Netspooky's Blog

Motivations & Goals This year’s BGGP challenge is “RECYCLE”.

I wanted to create the smallest Lua dissector for Wireshark for BGGP6!

Hello, I am netspooky!

https://binary.golf/6/

This is the cover design I made for Phrack 72!

Full Writeup Here: https://tmpout.sh/4/17.html Challenge: https://binary.golf/5 Repo: https://github.com/binarygolf/BGGP/tree/main/2024

Link: https://tmpout.sh/4/

See the full CFP here: https://phrack.org

Some of my art was included in the latest ANSI art pack from impure!

I had the honor of creating the cover for Phrack 71 which was physically released at Defcon 2024!

Slides: https://github.com/netspooky/golfclub/blob/master/uefi/bggp4/Binary-Golfing-UEFI-Applications.pdf Video: Coming Soon!

https://binary.golf/

Hello!

Github: https://github.com/netspooky Twitter: https://twitter.com/netspooky Mastodon: https://haunted.computer/@netspooky Twitch: https://twitch.tv/netspooky Youtube: https://youtube.com/c/netspooky Electronic Mail: u AT n0 DOT lol

wwwww

Repo link with example code: https://github.com/netspooky/golfclub/tree/master/uefi/bggp4 Hello hello, this writeup serves as an extremely late entry to the fourth annual Binary Golf Grand Prix.

Link: https://www.youtube.com/watch?

Link: https://tmpout.sh/3/

tmp.0ut Article: https://tmpout.sh/3/19.html

Collab with ackmage for tmp.0ut Volume 3.

Link: https://github.com/binarygolf/BGGP/tree/main/2023 tmp.0ut Article: https://tmpout.sh/3/25.html

TODO: Convert thread to markdown Original Thread: https://twitter.com/netspooky/status/1676000391866068994 CVEs that were revoked CVE-2023-36262 CVE-2023-34585

Link: https://www.youtube.com/watch?

https://binary.golf/

Repo: https://github.com/netspooky/protocols/tree/main/protocol_re Video: https://www.youtube.com/watch?

I refactored the original pdiff and added some features that I had been using in other scripts.

This is a dissector I wrote for the Apple Continuity protocol.

https://gitlab.com/wireshark/wireshark/-/wikis/home The wireshark wiki Additional oneliners here: https://github.com/netspooky/notes/blob/main/linux/oneliners.md#tshark-and-wireshark Install wireshark from source This is how you do it on Linux at least git

Junglist massive https://www.youtube.com/watch?

This is the repo for scare: https://github.com/netspooky/scare

This is a simple script that can be used to list all of the protocols in a pcap using tshark. #!

This is my minimal PS1 for Bash PS1="\\[\\e]0;\\u@\\h: \\w\\a\\]\\[\\e[38;5;123m\\]\\t\\[\\e[0m\\] \\[\\e[38;5;219m\\]\\w \\[\\e[0m\\]\\n▶ " This is the more full PS1 with time and the directory.

Link: https://github.com/netspooky/golfclub/blob/master/linux/aarch64/reverse_shell.md

References https://wiki.wireshark.org/Development/LibpcapFileFormat PCAP Format https://gitlab.com/wireshark/wireshark/-/wikis/Development/LibpcapFileFormat Newer docs on PCAP format https://pcapng.github.io/pcapng/draft-tuexen-opsawg-pcapng.html PCAPNG F…

Oneliner to clear the screen echo -ne "\x1b\x5b\x48\x1b\x5b\x32\x4a\x1b\x5b\x33\x4a" As base64 base64 -d <<< G1tIG1syShtbM0o= This can also clear the screen echo -ne "\x1bc" This clears the screen and puts the cursor at the top left base64 -d <<< G2N1…

https://github.com/netspooky/hexcalc

This is the repo for the xx file format: https://github.com/netspooky/xx

Question How do you verify if a binary is compiled with RELRO?

Link: https://github.com/binarygolf/BGGP/tree/main/2022

TODO Convert to markdown https://n0.lol/lemonade/ In late 2020, the radare2 suite of tools was forked into a new project called rizin.

Repo: https://github.com/tmpout/elfs

Repo: https://github.com/netspooky/yxd Updates: Added an API so you can use yxd from Python scripts

Vim Hex Editor Tutorial Open file, type :%!

https://forum.spacehey.com/topic?

https://tmpout.sh/bggp/3/

https://github.com/netspooky/uJunk/blob/main/art/asciifonts/ublk.flf

https://github.com/netspooky/uJunk/blob/main/art/asciifonts/kompaktblk.flf

https://forum.spacehey.com/topic?

RE Tips: Common String Representations Originally posted 2022-05-09 Strings are a good way of determining the layout of an unknown binary blob.

https://github.com/netspooky/protocols/tree/main/broadcast_brujeria