Difference between revisions of "PoC or GTFO"

Revision as of 22:25, 15 January 2015

Intro

This page assembles various matters related to the International Journal of Proof-of-Concept or Get The Fuck Out (PoC||GTFO or PoC or GTFO)

Mirror

My PoC mirror:

http://[2a02:af00:8:0:506f:43ba:4754:464f]

Or, if you're brave:

www-browser http://[2a02:af00:8:0:$(echo -n PoC║GTFO | recode utf8..CP437|xxd -p|sed 's/\(....\)/\1:/g;s/:$/]/')

You can find also lighter booklet versions ready for printing (and only printing!) at http://[2a02:af00:8:0:506f:43ba:4754:464f]/booklets

Articles

PoC||GTFO 0x05 3: ECB as an Electronic Coloring Book
- See also https://doegox.github.io/ElectronicColoringBook/
- See also my lightning talk @ hack.lu 2014
PoC||GTFO 0x06 7: More Cryptographic Coloring Books (original title was "Coloring Book Continued")
- Errata in 7.6 due to Frenglish to English translation ;-) : OFB and CTR are fine, only CBC & CFB can be compared to ECB

Misc from PoC||GTFO

PoC||GTFO 0x06

sed '4025,4048!d' pocorgtfo06.pdf

Spoilers for our Pictures of Cats

- 1.png is a PNG picture. It's a RGB picture, with a palette.
  The RGB values have been altered to display another picture via the palette.
  So just change offset 0x19 from 0x2 (RGB) to 0x3 (paletted)
  to enjoy the hidden picture.
  Extra efforts were taken to make the picture not trivial to extract,
  and remove as many artifacts as possible

  by Philippe Teuwen & Ange Albertini, original idea by Dominique Bongard

- 2.bmp is a BMP/PCM polyglot, which means it's a Bitmap picture,
  and a RAW audio polyglot that is directly playable
  (it's not really hidden, it's just happy co-existence).
  The audio, when viewed in spectrogram view, will show a familiar face.

  To enjoy it fully, just run
  sox -t raw -r 44100 -c 1 -e signed -b 32 2.bmp -n spectrogram
  (with optional -m -x 555 -y 512 -z 24 -Z -36, for better rendering)

  For more details, check http://wiki.yobi.be/wiki/BMP_PCM_polyglot,
  including a nifty RGB spectrogram via baudline.

  by Philippe Teuwen & Ange Albertini

For PNG in PNG, see PNG Merge
For BMP/PCM, see BMP PCM polyglot

PoC||GTFO 0x06 contains also a scan of a softstrip

I made a clean version here
which can be decoded with this code
@johnmaushammer posted the result together with his own code

Misc in the same PoC spirit

Ange had fun with Cameron recent declarations: https://imgur.com/xNUlzaE
That PNG contains a dummy chunk ("dumb" chunk actually) with 32b PCM so you can actually play the PNG and hear the content of dumb chunk (before hearing the white noise of the picture data itself)

wget -O - https://imgur.com/download/xNUlzaE | aplay -r 44100 -c1 -f S32_BE

@@ Line 47: / Line 47: @@
 </pre>
 For PNG in PNG, see [[PNG Merge]]
-<br>For PCM in BMP, see [[BMP PCM polyglot]]
+<br>For BMP/PCM, see [[BMP PCM polyglot]]
 PoC||GTFO 0x06 contains also a scan of a [https://en.wikipedia.org/wiki/Cauzin_Softstrip softstrip]
@@ Line 53: / Line 53: @@
 * which can be decoded with [http://pastebin.com/hU8mSj1D this code]
 * @johnmaushammer posted the result together with [http://pastebin.com/7GvSM8Q9 his own code]
+==Misc in the same PoC spirit==
+Ange had fun with Cameron recent declarations: https://imgur.com/xNUlzaE
+<br>That PNG contains a dummy chunk ("dumb" chunk actually) with 32b PCM so you can actually play the PNG and hear the content of dumb chunk (before hearing the white noise of the picture data itself)
+<source lang=bash>
+wget -O - https://imgur.com/download/xNUlzaE | aplay -r 44100 -c1 -f S32_BE
+</source>