWN!"/> <img src=contents/issue11server.png width=200px alt="Ruby server"/></p>
<h3 id="0x12">0x12</h3>
<p><a href="releases/pocorgtfo12.pdf">pocorgtfo12.pdf</a> <a href="https://www.virustotal.com/gui/file/441216e475e69564192f2121daa5dd465835072718366b75b08b9272ff9cf08b/details"><code>441216e4..ff9cf08b</code></a> polyglot: APK, ZIP, PDF (<a href="contents/issue12.pdf">PDF-only</a>)</p>
<ol>
<li>Lisez moi! (<a href="contents/articles/12-01.pdf">article</a>, <a href="contents/issue12.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Surviving the Computation Bomb (<a href="contents/articles/12-02.pdf">article</a>, <a href="contents/issue12.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n3/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>A Z-Wave Carol (<a href="contents/articles/12-03.pdf">article</a>, <a href="contents/issue12.pdf#page=6">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n5/mode/1up">archive.org</a>) by Chris Badenhop, Ben Ramsey</li>
<li>Comma Chameleon (<a href="contents/articles/12-04.pdf">article</a>, <a href="contents/issue12.pdf#page=14">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n13/mode/1up">archive.org</a>) by <a href="https://twitter.com/@kkotowicz">Krzysztof Kotowicz</a>, <a href="https://twitter.com/@molnar_g">Gábor Molnár</a></li>
<li>Putting the VM in M/o/Vfuscator (<a href="contents/articles/12-05.pdf">article</a>, <a href="contents/issue12.pdf#page=28">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n27/mode/1up">archive.org</a>) by <a href="https://twitter.com/@xoreaxeaxeax">Chris Domas</a></li>
<li>A JCL Adventure with Network Job Entries (<a href="contents/articles/12-06.pdf">article</a>, <a href="contents/issue12.pdf#page=32">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n31/mode/1up">archive.org</a>) by <a href="https://twitter.com/@mainframed767">Soldier of Fortran</a></li>
<li>Shellcode Hash Collisions (<a href="contents/articles/12-07.pdf">article</a>, <a href="contents/issue12.pdf#page=57">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n56/mode/1up">archive.org</a>) by <a href="https://twitter.com/@fristle">Mike Myers</a>, <a href="https://twitter.com/@ESultanik">Evan Sultanik</a></li>
<li>UMPOwn; A Symphony of Win10 Privilege (<a href="contents/articles/12-08.pdf">article</a>, <a href="contents/issue12.pdf#page=63">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n62/mode/1up">archive.org</a>) by <a href="https://twitter.com/@aionescu">Alex Ionescu</a></li>
<li>VIM Execution Engine (<a href="contents/articles/12-09.pdf">article</a>, <a href="contents/issue12.pdf#page=72">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n71/mode/1up">archive.org</a>) by <a href="https://twitter.com/@xoreaxeaxeax">Chris Domas</a></li>
<li>Doing Right by Neighbor O'Hara (<a href="contents/articles/12-10.pdf">article</a>, <a href="contents/issue12.pdf#page=76">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n75/mode/1up">archive.org</a>) by <a href="https://twitter.com/@andreasdotorg">Andreas Bogk</a></li>
<li>Are Androids Polyglots? (<a href="contents/articles/12-11.pdf">article</a>, <a href="contents/issue12.pdf#page=79">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n78/mode/1up">archive.org</a>) by <a href="https://twitter.com/@doegox">Philippe Teuwen</a></li>
<li>Tithe us your Alms of 0day! (<a href="contents/articles/12-12.pdf">article</a>, <a href="contents/issue12.pdf#page=80">in issue</a>, <a href="https://archive.org/details/pocorgtfo12#page/n79/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue12.jpg width=200px alt="COLLECTING BOTTLES OF BROKEN THINGS, PASTOR MANUL LAPHROAIG WITH THEORY AND PRAXIS COULD BE THE MAN WHO SNEAKS A LOOK BEHIND THE CURTAIN!"/> <img src=contents/issue12apk.png width=150px alt="APK polyglot install"/> <img src=contents/issue12apk2.png width=150px alt="APK polyglot screen"/></p>
<h3 id="0x13">0x13</h3>
<p><a href="releases/pocorgtfo13.pdf">pocorgtfo13.pdf</a> <a href="https://www.virustotal.com/gui/file/c881c67557af52864654791a2a494f329a2fa397236bf0e961508f0769b0a3f5/details"><code>c881c675..69b0a3f5</code></a> polyglot: PS, ZIP, PDF (<a href="contents/issue13.pdf">PDF-only</a>)</p>
<ol>
<li>Read me if you want to live! (<a href="contents/articles/13-01.pdf">article</a>, <a href="contents/issue13.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Reverse Engineering Star Raiders (<a href="contents/articles/13-02.pdf">article</a>, <a href="contents/issue13.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n4/mode/1up">archive.org</a>) by Lorenz Wiest</li>
<li>How Slow Can You Go? (<a href="contents/articles/13-03.pdf">article</a>, <a href="contents/issue13.pdf#page=24">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n23/mode/1up">archive.org</a>) by <a href="https://twitter.com/@tiraniddo">James Forshaw</a></li>
<li>The FaceWhisperer for USB Glitching; or, Reading RFID with ROP and a Wacom Tablet (<a href="contents/articles/13-04.pdf">article</a>, <a href="contents/issue13.pdf#page=30">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n29/mode/1up">archive.org</a>) by <a href="https://twitter.com/@scanlime">Micah Elizabeth Scott</a></li>
<li>Decoding AMBE+2 in MD380 Firmware in Linux (<a href="contents/articles/13-05.pdf">article</a>, <a href="contents/issue13.pdf#page=38">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n37/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed KK4VCZ</a></li>
<li>Password Weaknesses in Physical Security: Silliness in Three Acts (<a href="contents/articles/13-06.pdf">article</a>, <a href="contents/issue13.pdf#page=43">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n42/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ESultanik">Evan Sultanik</a></li>
<li>Reverse Engineering the LoRa PHY (<a href="contents/articles/13-07.pdf">article</a>, <a href="contents/issue13.pdf#page=48">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n47/mode/1up">archive.org</a>) by <a href="https://twitter.com/@embeddedsec">Matt Knight</a></li>
<li>Plumbing, not Popper; or, the Problem with STEP (<a href="contents/articles/13-08.pdf">article</a>, <a href="contents/issue13.pdf#page=60">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n59/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Where is ShimDBC.exe? (<a href="contents/articles/13-09.pdf">article</a>, <a href="contents/issue13.pdf#page=63">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n62/mode/1up">archive.org</a>) by Geoff Chappell</li>
<li>Post Scriptum: A Schizophrenic Ghost (<a href="contents/articles/13-10.pdf">article</a>, <a href="contents/issue13.pdf#page=71">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n70/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ESultanik">Evan Sultanik</a>, <a href="https://twitter.com/@doegox">Philippe Teuwen</a></li>
<li>Tithe us your Alms of 0day! (<a href="contents/articles/13-11.pdf">article</a>, <a href="contents/issue13.pdf#page=72">in issue</a>, <a href="https://archive.org/details/pocorgtfo13#page/n71/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue13.png width=200px alt="PASTOR LAPHROAIG'S MERCY SHIP HOLDS STONES FROM THE IVORY TOWER, BUT ONLY AS BALLAST!"/> <img src=contents/issue13ps.png width=300px alt="PostScript polyglot"/></p>
<h2 id="volume-iii">Volume III</h2>
<p><a href="https://nostarch.com/gtfo3">Buy</a></p>
<h3 id="0x14">0x14</h3>
<p><a href="releases/pocorgtfo14.pdf">pocorgtfo14.pdf</a> <a href="https://www.virustotal.com/gui/file/b9db617dcc146cc99f4379b3162a35818d884bf4032ab854b6ec00b5ec98138d/details"><code>5eaf00d..b126746c</code></a> polyglot: iNES*, ZIP, PDF* -- MD5 *<a href="https://github.com/corkami/collisions/tree/master/hashquines">hashquines</a> + <a href="https://www.virustotal.com/gui/file/4238b3ce43a67c8b033f987345f60acd2113bea9619d8ded4f254112b78c65ce/details">collision</a> (<a href="contents/issue14.pdf">PDF-only</a>)</p>
<ol>
<li>Let us share some water (<a href="contents/articles/14-01.pdf">article</a>, <a href="contents/issue14.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Z-Ring Phreaking from a Gameboy (<a href="contents/articles/14-02.pdf">article</a>, <a href="contents/issue14.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n4/mode/1up">archive.org</a>) by <a href="https://twitter.com/endrift">Vicki Pfau</a></li>
<li>Concerning Desert Studies, Cyberwar, and the Desert Power (<a href="contents/articles/14-03.pdf">article</a>, <a href="contents/issue14.pdf#page=12">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n11/mode/1up">archive.org</a>) by Naib Manul Laphroaig</li>
<li>Flush+Reload Side-Channel Attacks (<a href="contents/articles/14-04.pdf">article</a>, <a href="contents/issue14.pdf#page=14">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n13/mode/1up">archive.org</a>) by <a href="https://twitter.com/@DefuseSec">Taylor Hornby</a></li>
<li>Anti-Keylogging with Random Noise (<a href="contents/articles/14-05.pdf">article</a>, <a href="contents/issue14.pdf#page=19">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n18/mode/1up">archive.org</a>) by <a href="https://twitter.com/@fristle">Mike Myers</a></li>
<li>Random NOPs on ARM (<a href="contents/articles/14-06.pdf">article</a>, <a href="contents/issue14.pdf#page=26">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n25/mode/1up">archive.org</a>) by <a href="https://twitter.com/@tieknimmers">Niek Timmers</a>, Albert Spruyt</li>
<li>Routing Ethernet over GDB and SWD for Glitching (<a href="contents/articles/14-07.pdf">article</a>, <a href="contents/issue14.pdf#page=30">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n29/mode/1up">archive.org</a>) by <a href="https://twitter.com/@scanlime">Micah Elizabeth Scott</a></li>
<li>Control Panel Vulnerabilities (<a href="contents/articles/14-08.pdf">article</a>, <a href="contents/issue14.pdf#page=37">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n36/mode/1up">archive.org</a>) by Geoff Chappell</li>
<li>Postscript that shows its own MD5 (<a href="contents/articles/14-09.pdf">article</a>, <a href="contents/issue14.pdf#page=46">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n45/mode/1up">archive.org</a>) by <a href="https://twitter.com/@teh_gerg">Gregor "Greg" Kopf</a></li>
<li>A PDF That Shows Its Own MD5 (<a href="contents/articles/14-10.pdf">article</a>, <a href="contents/issue14.pdf#page=50">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n49/mode/1up">archive.org</a>) by <a href="https://twitter.com/@makomk">Mako</a></li>
<li>This GIF shows its own MD5! (<a href="contents/articles/14-11.pdf">article</a>, <a href="contents/issue14.pdf#page=53">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n52/mode/1up">archive.org</a>) by <a href="https://twitter.com/@__spq__">Kristoffer "spq" Janke</a></li>
<li>This PDF is an NES ROM that prints its own MD5 hash! (<a href="contents/articles/14-12.pdf">article</a>, <a href="contents/issue14.pdf#page=56">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n55/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ESultanik">Evan Sultanik</a>, <a href="https://twitter.com/@evan_teran">Evan Teran</a></li>
<li>Tithe us your Alms of 0day! (<a href="contents/articles/14-13.pdf">article</a>, <a href="contents/issue14.pdf#page=60">in issue</a>, <a href="https://archive.org/details/pocorgtfo14#page/n59/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<p><a href="https://www.virustotal.com/gui/file/b9db617dcc146cc99f4379b3162a35818d884bf4032ab854b6ec00b5ec98138d"><img src=contents/issue14.png width=200px alt="PASTOR LAPHROAIG SCREAMS HIGH FIVE TO THE HEAVENS AS THE WHOLE WORLD GOES UNDER (480 collisions hashquine)"/></a> <a href="https://www.virustotal.com/gui/file/4238b3ce43a67c8b033f987345f60acd2113bea9619d8ded4f254112b78c65ce/details"><img src=contents/issue14alt.png width=200px alt="alt cover (1 collision)"/></a> <img src=contents/issue14nes.png width=200px alt="NES polyglot (128 collisions hashquine)"/></p>
<h3 id="0x15">0x15</h3>
<p><a href="releases/pocorgtfo15.pdf">pocorgtfo15.pdf</a> <a href="https://www.virustotal.com/gui/file/c9b3f5026640efae12d75e62868931e2b2b5ad98a9b858408266ac5c35815bf4/details"><code>c9b3f502..35815bf4</code></a> polyglot: ILDA, ZIP, PDF (<a href="contents/issue15.pdf">PDF-only</a>)</p>
<ol>
<li>There's no excuse for not knowing. (<a href="contents/articles/15-01.pdf">article</a>, <a href="contents/issue15.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Pier Solar and the Great Reverser (<a href="contents/articles/15-02.pdf">article</a>, <a href="contents/issue15.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n4/mode/1up">archive.org</a>) by <a href="https://twitter.com/@brandonlwilson">Brandon L. Wilson</a></li>
<li>That car by the bear ain't got no fire; or, A Sermon on Alternators, Voltmeters, and Debugging (<a href="contents/articles/15-03.pdf">article</a>, <a href="contents/issue15.pdf#page=13">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n12/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Text2COM Silver Jubilee Edition (<a href="contents/articles/15-04.pdf">article</a>, <a href="contents/issue15.pdf#page=16">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n15/mode/1up">archive.org</a>) by <a href="https://twitter.com/@therealsaumil">Saumil Shah</a>, Udayan Shah</li>
<li>RISC-V Shellcode (<a href="contents/articles/15-05.pdf">article</a>, <a href="contents/issue15.pdf#page=17">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n16/mode/1up">archive.org</a>) by <a href="https://twitter.com/@DonAndrewBailey">Don A. Bailey</a></li>
<li>Gumball (<a href="contents/articles/15-06.pdf">article</a>, <a href="contents/issue15.pdf#page=25">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n24/mode/1up">archive.org</a>) by <a href="https://twitter.com/@a2_4am">4am</a>, <a href="https://twitter.com/@a2_qkumba">Peter Ferrie (qkumba, san inc)</a></li>
<li>In Which a PDF is a Git Repository Containing its own LATEX Source and a Copy of Itself (<a href="contents/articles/15-07.pdf">article</a>, <a href="contents/issue15.pdf#page=60">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n59/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ESultanik">Evan Sultanik</a></li>
<li>Zero Overhead Networking (<a href="contents/articles/15-08.pdf">article</a>, <a href="contents/issue15.pdf#page=66">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n65/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ErrataRob">Robert Graham</a></li>
<li>Detecting Emulation with MIPS16 Delay Slots (<a href="contents/articles/15-09.pdf">article</a>, <a href="contents/issue15.pdf#page=76">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n75/mode/1up">archive.org</a>) by <a href="https://twitter.com/@rmspeers">Ryan Speers</a>, <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a></li>
<li>Windows Kernel Race Condition Analysis While Accessing User-mode Data (<a href="contents/articles/15-10.pdf">article</a>, <a href="contents/issue15.pdf#page=82">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n81/mode/1up">archive.org</a>) by <a href="https://twitter.com/@bsdaemon">BSDaemon</a>, NadavCh</li>
<li>X86 is Turing-Complete without Data Fetches (<a href="contents/articles/15-11.pdf">article</a>, <a href="contents/issue15.pdf#page=87">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n86/mode/1up">archive.org</a>) by <a href="https://twitter.com/@xoreaxeaxeax">Chris Domas</a></li>
<li>Nail in the Java Key Store Coffin (<a href="contents/articles/15-12.pdf">article</a>, <a href="contents/issue15.pdf#page=89">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n88/mode/1up">archive.org</a>) by <a href="https://twitter.com/@floyd_ch">Tobias "Floyd" Ospelt</a></li>
<li>The Gamma Trick: Two PNGs for the price of one (<a href="contents/articles/15-13.pdf">article</a>, <a href="contents/issue15.pdf#page=97">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n96/mode/1up">archive.org</a>) by <a href="https://twitter.com/@marcan42">Hector Martin 'marcan'</a></li>
<li>Laphroaig's Home for Unwanted Polyglots and 0day (<a href="contents/articles/15-14.pdf">article</a>, <a href="contents/issue15.pdf#page=100">in issue</a>, <a href="https://archive.org/details/pocorgtfo15#page/n99/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue15.jpg width=200px alt="I SLIPPED A LITTLE BUT LAPHROAIG WAS THERE WITH A HELPING HAND, A NIFTY IDEA, AND TWO LITERS OF COFFEE"/> <img src=contents/issue15ilda.jpg width=200px alt="ILDA polyglot"/></p>
<h3 id="0x16">0x16</h3>
<p><a href="releases/pocorgtfo16.pdf">pocorgtfo16.pdf</a> <a href="https://www.virustotal.com/gui/file/10f0cb977f03824737a413079ded14b237b7ee155a5397e804586ab7151ed0a3/details"><code>10f0cb97..151ed0a3</code></a> polyglot: Bash (python, WebIDE), ZIP, PDF (<a href="contents/issue16.pdf">PDF-only</a>)</p>
<ol>
<li>Every Man His Own Cigar Lighter (<a href="contents/articles/16-01.pdf">article</a>, <a href="contents/issue16.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Sapere aude! Or, do you have a moment to talk about Enlightenment? (<a href="contents/articles/16-02.pdf">article</a>, <a href="contents/issue16.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n4/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Saving My '97 Chevy by Hacking It (<a href="contents/articles/16-03.pdf">article</a>, <a href="contents/issue16.pdf#page=7">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n6/mode/1up">archive.org</a>) by <a href="https://twitter.com/@brandonlwilson">Brandon L. Wilson</a></li>
<li>Bars of Brass or Wafer Thin Security? (<a href="contents/articles/16-04.pdf">article</a>, <a href="contents/issue16.pdf#page=17">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n16/mode/1up">archive.org</a>) by <a href="https://twitter.com/@deviantollam">Deviant Ollam</a></li>
<li>Fast Cash for Useless Bugs! (<a href="contents/articles/16-05.pdf">article</a>, <a href="contents/issue16.pdf#page=18">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n17/mode/1up">archive.org</a>) by <a href="https://twitter.com/@fuzzyaleks">EA</a></li>
<li>The Adventure of the Fragmented Chunks (<a href="contents/articles/16-06.pdf">article</a>, <a href="contents/issue16.pdf#page=21">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n20/mode/1up">archive.org</a>) by <a href="https://twitter.com/@Yannayli">Yannay Livneh</a></li>
<li>Extracting the Game Boy Advance BIOS ROM through the Execution of Unmapped Thumb Instructions (<a href="contents/articles/16-07.pdf">article</a>, <a href="contents/issue16.pdf#page=39">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n38/mode/1up">archive.org</a>) by <a href="https://twitter.com/@MerryMage">Maribel Hearn</a></li>
<li>Naming Network Interfaces (<a href="contents/articles/16-08.pdf">article</a>, <a href="contents/issue16.pdf#page=45">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n44/mode/1up">archive.org</a>) by <a href="https://twitter.com/@popitter_net">Cornelius Diekmann</a></li>
<li>Code Golf and Obfuscation with Genetic Algorithm Based Symbolic Regression (<a href="contents/articles/16-09.pdf">article</a>, <a href="contents/issue16.pdf#page=47">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n46/mode/1up">archive.org</a>) by JBS</li>
<li>Locating Return Addresses via High Entropy Stack Canaries (<a href="contents/articles/16-10.pdf">article</a>, <a href="contents/issue16.pdf#page=49">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n48/mode/1up">archive.org</a>) by <a href="https://twitter.com/@enferex">Matt Davis</a></li>
<li>Rescuing Orphans and their Parents with Rules of Thumb2 (<a href="contents/articles/16-11.pdf">article</a>, <a href="contents/issue16.pdf#page=52">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n51/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed KK4VCZ</a></li>
<li>This PDF is a Shell Script That Runs a Python Webserver That Serves a Scala-Based JavaScript Compiler With an HTML5 Hex Viewer; or, Reverse Engineer Your Own Damn Polyglot (<a href="contents/articles/16-12.pdf">article</a>, <a href="contents/issue16.pdf#page=58">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n57/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ESultanik">Evan Sultanik</a></li>
<li>Laphroaig’s Home for Unwanted Polyglots and 0day (<a href="contents/articles/16-13.pdf">article</a>, <a href="contents/issue16.pdf#page=59">in issue</a>, <a href="https://archive.org/details/pocorgtfo16#page/n58/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue16.jpg width=200px alt="PASTOR LAPHROAIG RACES THE RUNTIME RELINKER AND OTHER TRUE TALES OF CLEVERNESS AND CRAFT"/> <img src=contents/issue16server.png width=200px alt="Bash+python+Kaitai payload"/> <img src=contents/issue16server2.png width=200px alt="splash screen"/></p>
<h3 id="0x17">0x17</h3>
<p><a href="releases/pocorgtfo17.pdf">pocorgtfo17.pdf</a> <a href="https://www.virustotal.com/gui/file/40b8985521e671b59c305d2f5512f31b95f1e8c59b9c05ad2ca6413a99d59c97/details"><code>40b89855..99d59c97</code></a> polyglot: Apollo Guidance Computer, ZIP, PDF (<a href="contents/issue17.pdf">PDF-only</a>)</p>
<ol>
<li>I thought I turned it on, but I didn't. (<a href="contents/articles/17-01.pdf">article</a>, <a href="contents/issue17.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Constructing AES-CBC Shellcode (<a href="contents/articles/17-02.pdf">article</a>, <a href="contents/issue17.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n4/mode/1up">archive.org</a>) by Albert Spruyt, <a href="https://twitter.com/@tieknimmers">Niek Timmers</a></li>
<li>In the Company of Rogues: Pastor Laphroaig's Tall Tales of Science and of Fiction (<a href="contents/articles/17-03.pdf">article</a>, <a href="contents/issue17.pdf#page=9">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n8/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Sniffing BTLE with the Micro:Bit (<a href="contents/articles/17-04.pdf">article</a>, <a href="contents/issue17.pdf#page=13">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n12/mode/1up">archive.org</a>) by <a href="https://twitter.com/@virtualabs">Damien Cauquil</a></li>
<li>Up close and personal with Ethernet. (<a href="contents/articles/17-05.pdf">article</a>, <a href="contents/issue17.pdf#page=21">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n20/mode/1up">archive.org</a>) by <a href="https://twitter.com/@azonenberg">Andrew D. Zonenberg</a></li>
<li>The DIP Flip Whixr Trick: An Integrated Circuit That Functions in Either Orientation (<a href="contents/articles/17-06.pdf">article</a>, <a href="contents/issue17.pdf#page=32">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n31/mode/1up">archive.org</a>) by <a href="https://twitter.com/@joegrand">Joe "Kingpin" Grand</a></li>
<li>Injecting shared objects on FreeBSD with libhijack. (<a href="contents/articles/17-07.pdf">article</a>, <a href="contents/issue17.pdf#page=34">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n33/mode/1up">archive.org</a>) by <a href="https://twitter.com/@lattera">Shawn Webb</a></li>
<li>Murder on the USS Table (<a href="contents/articles/17-08.pdf">article</a>, <a href="contents/issue17.pdf#page=42">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n41/mode/1up">archive.org</a>) by <a href="https://twitter.com/@mainframed767">Soldier of Fortran</a></li>
<li>Protecting ELF Files by Infecting Them (<a href="contents/articles/17-09.pdf">article</a>, <a href="contents/issue17.pdf#page=56">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n55/mode/1up">archive.org</a>) by <a href="https://twitter.com/@lafp">Leandro "acidx" Pereira</a></li>
<li>Laphroaig's Home for Unwanted Polyglots and 0day (<a href="contents/articles/17-10.pdf">article</a>, <a href="contents/issue17.pdf#page=60">in issue</a>, <a href="https://archive.org/details/pocorgtfo17#page/n59/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<p><img src=contents/issue17.jpg width=200px alt="It's damned cold outside, so let's light ourselves a fire! warm ourselves with whiskey! and teach ourselves some tricks!"/> <img src=contents/issue17agc.png width=200px alt="AGC polyglot"/></p>
<h3 id="0x18">0x18</h3>
<p><a href="releases/pocorgtfo18.pdf">pocorgtfo18.pdf</a> <a href="https://www.virustotal.com/gui/file/191b636f80d0c74164ec9d9b3544decdaa2b7df5/details"><code>191b636f..aa2b7df5</code></a> polyglot: HTML* PDF* ZIP -- *<a href="https://www.virustotal.com/gui/file/f427637767d7aea764e0f2045ea4de86bbf5410a43535e70285add347047b283/details">SHA-1 collision</a> (<a href="contents/issue18.pdf">PDF-only</a>)</p>
<ol>
<li>I thought I turned it on, but I didn't. (<a href="contents/articles/18-01.pdf">article</a>, <a href="contents/issue18.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>An 8 Kilobyte Mode 7 Demo for the Apple II (<a href="contents/articles/18-02.pdf">article</a>, <a href="contents/issue18.pdf#page=4">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n3/mode/1up">archive.org</a>) by Vincent M. Weaver</li>
<li>Fun Memory Corruption Exploits for Kids with Scratch! (<a href="contents/articles/18-03.pdf">article</a>, <a href="contents/issue18.pdf#page=10">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n9/mode/1up">archive.org</a>) by <a href="https://twitter.com/@kevsheldrake">KevSheldrake</a></li>
<li>Concealing ZIP Files in NES Cartridges (<a href="contents/articles/18-04.pdf">article</a>, <a href="contents/issue18.pdf#page=17">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n16/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ViGreyTech">Vi Grey</a></li>
<li>House of Fun; or, Heap Exploitation against GlibC in 2018 (<a href="contents/articles/18-05.pdf">article</a>, <a href="contents/issue18.pdf#page=22">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n21/mode/1up">archive.org</a>) by <a href="https://twitter.com/@Yannayli">Yannay Livneh</a></li>
<li>RelroS: Read Only Relocations for Static ELF (<a href="contents/articles/18-06.pdf">article</a>, <a href="contents/issue18.pdf#page=37">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n36/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ryan_elfmaster">Ryan "ElfMaster" O'Neill</a></li>
<li>A Trivial Exploit for TetriNET; or, Update Player TranslateMessage to LevelShellcode. (<a href="contents/articles/18-07.pdf">article</a>, <a href="contents/issue18.pdf#page=48">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n47/mode/1up">archive.org</a>) by <a href="https://twitter.com/@opticaliqlusion">John Laky</a>, <a href="https://twitter.com/@KyleHanslovan">Kyle Hanslovan</a></li>
<li>A Guide to KLEE LLVM execution engine internals (<a href="contents/articles/18-08.pdf">article</a>, <a href="contents/issue18.pdf#page=51">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n50/mode/1up">archive.org</a>) by <a href="https://twitter.com/@jvanegue">Julien Vanegue</a></li>
<li>Memory Scrambling on Intel Sandy Bridge DDR3 (<a href="contents/articles/18-09.pdf">article</a>, <a href="contents/issue18.pdf#page=58">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n57/mode/1up">archive.org</a>) by Nico Heijningen</li>
<li>Easy SHA-1 Colliding PDFs with PDFLaTeX. (<a href="contents/articles/18-10.pdf">article</a>, <a href="contents/issue18.pdf#page=63">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n62/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>Bring out your dead! Bugs, that is. (<a href="contents/articles/18-11.pdf">article</a>, <a href="contents/issue18.pdf#page=64">in issue</a>, <a href="https://archive.org/details/pocorgtfo18#page/n63/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<p><a href="https://www.virustotal.com/gui/file/191b636f80d0c74164ec9d9b3544decdaa2b7df5/details"><img src=contents/issue18.png width=200px alt="Pastor Manul Laphroaig's Montessori Soldering School and Stack Smashing Academy for Youngsters Gifted and Not"/></a> <a href="https://www.virustotal.com/gui/file/f427637767d7aea764e0f2045ea4de86bbf5410a43535e70285add347047b283/details"><img src=contents/issue18alt.png width=200px alt="SHA-1 collision cover"/></a></p>
<h2 id="next">next...?</h2>
<h3 id="0x19">0x19</h3>
<p><a href="releases/pocorgtfo19.pdf">pocorgtfo19.pdf</a> <a href="https://www.virustotal.com/gui/file/891b6c4e0cc8f88af2b8c2467c1558b806d2f21be4c7518e7833c27885713464/details"><code>891b6c4e..85713464</code></a> polyglot: HTML PDF* ZIP -- *MD5 pileup: <a href="https://www.virustotal.com/gui/file/0c5e147a27ce71d2e2eb1e5618a08aa0f67d2dc8e9a9f1ed119de3938318dfc6/details">PE</a>/<a href="https://www.virustotal.com/gui/file/891b6c4e0cc8f88af2b8c2467c1558b806d2f21be4c7518e7833c27885713464/details">PDF</a>/<a href="https://www.virustotal.com/gui/file/76ecc052df4b264a3653822a902ef2db6c042807f12d498d8e7f4dd5ada1724f/details">PNG</a>/<a href="https://www.virustotal.com/gui/file/a324d093f178e54cf6d159a9a005204761ffa7b0cb539e328a8371388167cc70/details">MP4</a> (<a href="contents/issue19.pdf">PDF-only</a>)</p>
<ol>
<li>Let’s start a band together! (<a href="contents/articles/19-01.pdf">article</a>, <a href="contents/issue19.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Of Coal and Iron (<a href="contents/articles/19-02.pdf">article</a>, <a href="contents/issue19.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n4/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>On CSV Injection and RFC 5322 (<a href="contents/articles/19-03.pdf">article</a>, <a href="contents/issue19.pdf#page=11">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n10/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ChaosDatumz">Jeff Dileo</a></li>
<li>Undefining the ARM (<a href="contents/articles/19-04.pdf">article</a>, <a href="contents/issue19.pdf#page=17">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n16/mode/1up">archive.org</a>) by <a href="https://twitter.com/@XlogicX">Eric Davisson</a></li>
<li>An MD5 Pileup (<a href="contents/articles/19-05.pdf">article</a>, <a href="contents/issue19.pdf#page=21">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n20/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a>, <a href="https://twitter.com/realhashbreaker">Marc Stevens</a></li>
<li>Selectively Exceptional UTF8 (<a href="contents/articles/19-06.pdf">article</a>, <a href="contents/issue19.pdf#page=39">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n38/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a>, <a href="https://twitter.com/@rmspeers">Ryan Speers</a></li>
<li>Never Fret that Unobtainium (<a href="contents/articles/19-07.pdf">article</a>, <a href="contents/issue19.pdf#page=44">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n43/mode/1up">archive.org</a>) by Matthew Peters</li>
<li>Steganography in .ICO Files (<a href="contents/articles/19-08.pdf">article</a>, <a href="contents/issue19.pdf#page=47">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n46/mode/1up">archive.org</a>) by Rodger Allen</li>
<li>The Pages of PoC||GTFO (<a href="contents/articles/19-09.pdf">article</a>, <a href="contents/issue19.pdf#page=53">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n52/mode/1up">archive.org</a>) by <a href="https://twitter.com/@evm_sec">Dr. evm</a> and the MMX Show</li>
<li>Vector Multiplication as an IPC Primitive (<a href="contents/articles/19-10.pdf">article</a>, <a href="contents/issue19.pdf#page=55">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n54/mode/1up">archive.org</a>) by Lorenzo Benelli</li>
<li>Camelus Documentum: A PDF with Two Humps (<a href="contents/articles/19-11.pdf">article</a>, <a href="contents/issue19.pdf#page=60">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n59/mode/1up">archive.org</a>) by <a href="https://github.com/Drup">Gabriel ‘Drup’ Radanne</a></li>
<li>Inside the Emulator of Windows Defender (<a href="contents/articles/19-12.pdf">article</a>, <a href="contents/issue19.pdf#page=64">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n63/mode/1up">archive.org</a>) by <a href="https://twitter.com/0xalexei">Alexei Bulazel</a></li>
<li>What clever things have you learned lately? (<a href="contents/articles/19-13.pdf">article</a>, <a href="contents/issue19.pdf#page=80">in issue</a>, <a href="https://archive.org/details/pocorgtfo19#page/n79/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<p><a href="https://www.virustotal.com/gui/file/891b6c4e0cc8f88af2b8c2467c1558b806d2f21be4c7518e7833c27885713464"><img src=contents/issue19.png width=200px alt="This lonely old piano has a few more tunes! And so do you! And so do I!"/></a> <a href="https://www.virustotal.com/gui/file/76ecc052df4b264a3653822a902ef2db6c042807f12d498d8e7f4dd5ada1724f"><img src=contents/issue19png.png width=200px alt="PNG colliding image (a pileup diagram)"/></a> <a href="https://www.virustotal.com/gui/file/a324d093f178e54cf6d159a9a005204761ffa7b0cb539e328a8371388167cc70"><img src=contents/issue19mp4.png width=200px alt="MP4 colliding video (a car near-collision)"/></a> <a href="https://www.virustotal.com/gui/file/0c5e147a27ce71d2e2eb1e5618a08aa0f67d2dc8e9a9f1ed119de3938318dfc6"><img src=contents/issue19pe.png width=200px alt="PE colliding executable (a PDF viewer)"/></a> <img src=contents/issue19html.png width=200px alt="HTML payload to switch prefixes"/></p>
<p>Behind the scenes <a href="writeups/19/README.md">writeup</a></p>
<h3 id="0x20">0x20</h3>
<p><a href="releases/pocorgtfo20.pdf">pocorgtfo20.pdf</a> <a href="https://www.virustotal.com/gui/file/4aeb48b545a6f0ba5d945c216412724dcea54b8c7d2e39049ef5797bb2fcd25f/details"><code>4aeb48b5..b2fcd25f</code></a> polyglot: PDF, ZIP -- Signed (<a href="contents/issue20.pdf">PDF-only</a>)</p>
<ol>
<li>Let's start a band together! (<a href="contents/articles/20-01.pdf">article</a>, <a href="contents/issue20.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Let's Build a Geniza from the world's Flash Memory! (<a href="contents/articles/20-02.pdf">article</a>, <a href="contents/issue20.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n4/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>NFC Exploitation with the RF430RFL152 and 'TAL152 (<a href="contents/articles/20-03.pdf">article</a>, <a href="contents/issue20.pdf#page=7">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n6/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a>, <a href="https://twitter.com/@cryptax">Axelle Apvrille</a></li>
<li>Turtles All the Way Down (<a href="contents/articles/20-04.pdf">article</a>, <a href="contents/issue20.pdf#page=14">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n13/mode/1up">archive.org</a>) by <a href="https://twitter.com/@option8">Charles Mangin</a></li>
<li>An Arbitrary Read Exploit for Ryzenfall (<a href="contents/articles/20-05.pdf">article</a>, <a href="contents/issue20.pdf#page=25">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n24/mode/1up">archive.org</a>) by <a href="https://twitter.com/@depletionmode">David Kaplan</a></li>
<li>A Short History of TI Calculator Hacks (<a href="contents/articles/20-06.pdf">article</a>, <a href="contents/issue20.pdf#page=32">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n31/mode/1up">archive.org</a>) by <a href="https://twitter.com/@brandonlwilson">Brandon L. Wilson</a></li>
<li>Modern ELF Infection Techniques of SCOP Binaries (<a href="contents/articles/20-07.pdf">article</a>, <a href="contents/issue20.pdf#page=45">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n44/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ryan_elfmaster">Ryan "ElfMaster" O'Neill</a></li>
<li>Encryption is Not Integrity! (<a href="contents/articles/20-08.pdf">article</a>, <a href="contents/issue20.pdf#page=62">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n61/mode/1up">archive.org</a>) by <a href="https://twitter.com/@popitter_net">Cornelius Diekmann</a></li>
<li>RSA GTFO (<a href="contents/articles/20-09.pdf">article</a>, <a href="contents/issue20.pdf#page=68">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n67/mode/1up">archive.org</a>) by <a href="https://twitter.com/@@blperez_">Ben Perez</a></li>
<li>A Code Pirate’s Cutlass: Recovering Software Architecture from Embedded Binaries (<a href="contents/articles/20-10.pdf">article</a>, <a href="contents/issue20.pdf#page=73">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n72/mode/1up">archive.org</a>) by <a href="https://twitter.com/@evm_sec">EVM</a></li>
<li>What clever things have you learned lately? (<a href="contents/articles/20-11.pdf">article</a>, <a href="contents/issue20.pdf#page=80">in issue</a>, <a href="https://archive.org/details/pocorgtfo20#page/n79/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<img src=contents/issue20.png width=200px alt="Grab gifts from the genizah, reading every last page! And write in their margins! And give them all again!"/>
<div class="sourceCode" id="cb3"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb3-1" data-line-number="1">$ <span class="ex">pdfsig</span> pocorgtfo20.pdf</a>
<a class="sourceLine" id="cb3-2" data-line-number="2"><span class="ex">Digital</span> Signature Info of: pocorgtfo20.pdf</a>
<a class="sourceLine" id="cb3-3" data-line-number="3"><span class="ex">Signature</span> <span class="co">#1:</span></a>
<a class="sourceLine" id="cb3-4" data-line-number="4"> <span class="ex">-</span> Signer Certificate Common Name: TI-83 Plus Silver Edition OS Signing Key</a>
<a class="sourceLine" id="cb3-5" data-line-number="5"> <span class="ex">-</span> Signer full Distinguished Name: CN=TI-83 Plus Silver Edition OS Signing Key</a>
<a class="sourceLine" id="cb3-6" data-line-number="6"> <span class="ex">-</span> Signing Time: Jan 21 2020 19:28:53</a>
<a class="sourceLine" id="cb3-7" data-line-number="7"> <span class="ex">-</span> Signing Hash Algorithm: SHA1</a>
<a class="sourceLine" id="cb3-8" data-line-number="8"> <span class="ex">-</span> Signature Type: adbe.pkcs7.sha1</a>
<a class="sourceLine" id="cb3-9" data-line-number="9"> <span class="ex">-</span> Signed Ranges: [0 - 39897127], [39898675 - 39903679]</a>
<a class="sourceLine" id="cb3-10" data-line-number="10"> <span class="ex">-</span> Total document signed</a>
<a class="sourceLine" id="cb3-11" data-line-number="11"> <span class="ex">-</span> Signature Validation: Signature is Valid.</a>
<a class="sourceLine" id="cb3-12" data-line-number="12"> <span class="ex">-</span> Certificate Validation: Certificate issuer isn<span class="st">'t Trusted.</span></a></code></pre></div>
<h3 id="0x21">0x21</h3>
<p><a href="releases/pocorgtfo21.pdf">pocorgtfo21.pdf</a> <a href="https://www.virustotal.com/gui/file/da91fb4aff2711e980289e6b13ce16c4e06c6ab23d2a9c2f4fbdb327e87684ae/details"><code>da91fb4a..e87684ae</code></a> polyglot: PCAPNG, PDF, ZIP -- (<a href="contents/issue21.pdf">PDF-only</a>)</p>
<ol>
<li>Don’t give up on your library card! (<a href="contents/articles/21-01.pdf">article</a>, <a href="contents/issue21.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>A Tale of Glavlit and Samizdat (<a href="contents/articles/21-02.pdf">article</a>, <a href="contents/issue21.pdf#page=6">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n5/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>Spoofing IP with IPIP (<a href="contents/articles/21-03.pdf">article</a>, <a href="contents/issue21.pdf#page=7">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n6/mode/1up">archive.org</a>) by <a href="https://twitter.com/@Yannayli">Yannay Livneh</a></li>
<li>Anti-debugging tips and tricks for Cortex-M microcontrollers (<a href="contents/articles/21-04.pdf">article</a>, <a href="contents/issue21.pdf#page=8">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n7/mode/1up">archive.org</a>) by Balda</li>
<li>Symgrate: A Web API for Thumb2 Symbol Recovery (<a href="contents/articles/21-05.pdf">article</a>, <a href="contents/issue21.pdf#page=11">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n10/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a>, <a href="https://twitter.com/@evm_sec">EVM</a></li>
<li>Reversing the Fairplay 710 Baseball Scoreboard (<a href="contents/articles/21-06.pdf">article</a>, <a href="contents/issue21.pdf#page=17">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n16/mode/1up">archive.org</a>) by <a href="https://twitter.com/@evm_sec">EVM</a></li>
<li>A Tourist's Guide to Altera NIOS (<a href="contents/articles/21-07.pdf">article</a>, <a href="contents/issue21.pdf#page=24">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n23/mode/1up">archive.org</a>) by Christopher Hewitt</li>
<li>An Electromechanical Telephone Exchange (<a href="contents/articles/21-08.pdf">article</a>, <a href="contents/issue21.pdf#page=31">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n30/mode/1up">archive.org</a>) by Anonymous</li>
<li>An ELF Palindrome for AMD64 (<a href="contents/articles/21-09.pdf">article</a>, <a href="contents/issue21.pdf#page=42">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n41/mode/1up">archive.org</a>) by <a href="https://twitter.com/netspooky">Netspooky</a></li>
<li>BootNoodle: A Palindromic Bootloader for BGGP (<a href="contents/articles/21-10.pdf">article</a>, <a href="contents/issue21.pdf#page=50">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n49/mode/1up">archive.org</a>) by <a href="https://github.com/xcellerator">Harvey Phillips</a></li>
<li>Windrose Fingerprinting of Code Architecture (<a href="contents/articles/21-11.pdf">article</a>, <a href="contents/issue21.pdf#page=55">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n54/mode/1up">archive.org</a>) by <a href="https://twitter.com/@evm_sec">EVM</a></li>
<li>NSA's Backdoor of the PX1000-Cr (<a href="contents/articles/21-12.pdf">article</a>, <a href="contents/issue21.pdf#page=59">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n58/mode/1up">archive.org</a>) by <a href="https://github.com/stef">Stefan Marsiske</a></li>
<li>Solving the Load Address; or, Fixing Useless Firmware Disassembly (<a href="contents/articles/21-13.pdf">article</a>, <a href="contents/issue21.pdf#page=67">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n66/mode/1up">archive.org</a>) by <a href="https://twitter.com/@evm_sec">EVM</a></li>
<li>Counting words with a state machine. (<a href="contents/articles/21-14.pdf">article</a>, <a href="contents/issue21.pdf#page=71">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n70/mode/1up">archive.org</a>) by <a href="https://twitter.com/@ErrataRob">Robert Graham</a></li>
<li>Never say ‘no’ to adventures. (<a href="contents/articles/21-15.pdf">article</a>, <a href="contents/issue21.pdf#page=80">in issue</a>, <a href="https://archive.org/details/pocorgtfo21#page/n79/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<img src=contents/issue21.png width=200px alt="Notebook of Altera NIOS Disassembly, Routable IPIP Spoofing, PCAP-NG Polyglots, Weird Machinery, Code Golfing, and UHF-VHF TUNERS"/>
<div class="sourceCode" id="cb4"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb4-1" data-line-number="1"><span class="op">>>></span> <span class="ex">from</span> scapy.all import *</a>
<a class="sourceLine" id="cb4-2" data-line-number="2"><span class="op">>>></span> <span class="ex">pcap</span> = defrag(rdpcap(<span class="st">"pocorgtfo21.pdf"</span>))</a>
<a class="sourceLine" id="cb4-3" data-line-number="3"><span class="op">>>></span> <span class="kw">for</span> <span class="ex">packet</span> in pcap:</a>
<a class="sourceLine" id="cb4-4" data-line-number="4"><span class="ex">...</span> packet.show()</a>
<a class="sourceLine" id="cb4-5" data-line-number="5"><span class="ex">...</span></a>
<a class="sourceLine" id="cb4-6" data-line-number="6"><span class="ex">0000</span> Ether / IP / UDP / DNS Qry <span class="st">"b'a2862978690.com.'"</span></a>
<a class="sourceLine" id="cb4-7" data-line-number="7"><span class="ex">0000</span> Ether / IP / IP / IP / IP / IP / IP / IP / IP / IP / ... / 117.239.221.1 <span class="op">></span> 81.134.10.64 4 / Raw</a>
<a class="sourceLine" id="cb4-8" data-line-number="8"><span class="op">>>></span></a></code></pre></div>
<h3 id="0x22">0x22</h3>
<p><a href="releases/pocorgtfo22.pdf">pocorgtfo22.pdf</a> <a href="https://www.virustotal.com/gui/file/8fcda8f60dff2e127b1209fc7b8d8d0bfb9afdd0e703fc7b8cd63e710c720fb6/details"><code>8fcda8f6..0c720fb6</code></a> <strong>polyglot</strong>: ISO, ZIP, PDF <strong>mock</strong>: TAR, DICOM, XMS, PIF... -- (<a href="contents/issue22.pdf">PDF-only</a>)</p>
<ol>
<li>Need something good to read, my good neighbor? (<a href="contents/articles/22-01.pdf">article</a>, <a href="contents/issue22.pdf#page=3">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n2/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
<li>A Mask ROM Bit Extraction Tool (<a href="contents/articles/22-02.pdf">article</a>, <a href="contents/issue22.pdf#page=5">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n4/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a></li>
<li>Mitra and Mocky: Near-polyglots and Mocks (<a href="contents/articles/22-03.pdf">article</a>, <a href="contents/issue22.pdf#page=11">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n10/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>More Letters from Screwtape (<a href="contents/articles/22-04.pdf">article</a>, <a href="contents/issue22.pdf#page=17">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n16/mode/1up">archive.org</a>) by Wormwood</li>
<li>Inside out; or, Abusing archive file formats (<a href="contents/articles/22-05.pdf">article</a>, <a href="contents/issue22.pdf#page=19">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n18/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a></li>
<li>Mitigations are a reverser's friend; or, Abusing XFG (<a href="contents/articles/22-06.pdf">article</a>, <a href="contents/issue22.pdf#page=23">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n22/mode/1up">archive.org</a>) by <a href="https://twitter.com/@fuzzyaleks">Aleksandar Nikolic</a></li>
<li>Timecryption, OTP with Near-polyglots (<a href="contents/articles/22-07.pdf">article</a>, <a href="contents/issue22.pdf#page=30">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n29/mode/1up">archive.org</a>) by <a href="https://twitter.com/@angealbertini">Ange Albertini</a>, <a href="https://twitter.com/@kste_">Stefan Kölbl</a></li>
<li>The Электроника MK-51 is a Casio fx-2500 (<a href="contents/articles/22-08.pdf">article</a>, <a href="contents/issue22.pdf#page=32">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n31/mode/1up">archive.org</a>) by <a href="https://twitter.com/@travisgoodspeed">Travis Goodspeed</a></li>
<li>A Tourist's Guide to Reversing Renesas M16C and the R8C, too! (<a href="contents/articles/22-09.pdf">article</a>, <a href="contents/issue22.pdf#page=39">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n38/mode/1up">archive.org</a>) by <a href="https://github.com/silverchris">Christopher Hewitt</a>, <a href="https://iu2kin.it/">Niccolò Izzo</a></li>
<li>A Tourist's Guide to Эльбрус (<a href="contents/articles/22-10.pdf">article</a>, <a href="contents/issue22.pdf#page=46">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n45/mode/1up">archive.org</a>) by <a href="https://twitter.com/@evm_sec">EVM</a></li>
<li>Janus Polyglot (<a href="contents/articles/22-11.pdf">article</a>, <a href="contents/issue22.pdf#page=52">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n51/mode/1up">archive.org</a>) by <a href="https://xcellerator.github.io/">Harvey Phillips</a></li>
<li>Let's bide our time for a brand new adventure! (<a href="contents/articles/22-12.pdf">article</a>, <a href="contents/issue22.pdf#page=68">in issue</a>, <a href="https://archive.org/details/pocorgtfo22/page/n67/mode/1up">archive.org</a>) by Rt. Revd. Pastor Manul Laphroaig</li>
</ol>
<img src=contents/issue22.jpg width=200px alt="Through desert & wilderness, Laphroaig reaches great heights from the deepest of depths."/>
<div class="sourceCode" id="cb5"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb5-1" data-line-number="1">$ <span class="fu">file</span> pocorgtfo22.pdf</a>
<a class="sourceLine" id="cb5-2" data-line-number="2"><span class="ex">pocorgtfo22.pdf</span>: tar archive</a></code></pre></div>
<div class="sourceCode" id="cb6"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb6-1" data-line-number="1">$ <span class="fu">file</span> pocorgtfo22.pdf --keep-going --raw</a>
<a class="sourceLine" id="cb6-2" data-line-number="2"><span class="ex">pocorgtfo22.pdf</span>: tar archive</a>
<a class="sourceLine" id="cb6-3" data-line-number="3"><span class="ex">-</span> DR-DOS executable (COM)</a>
<a class="sourceLine" id="cb6-4" data-line-number="4"><span class="ex">-</span> Windows Program Information File for 145</a>
<a class="sourceLine" id="cb6-5" data-line-number="5"><span class="ex">-</span> MAR Area Detector Image,</a>
<a class="sourceLine" id="cb6-6" data-line-number="6"><span class="ex">-</span> Linux kernel x86 boot executable RW-rootFS,</a>
<a class="sourceLine" id="cb6-7" data-line-number="7"><span class="ex">-</span> XMS Adlib Module Composer: <span class="st">"%PDF-1.5"</span></a>
<a class="sourceLine" id="cb6-8" data-line-number="8"><span class="ex">-</span> Files-11 On-Disk Structure (ODS-0); <span class="ex">volume</span> label is [...]</a>
<a class="sourceLine" id="cb6-9" data-line-number="9"><span class="ex">-</span> DOS/MBR boot sector</a>
<a class="sourceLine" id="cb6-10" data-line-number="10"><span class="ex">-</span> Nintendo DS ROM image: <span class="st">"%PDF-1.5"</span> (\305\3, Rev.103)</a>
<a class="sourceLine" id="cb6-11" data-line-number="11"><span class="ex">-</span> Plot84 plotting file DOS/MBR boot sector</a>
<a class="sourceLine" id="cb6-12" data-line-number="12"><span class="ex">-</span> Kodak Photo CD image pack file , landscape mode</a>
<a class="sourceLine" id="cb6-13" data-line-number="13"><span class="ex">-</span> PDF document, version 1.5</a>
<a class="sourceLine" id="cb6-14" data-line-number="14"><span class="ex">-</span> Old EZD Electron Density Map</a>
<a class="sourceLine" id="cb6-15" data-line-number="15"><span class="ex">-</span> 4-channel Fasttracker module sound data Title: <span class="st">"%PDF-1.5"</span></a>
<a class="sourceLine" id="cb6-16" data-line-number="16"><span class="ex">-</span> Scream Tracker Sample adlib drum mono 16bit little endian</a>
<a class="sourceLine" id="cb6-17" data-line-number="17"><span class="ex">-</span> SoundFX Module sound file</a>
<a class="sourceLine" id="cb6-18" data-line-number="18"><span class="ex">-</span> Unix Fast File system [v1] (little-endian), <span class="fu">last</span> mounted on , [...]</a>
<a class="sourceLine" id="cb6-19" data-line-number="19"><span class="ex">-</span> DICOM medical imaging data</a>
<a class="sourceLine" id="cb6-20" data-line-number="20"><span class="ex">-</span> Linux Software RAID version 1.2 (0) <span class="va">UUID=</span> [<span class="ex">...</span>]</a>
<a class="sourceLine" id="cb6-21" data-line-number="21"><span class="ex">-</span> CCP4 Electron Density Map</a>
<a class="sourceLine" id="cb6-22" data-line-number="22"><span class="ex">-</span> VirtualBox Disk Image (%PDF-1.5), <span class="ex">5715999566798081280</span> bytes</a>
<a class="sourceLine" id="cb6-23" data-line-number="23"><span class="ex">-</span> IBM OS/400 save file data</a>
<a class="sourceLine" id="cb6-24" data-line-number="24"><span class="ex">-</span> data</a></code></pre></div>
<div class="sourceCode" id="cb7"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb7-1" data-line-number="1">$ <span class="ex">trid</span> pocorgtfo22.pdf</a>
<a class="sourceLine" id="cb7-2" data-line-number="2">[<span class="ex">...</span>]</a>
<a class="sourceLine" id="cb7-3" data-line-number="3"><span class="ex">Analyzing...</span></a>
<a class="sourceLine" id="cb7-4" data-line-number="4"></a>
<a class="sourceLine" id="cb7-5" data-line-number="5"><span class="ex">Collecting</span> data from file: pocorgtfo22.pdf</a>
<a class="sourceLine" id="cb7-6" data-line-number="6"> <span class="ex">34.8%</span> (.PIF) <span class="ex">Program</span> Information File (Windows) <span class="kw">(</span><span class="ex">7515/1/1</span><span class="kw">)</span></a>
<a class="sourceLine" id="cb7-7" data-line-number="7"> <span class="ex">23.1%</span> (.PDF) <span class="ex">Adobe</span> Portable Document Format (5000/1)</a>
<a class="sourceLine" id="cb7-8" data-line-number="8"> <span class="ex">20.8%</span> (.XMS) <span class="ex">XMS-Tracker</span> module (4509/1/1)</a>
<a class="sourceLine" id="cb7-9" data-line-number="9"> <span class="ex">11.7%</span> (.ISO) <span class="ex">ISO</span> 9660 CD image (2545/36/1)</a>
<a class="sourceLine" id="cb7-10" data-line-number="10"> <span class="ex">9.2%</span> (.DCM/DIC/DICOM) <span class="ex">DICOM</span> medical imaging bitmap (2004/1/1)</a></code></pre></div>
<h1 id="extras">Extras</h1>
<p><img src=extras/pdftagram.svg width=200px alt="PoC||GTFO's PDFtagram"></img> PoC||GTFO's PDFtagram <a href="extras/pdftagram.svg">png</a> <a href="extras/pdftagram.svg">svg</a></p>
<p><img src=extras/glyphsign.svg width=200px alt="Volume II's Glyph of the Dead"></img> Volume II's Glyph of the Dead <a href="extras/glyphsign.png">png</a> <a href="extras/glyphsign.svg">svg</a></p>
<p><img src=extras/crest.png width=200px alt="Pastor Manul Laphroaig's Montessori Soldering School and Stack Smashing Academy for Youngsters Gifted and Not"></img> School crest <a href="extras/crest.png">png</a> <a href="extras/crest.pdf">pdf</a></p>
<!-- pandoc -s --css=pandoc.css -f gfm -t html README.md -o README.htm -->
</body>
</html>