News for hackers. Stuff that matters.
Re:PoC||GTFO 0x16 [pdf] by default-kramer on Monday November 06, 2017 @04:58PM (#15639377)
> Technical Note: This file, pocorgtfo16.pdf, is a polyglot that is valid as a PDF document, a ZIP archive, and a Bash script that runs a Python webserver which hosts Kaitai Struct’s WebIDE which, allowing you to view the file’s own annotated bytes. Ain’t that nifty?

Is this true or a joke?

Re:PoC||GTFO 0x16 [pdf] by aestetix on Monday November 06, 2017 @05:22PM (#15639525)
Confirmed all three work. This issue is absolutely awesome.
Re:PoC||GTFO 0x16 [pdf] by mmjaa on Tuesday November 07, 2017 @03:23AM (#15641763)
The polyglot'al nature of PoC||GTFO is one of the very reasons to read this fine periodical, indeed. If you have not acquainted yourself with this aspect of literature, you most certainly have a wonderful adventure ahead of you - I suggest starting with issue #1, and moving forward with as much haste as can be mustered - put it all in a VM if you must - but for sure, inspecting the nature of polyglot publishing can lead to some wonderful, wonderful adventures ..
Re:PoC||GTFO 0x16 [pdf] by gonzoflip on Monday November 06, 2017 @05:09PM (#15639443)
I have not ran it yet, but historically these statements that they make are true.
Re:PoC||GTFO 0x16 [pdf] by ronjouch on Monday November 06, 2017 @05:12PM (#15639465)
It's true. Couldn't open as ZIP, though, GNOME's Archive Manager refuses it.
Re:PoC||GTFO 0x16 [pdf] by christoph on Monday November 06, 2017 @05:42PM (#15639649)
Same issue in OSX with a couple of Unzip tools. Old fashioned unzip in terminal worked perfectly though.
Re:PoC||GTFO 0x16 [pdf] by BrainInAJar on Monday November 06, 2017 @06:05PM (#15639764)
it's true, Ange is a wizard with the PDF format. Always weird crap in there
Re:PoC||GTFO 0x16 [pdf] by rmetzler on Tuesday November 07, 2017 @01:35AM (#15641450)
PoC||GTFO has released multiple issues with polyglot data files (mostly PDF and ZIP).

I just realized that - in order to circumvent the slow hosting server - the authors could have put it into a Docker image.