p.file
203 subscribers
52 photos
7 videos
170 files
304 links
Please read the pinned post.

The group has restriction for links due to spam bots, but you can send it anyway.

@perplex_files
Download Telegram
|Links about write-ups and articles|:

https://telegra.ph/Links-about-write-ups-and-articles-07-16

|Awesome-like links|:

https://telegra.ph/Awesome-like-links-09-12

|Math|:

https://www.ck12.org/

https://ocw.mit.edu/courses/mathematics/ (MIT free courses)

https://math.mit.edu/academics/undergrad/roadmaps.php (MIT roadmaps, divided by 1-2-3 tiers)

https://www.khanacademy.org/math (Khan Academy)

https://www.mathsisfun.com/calculus/index.html

https://tutorial.math.lamar.edu/ (Paul's Online Notes, very useful, many resources)

https://plus.maths.org/content/ (various articles regarding math)

http://passyworldofmathematics.com/

https://openstax.org/subjects/math

https://www.wolfram.com/mathematica/ (Calculus, Algebra, Applied Mathematics)

https://www.freemathhelp.com/

http://math.andrej.com/

https://courses.lumenlearning.com/physics/

https://www.cliffsnotes.com/study-guides

https://byjus.com/maths/calculus/#basics

http://institute.hirophysics.com/

https://www.emathzone.com/

|C++|:

https://www.tutorialspoint.com/cplusplus

https://www.cplusplus.com/doc/tutorial/

https://www.softwaretestinghelp.com/cpp-tutorials/ (includes tutorial with data structures)

https://www.geeksforgeeks.org/cpp-tutorial/

https://www.falstad.com/mathphysics.html (educational applets for math and physics)

|Cryptography|

https://crypto.stanford.edu/

https://www.tutorialspoint.com/cryptography/index.htm

|Integrated Circuits (IC) and Hardware|:

http://www.siliconpr0n.org/wiki/doku.php

https://www.sparkfun.com/engineering_essentials

http://www.righto.com/?m=1

https://apachepersonal.miun.se/~gorthu/

https://www.cl.cam.ac.uk/~sps32/

https://perso.telecom-paristech.fr/pacalet/HWSec/

https://www.electronics-tutorials.ws/sitemap

http://cpuville.com/Educational/Educational-home.html

http://hwsecuritybook.org/recommended-reading-materials/

https://www.electronicshub.org/tutorials/

http://users.ece.utexas.edu/~valvano/

https://www.fpga4fun.com/

https://github.com/KarenWest/hardwareSecurity

|Resources|:

https://www.computer-pdf.com/

https://opensecuritytraining.info/IntroductionToReverseEngineering.html

http://index-of.es/EBooks/

https://github.com/EbookFoundation/free-programming-books

https://b-ok.lat/

https://pdfroom.com/

Vim:

https://vim.rtorr.com/

https://vimhelp.org/

prog:

https://danluu.com/programming-blogs/
👍1
Interesting article of Format String exploitation. Since the printf uses a direct address from stack, we can manipulate that string to show whatever we want, but we can also force the function to access a memory location (in this case she used %n arg) and overwrite the return pointer address with the address of our shellcode.

https://osandamalith.com/2018/02/01/exploiting-format-strings-in-windows/
The Shellcoders Handbook.pdf
8.7 MB
Topics: Exploitation and reverse engineering. #book #exploit #reversing

Summary: 27 Chapters, 745 pages.
Year: 2007

This ebook shows you how exploits work with examples, demonstrating many techniques to abuse a vulnerability or bypass mitigations around known Operating Systems.
👍1
Topics: exploitation bypasses #exploit #reversing

This article shows some common bypasses for Stack Cookies, SAFESEH and SEHOP, DEP and ASLR. In order to bypass stack cookies, you need to exploit SEH or overwrite some pointer controlled by you that is called before the cookie verification function (like a pointer to a object), you can guess the cookie value too, but it is not common. For SAFESEH, you can use addresses outside the modules compiled with SEH, or search for modules without the SAFESEH flag. For SEHOP, you need to make a fake SEH (see https://t.me/p_file/10). For DEP, you use techniques like JOP and ROP to call Windows API and allocate memory or set memory as writable, you can also search in memory for your data, it may be located on a heap or a space with execute permission.
Lastly, you can partially overwrite the return pointer to bypass ASLR, or search for modules without ASLR flags.

https://www.corelan.be/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/
Topics: Programming, C++ #programming #cpp

The C++ Tutorial, this guide provides you the C++ concepts with advices and good practices.

https://www.learncpp.com/
Topics: Programming and DevOps. #programming #roadmap

An useful roadmap of the concepts you need to know to become a DevOps.

https://www.github.com/kamranahmedse/developer-roadmap/tree/master/img%2Fdevops.png
p.file
A brief video about static analysis, besides file command, he used ldd to list requiring libraries for that executable. He found out main function using the "entry" pointer, which calls main and its arguments, but using static analysis he couldn't find external…
Topics: Reverse Engineering, Static Analysis #reversing

Since static analysis is often complicated in middle or bigger sized programs, it's important to exclude the standard functions of the scope of analysis, FLIRT is a solution made by Hex Rays in order to identify these standard functions and libraries used by an executable, this way the static process becomes easier and faster.

https://hex-rays.com/products/ida/tech/flirt/in_depth/
resolver algoritmo roadmap.png
445.5 KB
Topics: Programming, algorithms. #programming #roadmap

Roadmap about Algorithm Problem Solving, useful for programming and competitive programming.

Got from: https://t.me/chartsdobilly/672
Topics: Computer Architecture, RISC vs CISC. #comp_arch

The differences between RISC and CISC architecture. While CISC use more cycles per instruction, RISC does the opposite, using less cycles per instruction, this can be seen with an example in the article. Although RISC needs more RAM to work, it has more performance, since uses less cycles per instruction and programmers can reuse the values of the last instruction (which couldn't be done in CISC, because the instruction erases the data stored in the registers after using it).

https://cs.stanford.edu/people/eroberts/courses/soco/projects/risc/risccisc/
Topics: Integrated Circuits (IC) Reverse Engineering. #reversing #comp_arch #ic

This is a wiki aimed to IC Reverse Engineering, providing a good approach of how ICs are built and how to reverse them.

http://www.siliconpr0n.org/wiki/doku.php
Topics: Memory Mapped I/O and Isolated I/O. #comp_arch

This article explains the differences between Memory Mapped I/O and Isolated I/O (or Port Mapped I/O). Basically, Isolated I/O provides two buses (Data bus and Address bus) and isolated space for both memory and the IO, they are accessed through specific instructions (eg OUT and IN instructions), the control line indicate which address space the CPU will access. In Memory Mapped I/O, the memory is shared with the I/O and can be used with the common memory instructions (eg MOV), although the memory has less space, this is not a big problem anymore, since the actual CPUs are at least 32-bit.

https://www.geeksforgeeks.org/memory-mapped-i-o-and-isolated-i-o/
Topics: OS, wiki. #os #comp_arch

This wiki provides information about the creation of Operating Systems.

https://wiki.osdev.org/Main_Page
Topics: GCC Inline Assembly, Assembly. #assembly #c #cpp

Just beautiful. This document is a guide of how to use inline assembly in GCC for ARM architecture, Although i don't know ARM, this doc is really useful, since the syntax GCC uses for inline assembly is complex.

https://www.ic.unicamp.br/~celio/mc404-s2-2015/docs/ARM-GCC-Inline-Assembler-Cookbook.pdf
Topics: GCC Inline Assembly, assembly, C. #assembly #cpp #c

This is the documentation for inline assembly with C or C++. Maybe i'm dumb for not understanding this syntax very well, but i really don't like it, besides that, it uses AT&T syntax. Anyway i have been looking this guide and it shows how to use inline assembly for basic instructions (no operands) and instructions which require operands (registers, immediate values, etc), you can see that in the sections Basic Arm and Extended Arm, respectively. The Constraints section will help you to understand the constraints used when you need to use operands, either input or output operands, or registers.

https://gcc.gnu.org/onlinedocs/gcc/Using-Assembly-Language-with-C.html