1.0 Intro ....................................................... tmp.0ut Staff +1.1 Dead Bytes .................................................... xcellerator +1.2 Implementing the PT_NOTE Infection Method In x64 Assembly ........... sblip +1.3 PT_NOTE To PT_LOAD ELF Injector In Rust ............................. d3npa +1.4 PT_NOTE Disinfector In Python .................................... manizzle +1.5 Fuzzing Radare2 For 0days In About 30 Lines Of Code ..... Architect, s01den +1.6 The Polymorphic False-Disassembly Technique ........................ s01den +1.7 Lin64.Eng3ls: Some Anti-RE Techniques In A Linux Virus ...... s01den, sblip +1.8 Linux.Midrashim.asm ................................................... TMZ +1.9 In-Memory LKM Loading ........................................... netspooky +1.10 Linux SHELF Loading .................................... ulexec, Anonymous_ +1.11 Return To Original Entry Point Despite PIE ......................... s01den +1.12 Writing Viruses In MIPS Assembly For Fun (And No Profit) ........... s01den +1.13 Interview: herm1t ........................................... tmp.0ut Staff +1.14 GONE IN 360 SECONDS - Linux/Retaliation ............................ qkumba +1.15 Linux.Nasty.asm ....................................................... TMZ +1.16 Linux.Precinct3.asm ............................................. netspooky +1.17 Underground Worlds ................................................. s01den+ +
+ >> For the txt version of this zine, visit https://tmpout.sh/1/txt/index.txt + (all .html files are renamed to .txt!) or download the zip of this zine + here: https://tmpout.sh/1/tmp.0ut.1.txt.zip+ +
Translations of tmp.0ut are being done by community members. To get involved, please join our Discord! + + * de/ + * es/ + * fr/ + * he/ + * it/ + * ja/ + * ru/ + * tr/ + * uk/+ ]]>
[00] Intro......................................................... tmp.0ut Staff +[01] Bare Metal Jacket................................................. Wintrmvte +[02] A short note on entrypoint obscuring in ELF binaries................. s01den +[03] Some ELF Parser Bugs.............................................. netspooky +[04] every Boring Problem Found in eBPF.............................. FridayOrtiz +[05] SHELF encounters of the elements kind................................ ulexec +[06] Preloading the linker for fun and profit.......................... elfmaster +[07] Lin64.M4rx: How to write a virtual machine in order to hide + your viruses and break your brain forever............................ s01den +[08] Lin64.M4rx.asm....................................................... s01den +[09] MARX OF THE BEAST - RE of Lin64.M4rx................................. qkumba +[10] A brief tour of VXnake by anonymous_............................. hexadecim8 +[11] Elf Binary Mangling Pt. 4: Limit Break............................ netspooky +[12] Bashing ELFs Like a Caveman............................................. RiS +[13] BGGP2021 Wrapup................................................... netspooky +[14] 84 byte aarch64 ELF............................................... netspooky +[15] ELF Resources and Links....................................... tmp.0ut Staff+ +
* tr/+ ]]>
Intro ~ t0 +Second Part To Hell Interview ~ t0 +UNIX VIRUSES 25th Anniversary ~ silvio +Hijacking __cxa_finalize to achieve entry point obscuring ~ vrzh +Linux.ElizaCanFix.asm ~ vrzh +Concealing Namespaces Within a File Descriptor ~ Fanda Uchytil +Dumping libc memory space to bypass ASLR ~ jonaslyk +ARM32 ELF Sizecoding ~ deater +A Silver Bullet To ELF Projects ~ echel0n +in-memory-only fd-less ELF execution (with Perl) ~ isra +isra_exec_elf64.pl ~ isra +u used 2 call me on my polymorphic shell phone ~ ic3qu33n +Weird ELFs, or a tale of breaking parsers once again ~ g1inko +inspect0rGadget.asm - x64 ROP Gadget Finder ~ s01den +Reverse Text Disinfector ~ qkumba +RE of Linux.Nasty.asm ~ qkumba +Linux.Anansi.c ~ sad0p +Linux.Slinger.asm ~ lvti +LKM Golf ~ rqu & netspooky +easylkb: Easy Linux Kernel Builder ~ ackmage & netspooky +23 Open Problems for Digital Self-Replicators ~ Second Part To Hell +Cramming a Tiny Program into a Tiny ELF File: A Case Study ~ lm978 +silent syscall hooking on arm64 linux by patching svc handler ~ wintermute +HVice - HyperVisor intrusion countermeasure electronics ~ wintermute +BGGP4 Recap ~ Binary Golf Association +LLMorpher ~ Second Part To Hell +QRLog Malware Analysis ~ mauro +HandJar.B ~ r3s1stanc3 +ClassWar ~ r3s1stanc3 +Linux.Linkin.pl: Another Perl x64 ELF virus ~ isra+ ]]>