Binary Golfing UEFI Applications (REcon 2024) // My REcon talk about golfing self-replicating UEFI applications | |
BGGP5 Announcement // Announcing the 5th annual Binary Golf Grand Prix: Download | |
Welcome To My Cool New On-Line Web Site // Hello | |
Notes // Collection of notes, gists, threads, and other nuggets of info. | |
BGGP4: A 420 Byte Self-Replicating UEFI App For x64 // My BGGP4 entry | |
Bad Will b2b DJ XLAT - XMAS MEGA MIX // Stream from a holiday themed DJ set I did | |
easylkb: Easy Linux Kernel Builder // Build simple Debian based Linux images for testing and debugging. From tmp.0ut Vol 3 | |
LKM Golf // Creating tiny Linux Kernel Modules. From tmp.0ut Vol. 3 | |
tmp.0ut Volume 3 // tmp.0ut 3 has 30 papers about Linux malware, exploits, file format hacking, and more. Go read them!! | |
BGGP4 Results // Results from the 4th annual Binary Golf Grand Prix | |
Bad Will x DJ XLAT - Live 7/1/23 // Stream from a DJ set I did | |
BGGP4 Announcement // Announcing the 4th annual Binary Golf Grand Prix: Replicate | |
netspooky/pdiff2 // A revised version of the pdiff tool | |
Protocol RE Talk // Slides, notes, and resources from a talk I did on Protocol RE | |
acble - Apple Continuity Dissector // Wireshark dissector for the Apple BLE Advertising Beacon protocol used by Airpods and other Apple devices | |
steel injection jungle mix // DJ Set - Jungle | |
scare - Simple Configurable Assembly REPL and Emulator // A multi-arch assembly REPL and emulator for your command line. | |
208 byte aarch64 ELF reverse shell // Playing around with golfing aarch64 | |
netspooky/hexcalc // A small localhost hex calculator for your browser. | |
xx File Format // A file format for people who like to write in raw hex and draw pretty pictures. | |
BGGP3 Results // Results from the 3rd annual Binary Golf Grand Prix | |
BGGP3: LEMONADE.BIN // BGGP3 entry that DOSes Rizin and Radare2 with SOPHIE lyrics. | |
tmpout/elfs // A collection of interesting ELF files for inspiration and testing | |
yxd - Yuu's heX Dumper // A colorful hex dumping tool and library for your command line. Compatible with xxd! | |
Python3.7+ Multi-arch .pyc dropper // Using binary format handlers to run Python bytecode containing shellcode. | |
BGGP3 Announcement // Announcing the 3rd annual Binary Golf Grand Prix: Crash | |
kompaktblk Figlet Font // A small blocky figlet font. | |
uBLK Figlet Font // A blocky line based figlet font. Used on the BGGP3 announcement. | |
Wireshark is a lolbin // Tips n' Tricks for Wireshark, running arbitrary Lua scripts and DLLs | |
Packets Remystified: Broadcast BrujerÃa // Different things you can do with broadcast and multicast protocols + tips on protocol design. | |
84 byte aarch64 ELF // A tiny ELF for 64 bit ARM, diagram and source. From tmp.0ut Vol. 2 | |
BGGP2 Wrap Up // A write up about BGGP2: Polyglot. From tmp.0ut Vol 2 | |
Elf Binary Mangling Pt. 4: Limit Break // An 82 byte ET_EXEC ELF for x86_64. From tmp.0ut Vol 2 | |
Some ELF Parser Bugs // A whole bunch of bugs in different ELF parsers. From tmp.0ut Vol. 2 | |
An ELF Palindrome for AMD64 // From PoC||GTFO 21. An updated version of the writeup for my BGGP2020 entry. | |
netspooky/importsort // A python tool to group imports from multiple Windows Binaries. | |
BGB Emulator Link Cable Protocol Dissector // A dissector for the TCP based link cable protocol used in the BGB emulator. | |
koholint Figlet Font // Based on the Links Awakening Font | |
six-fo Figlet Font // Based on the Nintendo 64 DD BIOS Font | |
BGGP2 Results // Detailed analysis of entries for the 2021 Binary Golf Grand Prix. | |
ns.bggp2021.asm // PE/PDF/JS Polyglot for BGGP2. 487 bytes. | |
PGStats Dissector // A dissector for the internal postgres stats protocol. | |
ELF Binary Mangling Series // A blog series about making super small ELFs | |
netspooky/kimagure // Windows Shellcode and TinyPE generator tool. | |
BGGP2 Announcement // Announcing the 2nd annual Binary Golf Grand Prix: Polyglot | |
In-Memory Kernel Module Loading // tmp.0ut 1.9 - Article about loading LKMs in memory from a remote source. | |
Encoding Mutations: A Base64 Case Study // Writeup about (ab)using base64 implementations | |
Linux.Precinct3.asm // A Linux Based Data Destruction Tool for authorized users only. From tmp.0ut Vol 1 | |
BGGP1 Results Stream // Video covering the results from the first BGGP. | |
Palindromic 64 bit ELF binaries // Entry for BGGP2020. A small ELF that executes the same backwards as it does forwards. | |
Hella Booters Talk (Defcon 28 IoT Village) // I discuss IoT Botnets, the botnet scene, and IoT security. | |
netspooky/pdiff // A revised version of the pdiff tool | |
BGGP1 Announcement // Announcing the 1st annual Binary Golf Grand Prix: Palindrome | |
Adventures in Binary Golf (AirGap2020) // A talk about the theory and practice of binary golf. From AirGap2020. | |
Exotic Mirai Targets // Examination of Mirai binaries that target lesser known CPU architectures. | |
Modern PE Mangling // Creating tiny Windows executables for Windows 10. | |
Intro to Firmware Analysis (PancakesCon2020) // Notes from my talk about analyzing firmware at PancakesCon 2020. | |
Intro To Assembly Optimization // A stream covering the basics of doing x86 assembly optimization and binary golf. | |
threatland/TL-BOTS // A curated collection of source code for various botnets. | |
netspooky/inhale // A malware static analysis and classification tool. | |
threatland/TL-TROJAN // A curated collection of source code for various RATs, stealers and other trojans. | |
Cisco SMI: Still Tippin' // Discussion of the current state of attacks on switches using Cisco Smart Install. | |
threatland/TL-FRAUD // A curated collection of fraud related tools for research. | |
netspooky/jloot // JIRA Secure Attachment Looter. Dump files via IDOR in self-hosted JIRA. | |
jinn's Puzzle // A curious puzzle | |
Cheatsheets // Various cheatsheets |
Netspooky's Blog
[: :]