no starch press

2013-08-05

1. Call to Worship (archive.org)
2. Ipod Antiforensics (archive.org) Travis Goodspeed
3. ELFs are dorky, elves are cool (archive.org) Sergey Bratus ~ Julian Bangert
4. The Pastor Manul Laphroaig's First Epistle to Hacker Preachers of All Hats, in the sincerest hope that we might shut up about hats, and get back to hacking. (archive.org)
5. Returning from ELF to Libc (archive.org) Rebecca "Bx" Shapiro
6. GTFO or #FAIL (archive.org) FX of Phenoelit
7. A Call for PoC (archive.org) Rt. Revd. Pastor Manul Laphroaig

release: c4d1d1091187b98a9bb28452bc6564a1e8c0ce10d20ba2b4a20f8b7798f7ab64 PDF

2013-10-06

1. Call to Worship (archive.org)
2. Four Lines of Javascript that Can't Possibly Work So why do they? (archive.org) Dan Kaminsky
3. Weird Machines from Serena Butler's TV Typewriter (archive.org) Travis Goodspeed
4. Making a Multi-Windows PE (archive.org) Ange Albertini
5. This ZIP is also a PDF (archive.org) Julia Wolf
6. Burning a Phone (archive.org) Josh "@m0nk" Thomas
7. A Sermon concerning the Divinity of Languages; or, Dijkstra considered Racist (archive.org) Rt. Rvd. Pastor Manul Laphroaig
8. A Call for PoC (archive.org) Rt. Revd. Preacherman Pastor Manul Laphroaig

release: a0f93a265d38257a06fd7fd210f73ea9c55a94ac1305c65c0510ada236c2cc88 ZIP, PDF

2013-12-28

1. Call to Worship (archive.org)
2. A Parable on the Importance of Tools; or, Build your own fucking birdfeeder. (archive.org) Rt. Rvd. Pastor Manul Laphroaig
3. A PGP Matryoshka Doll (archive.org) Brother Myron Aub
4. Reliable Code Execution on a Tamagotchi (archive.org) Natalie Silvanovich
5. Some Shellcode Tips for MSP430 and Related MCUs (archive.org) Travis Goodspeed
6. Calling putchar() from an ELF Weird Machine. (archive.org) Rebecca .Bx Shapiro
7. POKE of Death for the TRS 80 Model 100 (archive.org) Dave Weinstein
8. This OS is also a PDF (archive.org) Ange Albertini
9. A Vulnerability in Reduced Dakarand from PoC||GTFO 01:02 (archive.org) joernchen of Phenoelit
10. Juggernauty (archive.org) Ben Nagy
11. A Call for PoC (archive.org) Rt. Revd. Pastor Manul Laphroaig

release: f427e8d95c0ac15abe61d96fb75cfb55df1fd5ac9e713cf968f3602267ca155e MBR, ZIP, PDF

2014-03-02

1. Call to Worship (archive.org)
2. Greybeard's Luck (archive.org) Rt. Revd. Dr. Pastor Manul Laphroaig
3. This PDF is a JPEG; or, This Proof of Concept is a Picture of Cats (archive.org) Ange Albertini
4. NetWatch: System Management Mode is not just for Governments. (archive.org) Joshua Wise ~ Jacob Potter
5. An Advanced Mitigation Bypass for Packet-in-Packet; or, I'm burning 0day to use the phrase 'eighth of a nybble' in print. (archive.org) Travis Goodspeed
6. Prototyping an RDRAND Backdoor in Bochs (archive.org) Taylor Hornby
7. Patching Kosher Firmware for Nokia 2720 (archive.org) Assaf Nativ ~ Anonymous
8. Tetranglix: This Tetris is a Boot Sector (archive.org) Juhani Haverinen ~ Owen Shepherd ~ Shikhin Sethi
9. Defusing the Qualcomm Dragon (archive.org) Josh "m0nk" Thomas
10. Tales of Python's Encoding (archive.org) Frederik Braun
11. A Binary Magic Trick, Angecryption (archive.org) Ange Albertini ~ Jean-Philippe Aumasson
12. A Call for PoC (archive.org) Rt. Revd. Dr.Pastor Manul Laphroaig

release: 7094f5c6a3936e0d0b8f5e42b4d1940413f568e9a3617be0d7d6dc73cb3420e1 JPG, AES(PNG), ZIP, PDF*

2014-06-27

1. Call to Worship (archive.org)
2. First Epistle Concerning the Bountiful Seeds of 0Day (archive.org) Manul Laphroaig
3. This OS is a Boot Sector (archive.org) Shikhin Sethi
4. Prince of PoC; or, A 16-sector version of Prince of Persia for the Apple II. (archive.org) Peter Ferrie
5. A Quick Introduction to the New Facedancer Framework (archive.org) gil
6. Dumping Firmware from Tamagotchi Friends by Power Glitching (archive.org) Natalie Silvanovich
7. Lenticrypt: a Provably Plausibly Deniable Cryptosystem; or, This Picture of Cats is Also a Picture of Dogs (archive.org) Evan Sultanik
8. Hardening Pin Tumbler Locks against Myriad Attacks for Less Than a Sawbuck (archive.org) Deviant Ollam
9. Introduction to Reflux Decapsulation and Chip Photography (archive.org) Travis Goodspeed
10. Forget Not the Humble Timing Attack (archive.org) Colin O'Flynn
11. This Encrypted Volume is also a PDF; or, A Polyglot Trick for Bypassing TrueCrypt Volume Detection (archive.org) Ange Albertini
12. How to Manually Attach a File to a PDF (archive.org) Ange Albertini
13. Ode to ECB (archive.org) Ben Nagy
14. A Call for PoC (archive.org) Pastor Manul Laphroaig

release: 1d1567b8ac533cd142a8af560266ca60939fed02e3af1f6fd0816b26473afd01 TrueCrypt, ZIP, PDF

2014-08-10

1. Call to Worship (archive.org)
2. Stuff is broken, and only you know how (archive.org) Rvd. Dr. Manul Laphroaig
3. ECB as an Electronic Coloring Book (archive.org) Philippe Teuwen
4. An Easter Egg in PCI Express (archive.org) Jacob Torrey
5. A Flash PDF Polyglot (archive.org) Alex Inführ
6. These Philosophers Stuff on 512 Bytes; or, This Multiprocessing OS is a Boot Sector. (archive.org) Shikhin Sethi
7. A Breakout Board for Mini-PCIe; or, My Intel Galileo has less RAM than its Video Card! (archive.org) Joe FitzPatrick
8. Prototyping a generic x86 backdoor in Bochs; or, I'll see your RDRAND backdoor and raise you a covert channel! (archive.org) Matilda
9. From Protocol to PoC; or, Your Cisco blade is booting PoC||GTFO. (archive.org) Mik
10. i386 Shellcode for Lazy Neighbors; or, I am my own NOP Sled. (archive.org) Brainsmoke
11. Abusing JSONP with Rosetta Flash (archive.org) Michele Spagnuolo
12. A cryptographer and a binarista walk into a bar (archive.org) Ange Albertini ~ Maria Eichlseder
13. Ancestral Voices Or, a vision in a nightmare. (archive.org) Ben Nagy
14. A Call for PoC (archive.org) Pastor Manul Laphroaig

release: 9623609a9c0ecd95674e6da3de322baa141f5460cbcb93eeaade22eaf2c80640 ISO, SWF, ZIP, PDF*

2014-11-25

1. Sacrament of Communion with the Weird Machines (archive.org)
2. On Giving Thanks (archive.org) Pastor Manul Laphroaig
3. Gekko the Dolphin (archive.org) Fiora
4. This TAR archive is a PDF! (as well as a ZIP, but you are probably used to it by now) (archive.org) Ange Albertini
5. x86 Alchemy and Smuggling with Metalkit (archive.org) Micah Elizabeth Scott
6. Detecting MIPS Emulation (archive.org) Craig Heffner
7. More Cryptographic Coloring Books (archive.org) Philippe Teuwen
8. Introduction to Delayering and Reversing PCBs (archive.org) Joe Grand
9. Davinci Seal: Self-decrypting Executables (archive.org) Ryan elfmaster O'Neill
10. Observable Metrics (archive.org) Don A. Bailey ~ Tamara L. Rhoads ~ Jaime Cochran
11. A Call for PoC (archive.org) Pastor Manul Laphroaig

release: bf4d8846fbbb1071c7ec033004eda8ea8809676fe388db6faa020d781cb8ac26 TAR, ZIP, PDF

2015-03-19

1. With what shall we commune this evening? (archive.org)
2. AA55, the Magic Number (archive.org) Morgan Reece Phillips
3. Laser robots! (archive.org) Micah Elizabeth Scott
4. A Story of Settled Science (archive.org) Pastor Manul Laphroaig
5. Scapy is for Script Kiddies (archive.org) Eric Davisson
6. Funky Files, the Novella! (archive.org) Ange Albertini
7. Extending AES-NI Backdoors (archive.org) BSDaemon ~ Pirata
8. Innovations with Core Files (archive.org) Ryan elfmaster O'Neill
9. Bambaata on NASCAR (archive.org) Count Bambaata
10. Public Service Announcement (archive.org)
11. A Modern Cybercriminal (archive.org) Ben Nagy
12. Fast Cash for Bugs! (archive.org) Pastor Manul Laphroaig

release: 601534f4355c5e0eb292c6dd6edaf5055625d23e0de869f88193606415e6a35f BPG, HTML, ZIP, PDF

2015-06-20

1. Please stand; now, please be seated. (archive.org)
2. Witches, Warlocks, and Wassenaar; or, On the Internet, no one knows you are a witch. (archive.org)
3. Backdoors from Compiler Bugs (archive.org) Scott Bauer ~ Pascal Cuoq ~ John Regehr
4. A Protocol for Leibowitz (archive.org) Travis Goodspeed ~ Muur P.
5. Reprogramming a Mouse Jiggler (archive.org) Mickey Shkatov
6. Exploiting an Academic Hypervisor (archive.org) DJ Capelis ~ Daniel Bittman
7. Weaponized Polyglots as Browser Exploits (archive.org) Saumil Shah
8. On Error Resume Next for Unix (archive.org) Jeffball
9. Sing Along with Toni Brixton (archive.org) EVM ~ Tommy Brixton
10. Backdooring Nothing-Up-My-Sleeve Numbers (archive.org) Jean-Philippe Aumasson
11. Building a Wireless CTF (archive.org) Russell Handorf
12. Grammatically Correct Encryption (archive.org) Philippe Teuwen
13. Fast Cash for Cyber Munitions! (archive.org) Pastor Manul Laphroaig

release: 7a942c425f471f99d8cba8da117cc4a53cddb3551e4b16c8b9feae31b5654a33 Shell, ZIP, PDF

2015-09-14

1. Please stand; now, please be seated. (archive.org)
2. A Sermon on Newton and Turing (archive.org) Pastor Manul Laphroaig
3. Globalstar Satellite Communications (archive.org) Colby Moore
4. Keenly Spraying the Kernel Pools (archive.org) Peter Hlavaty of Keen Team
5. The Second Underhanded Crypto Contest (archive.org) Taylor Hornby
6. Cross VM Communications (archive.org) Sophia D'Antoine
7. Antivirus Tumors (archive.org) Eric Davisson
8. A Recipe for TCP/IPA (archive.org) Ron Fabela of Binary Brew Works
9. Mischief with AX.25 and APRS (archive.org) Vogelfrei
10. Napravi i ti Racunar „Galaksija" (archive.org) Voja Antonic
11. Root Rights are a Grrl's Best Friend! (archive.org) Fbz
12. What If You Could Listen to This PDF? (archive.org) Philippe Teuwen
13. Oona's Puzzle Corner! (archive.org) Oona Räisänen
14. Fast Cash for Cyber Munitions! (archive.org) Pastor Manul Laphroaig

release: 8ad70d4dd0c0f53e8c479d1d573e5a365ea673acafa9fd61fa5231e18502a6ad WavPack, ZIP, PDF

2016-01-16

1. Please stand; now, please be seated. (archive.org)
2. The Small Brown Dog and the Three Ghosts (archive.org) Pastor Manul Laphroaig
3. Exploiting Pokémon in a Super GameBoy (archive.org) Allan Cecil (dwangoAC) ~ Ilari Liusvaara (Ilari) ~ Jordan Potter (p4plus2)
4. Pokéglot! (archive.org) Allan Cecil (dwangoAC) ~ Ilari Liusvaara (Ilari) ~ Jordan Potter (p4plus2)
5. Cortex M0 Marionettes with SWD (archive.org) Micah Elizabeth Scott
6. Reversing a Pregnancy Test (archive.org) Amanda Wozniak
7. Apple II Copy Protections (archive.org) Peter Ferrie (qkumba, san inc)
8. Jailbreaking the TYT MD380 DMR Handheld (archive.org) Travis Goodspeed KK4VCZ ~ DD4CR ~ W7PCH
9. Tithe us your Alms of 0day! (archive.org) Pastor Manul Laphroaig

release: 1e350e30383fd332678654b6067fe4b6ea3d25d7f41a24a4c81fe913b295c9de LSMV, ZIP, PDF

2016-03-17

1. Please stand; now, please be seated. (archive.org) Pastor Manul Laphroaig
2. In Praise of Junk Hacking (archive.org) Pastor Manul Laphroaig
3. Emulating Star Wars on a Vector Display (archive.org) Trammell Hudson
4. One Boot Sector PoC Deserves Another (archive.org) Eric Davisson
5. Defeating E7 Protection on the Apple II Platform (archive.org) Peter Ferrie (qkumba, san inc)
6. Tourist's Phrasebook for the ARM Cortex M (archive.org) Travis Goodspeed ~ Ryan Speers
7. Ghetto CFI for X86 (archive.org) Jeffrey Crowell
8. Tourist's Guide to the MSP430 (archive.org) Ryan Speers ~ Travis Goodspeed
9. The Treachery of Files (archive.org) Evan Sultanik
10. Ben "bushing" Byer Memorial (archive.org) fail0verflow
11. Tithe us your Alms of 0day! (archive.org) Pastor Manul Laphroaig

release: 44d56d717c7b3baf7e11aa6624d5a80a90b132a519e61b9682a5f4a635b04c78 RUBY, HTML, ZIP, PDF

2016-06-18

1. Lisez moi! (archive.org) Rt. Revd. Pastor Manul Laphroaig
2. Surviving the Computation Bomb (archive.org) Rt. Revd. Pastor Manul Laphroaig
3. A Z-Wave Carol (archive.org) Chris Badenhop ~ Ben Ramsey
4. Comma Chameleon (archive.org) Krzysztof Kotowicz ~ Gábor Molnár
5. Putting the VM in M/o/Vfuscator (archive.org) Chris Domas
6. A JCL Adventure with Network Job Entries (archive.org) Soldier of Fortran
7. Shellcode Hash Collisions (archive.org) Mike Myers ~ Evan Sultanik
8. UMPOwn; A Symphony of Win10 Privilege (archive.org) Alex Ionescu
9. VIM Execution Engine (archive.org) Chris Domas
10. Doing Right by Neighbor O'Hara (archive.org) Andreas Bogk
11. Are Androids Polyglots? (archive.org) Philippe Teuwen
12. Tithe us your Alms of 0day! (archive.org) Rt. Revd. Pastor Manul Laphroaig

release: 441216e475e69564192f2121daa5dd465835072718366b75b08b9272ff9cf08b APK, ZIP, PDF

2016-10-04

1. Read me if you want to live! (archive.org) Rt. Revd. Pastor Manul Laphroaig
2. Reverse Engineering Star Raiders (archive.org) Lorenz Wiest
3. How Slow Can You Go? (archive.org) James Forshaw
4. The FaceWhisperer for USB Glitching; or, Reading RFID with ROP and a Wacom Tablet (archive.org) Micah Elizabeth Scott
5. Decoding AMBE+2 in MD380 Firmware in Linux (archive.org) Travis Goodspeed KK4VCZ
6. Password Weaknesses in Physical Security: Silliness in Three Acts (archive.org) Evan Sultanik
7. Reverse Engineering the LoRa PHY (archive.org) Matt Knight
8. Plumbing, not Popper; or, the Problem with STEP (archive.org) Rt. Revd. Pastor Manul Laphroaig
9. Where is ShimDBC.exe? (archive.org) Geoff Chappell
10. Post Scriptum: A Schizophrenic Ghost (archive.org) Evan Sultanik ~ Philippe Teuwen
11. Tithe us your Alms of 0day! (archive.org) Rt. Revd. Pastor Manul Laphroaig

release: c881c67557af52864654791a2a494f329a2fa397236bf0e961508f0769b0a3f5 PS, ZIP, PDF

2017-03-20

1. Let us share some water (archive.org) Rt. Revd. Pastor Manul Laphroaig
2. Z-Ring Phreaking from a Gameboy (archive.org) Vicki Pfau
3. Concerning Desert Studies, Cyberwar, and the Desert Power (archive.org) Naib Manul Laphroaig
4. Flush+Reload Side-Channel Attacks (archive.org) Taylor Hornby
5. Anti-Keylogging with Random Noise (archive.org) Mike Myers
6. Random NOPs on ARM (archive.org) Niek Timmers ~ Albert Spruyt
7. Routing Ethernet over GDB and SWD for Glitching (archive.org) Micah Elizabeth Scott
8. Control Panel Vulnerabilities (archive.org) Geoff Chappell
9. Postscript that shows its own MD5 (archive.org) Gregor "Greg" Kopf
10. A PDF That Shows Its Own MD5 (archive.org) Mako
11. This GIF shows its own MD5! (archive.org) Kristoffer "spq" Janke
12. This PDF is an NES ROM that prints its own MD5 hash! (archive.org) Evan Sultanik ~ Evan Teran
13. Tithe us your Alms of 0day! (archive.org) Rt. Revd. Pastor Manul Laphroaig

release: 5eaf00d25c14232555a51a50b126746c iNES*, ZIP, PDF* -- *MD5 hashquine

2017-06-17

1. There's no excuse for not knowing. (archive.org) Rt. Revd. Pastor Manul Laphroaig
2. Pier Solar and the Great Reverser (archive.org) Brandon L. Wilson
3. That car by the bear ain't got no fire; or, A Sermon on Alternators, Voltmeters, and Debugging (archive.org) Rt. Revd. Pastor Manul Laphroaig
4. Text2COM Silver Jubilee Edition (archive.org) Saumil Shah ~ Udayan Shah
5. RISC-V Shellcode (archive.org) Don A. Bailey
6. Gumball (archive.org) 4am ~ Peter Ferrie (qkumba, san inc)
7. In Which a PDF is a Git Repository Containing its own LATEX Source and a Copy of Itself (archive.org) Evan Sultanik
8. Zero Overhead Networking (archive.org) Robert Graham
9. Detecting Emulation with MIPS16 Delay Slots (archive.org) Ryan Speers ~ Travis Goodspeed
10. Windows Kernel Race Condition Analysis While Accessing User-mode Data (archive.org) BSDaemon ~ NadavCh
11. X86 is Turing-Complete without Data Fetches (archive.org) Chris Domas
12. Nail in the Java Key Store Coffin (archive.org) Tobias "Floyd" Ospelt
13. The Gamma Trick: Two PNGs for the price of one (archive.org) Hector Martin 'marcan'
14. Laphroaig's Home for Unwanted Polyglots and 0day (archive.org) Rt. Revd. Pastor Manul Laphroaig

release: c9b3f5026640efae12d75e62868931e2b2b5ad98a9b858408266ac5c35815bf4 ILDA, ZIP, PDF

2017-10-20

1. Every Man His Own Cigar Lighter (archive.org) Rt. Revd. Pastor Manul Laphroaig
2. Sapere aude! Or, do you have a moment to talk about Enlightenment? (archive.org) Rt. Revd. Pastor Manul Laphroaig
3. Saving My '97 Chevy by Hacking It (archive.org) Brandon L. Wilson
4. Bars of Brass or Wafer Thin Security? (archive.org) Deviant Ollam
5. Fast Cash for Useless Bugs! (archive.org) EA
6. The Adventure of the Fragmented Chunks (archive.org) Yannay Livneh
7. Extracting the Game Boy Advance BIOS ROM through the Execution of Unmapped Thumb Instructions (archive.org) Maribel Hearn
8. Naming Network Interfaces (archive.org) Cornelius Diekmann
9. Code Golf and Obfuscation with Genetic Algorithm Based Symbolic Regression (archive.org) JBS
10. Locating Return Addresses via High Entropy Stack Canaries (archive.org) Matt Davis
11. Rescuing Orphans and their Parents with Rules of Thumb2 (archive.org) Travis Goodspeed KK4VCZ
12. This PDF is a Shell Script That Runs a Python Webserver That Serves a Scala-Based JavaScript Compiler With an HTML5 Hex Viewer; or, Reverse Engineer Your Own Damn Polyglot (archive.org) Evan Sultanik
13. Laphroaig’s Home for Unwanted Polyglots and 0day (archive.org) Rt. Revd. Pastor Manul Laphroaig

release: 10f0cb977f03824737a413079ded14b237b7ee155a5397e804586ab7151ed0a3 Bash (python, WebIDE), ZIP, PDF

2017-12-30

1. I thought I turned it on, but I didn't. (archive.org) Rt. Revd. Pastor Manul Laphroaig
2. Constructing AES-CBC Shellcode (archive.org) Albert Spruyt ~ Niek Timmers
3. In the Company of Rogues: Pastor Laphroaig's Tall Tales of Science and of Fiction (archive.org) Rt. Revd. Pastor Manul Laphroaig
4. Sniffing BTLE with the Micro:Bit (archive.org) Damien Cauquil
5. Up close and personal with Ethernet. (archive.org) Andrew D. Zonenberg
6. The DIP Flip Whixr Trick: An Integrated Circuit That Functions in Either Orientation (archive.org) Joe "Kingpin" Grand
7. Injecting shared objects on FreeBSD with libhijack. (archive.org) Shawn Webb
8. Murder on the USS Table (archive.org) Soldier of Fortran
9. Protecting ELF Files by Infecting Them (archive.org) Leandro "acidx" Pereira
10. Laphroaig's Home for Unwanted Polyglots and 0day (archive.org) Rt. Revd. Pastor Manul Laphroaig

release: 40b8985521e671b59c305d2f5512f31b95f1e8c59b9c05ad2ca6413a99d59c97 Apollo Guidance Computer, ZIP, PDF

2018-06-26

1. I thought I turned it on, but I didn't. (archive.org) Rt. Revd. Pastor Manul Laphroaig
2. An 8 Kilobyte Mode 7 Demo for the Apple II (archive.org) Vincent M. Weaver
3. Fun Memory Corruption Exploits for Kids with Scratch! (archive.org) KevSheldrake
4. Concealing ZIP Files in NES Cartridges (archive.org) Vi Grey
5. House of Fun; or, Heap Exploitation against GlibC in 2018 (archive.org) Yannay Livneh
6. RelroS: Read Only Relocations for Static ELF (archive.org) Ryan "ElfMaster" O'Neill
7. A Trivial Exploit for TetriNET; or, Update Player TranslateMessage to LevelShellcode. (archive.org) John Laky, Kyle Hanslovan
8. A Guide to KLEE LLVM execution engine internals (archive.org) Julien Vanegue
9. Memory Scrambling on Intel Sandy Bridge DDR3 (archive.org) Nico Heijningen
10. Easy SHA-1 Colliding PDFs with PDFLaTeX. (archive.org) Ange Albertini
11. Bring out your dead! Bugs, that is. (archive.org) Rt. Revd. Pastor Manul Laphroaig

release: 191b636f80d0c74164ec9d9b3544decdaa2b7df5 HTML* PDF* ZIP -- *SHA-1 collision

crest png pdf