News for hackers. Stuff that matters.
Re:PoC||GTFO 0x16 [pdf] by d33 on Monday November 06, 2017 @04:01PM (#15638979)
I absolutely love the name.

Here's a Google Docs mirror, stripped down to 15MiB by removing hidden data:

https://drive.google.com/file/d/1DASC25AIlHPdzOYs2-eB3iVqfjN...

@edit re: why would anyone remove the hidden data?

It makes sense when you mostly want to read the thing and/or put it on an e-book reader. I'm not saying you HAVE to use this version, it's just that if you don't plan to look at the hidden data at first, I'd download it.

Re:PoC||GTFO 0x16 [pdf] by DyslexicAtheist on Monday November 06, 2017 @04:19PM (#15639097)
I don't understand why you would remove the hidden data. I understand that size is a concern for somebody who might just be interested in reading a pdf. But this is totally beside the point when studying weird machines. The whole idea is to poke around within the polygot. https://twitter.com/travisgoodspeed/status/92539248920853708...

> The latest (pocorgtfo16.pdf) is a polyglot that is valid as a PDF document, a ZIP archive, and a Bash script that runs a Python webserver which hosts Kaitai Struct’s WebIDE which, allows you to view the file’s own annotated bytes ...

Re:PoC||GTFO 0x16 [pdf] by comex on Monday November 06, 2017 @07:20PM (#15640162)
I mean, the polyglot thing was cool the first time, cool the second time, only slightly less so the third time, and and so on. But by the 16th time, when the PDF size has blown up to 48MB hosted on a slow server, and I’m watching a seemingly-endless spinner as my phone tries to download the whole thing over a poor LTE connection, just so it can throw away all the extra stuff and let me read the few KB worth of text in the issue… as best as I can, at least, when (as with all PDFs) their fixed line width is terribly suited for phone screens, and not all that well suited for any commonly used electronic display…

…well, I start to think that they could do a better job of showing off their savvy and old-school-ness by using a plain old HTML page. Maybe without any CSS - that seems like their style.

Re:PoC||GTFO 0x16 [pdf] by Cyph0n on Monday November 06, 2017 @11:00PM (#15640999)
Because some people just want to read the PDF?
Re:PoC||GTFO 0x16 [pdf] by DyslexicAtheist on Monday November 06, 2017 @04:49PM (#15639302)
if you reply to comments instead of editing your original post it makes it easier to read.

Large parts of this document size is due to other pdfs inside the top-level pdf, along with source code to PoC and exploits ... even whole sections of Kant's philosophy (not part of the top level pdf as html) (see my post on https://blog.valbonne-consulting.com/2017/11/01/what-kant-ca...) ... IMO what you removed was the envelope and threw the actual letter away.

Re:PoC||GTFO 0x16 [pdf] by ESultanik on Monday November 06, 2017 @05:17PM (#15639493)
As long as you keep the swear words and cat pictures intact, Travis says that this remains cannon.
Re:PoC||GTFO 0x16 [pdf] by steveklabnik on Monday November 06, 2017 @04:14PM (#15639064)
I am only vaguely aware of PoC||GTFO, but I thought I heard a story that some of these do have hidden data, but useful hidden data...