Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Binary art - funky PoCs & visual docs
Search
Ange Albertini
March 21, 2014
Technology
1
250
Binary art - funky PoCs & visual docs
Ange Albertini
March 21, 2014
Tweet
Share
More Decks by Ange Albertini
See All by Ange Albertini
Fearsome File Formats
ange
0
830
Overview of file type identifiers
ange
0
1.1k
A question of time
ange
0
1.1k
SBuD: InfoVis in InfoSec
ange
1
870
Generating Weird Files
ange
0
390
Technical challenges with file formats
ange
1
2.2k
Inside out - abusing archive file formats
ange
3
1.9k
Relations between archive formats
ange
0
2.2k
Beyond your studies v2
ange
2
990
Other Decks in Technology
See All in Technology
変化する開発、進化する体系時代に適応するソフトウェアエンジニアの知識と考え方(JaSST'25 Kansai)
mizunori
1
240
「Chatwork」の認証基盤の移行とログ活用によるプロダクト改善
kubell_hr
1
200
Lambda Web Adapterについて自分なりに理解してみた
smt7174
5
130
KubeCon + CloudNativeCon Japan 2025 Recap by CA
ponkio_o
PRO
0
150
GitHub Copilot の概要
tomokusaba
1
140
Amazon ECS & AWS Fargate 運用アーキテクチャ2025 / Amazon ECS and AWS Fargate Ops Architecture 2025
iselegant
17
5.8k
Fabric + Databricks 2025.6 の最新情報ピックアップ
ryomaru0825
1
150
フィンテック養成勉強会#54
finengine
0
180
AWS Summit Japan 2025 Community Stage - App workflow automation by AWS Step Functions
matsuihidetoshi
1
300
GeminiとNotebookLMによる金融実務の業務革新
abenben
0
240
Liquid Glass革新とSwiftUI/UIKit進化
fumiyasac0921
0
250
CI/CD/IaC 久々に0から環境を作ったらこうなりました
kaz29
1
190
Featured
See All Featured
Improving Core Web Vitals using Speculation Rules API
sergeychernyshev
17
950
The Web Performance Landscape in 2024 [PerfNow 2024]
tammyeverts
8
670
Agile that works and the tools we love
rasmusluckow
329
21k
The Art of Programming - Codeland 2020
erikaheidi
54
13k
Side Projects
sachag
455
42k
4 Signs Your Business is Dying
shpigford
184
22k
GraphQLとの向き合い方2022年版
quramy
49
14k
Product Roadmaps are Hard
iamctodd
PRO
54
11k
GitHub's CSS Performance
jonrohan
1031
460k
Optimizing for Happiness
mojombo
379
70k
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
48
2.8k
Performance Is Good for Brains [We Love Speed 2024]
tammyeverts
10
930
Transcript
Insomni’hack Geneva, Switzerland Ange Albertini 2014/03/21 funky PoCs & visual
docs
http:// corkami.com reverse engineering & visual documentations
boring? • file formats were supposed to be safe ◦
public specs ◦ open-source parsers • {weirdness} == {exploits} ? • software = parse, sanitize, recover
formats’ diversity 1/2 no header • COM (1982), MBR (1982)
magic signature • none: DOL (2001) • 2: TIFF, PE • 4: most standard • >4: PNG, PDF
start offset: • archives • range: PDF • mostly 0
special properties • deprecated header: PE • variable scanning direction: PDF • multi-versions: BMP • scanned chunk: JPEG • no official names: ZIP formats’ diversity 2/2
None
None
None
None
None
None
None
quine (relay)
None
polyglot
None
None
None
None
None
schizophren
None
misc
None
128, 217, 255, 217, 128, 38, 1, 38
None
None
None
crypto-tology: for anything crypto, ask @veorq (coz he’s awesome)
None
None
None
None
None
None
None
None
None
None
None
conclusion on binary formats
On binary formats • specs far from perfect • plenty
of fun • many consequences for infosec ◦ unforeseen attack channels
None
on visual docs http://pics.corkami.com http://prints.corkami.com
disclaimer no awards, no studies
None
None
None
None
goal create useful documentations based on reality
posters self-contained • immediate ‘big picture’ • no roleplay gamebook
use common sense and your own eyes
None
creativity? give yourself time! to fail!
None
None
None
None
None
define your audience lower and upper limits
“you should add …” see “setting a upper limit”
“too simple/simplified”? 1/ teach others, beginners, kids 2/ no more
excuses for not knowing
remove the obvious guessing doesn’t hurt
None
space optimal separator
left right
left right
left right
None
None
no unnecessary extras leave doors closed (to be opened somewhere
else)
requirements
a computer a transparent tablecloth
None
http://src.corkami.com
@jaredcatkinson’s prefetch101
conclusion on visual docs
On visual documentations • it doesn’t hurt • it’s not
so hard • requires time
Questions ? thank YOU ! @angealbertini ✉
[email protected]