Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Binary art - funky PoCs & visual docs
Search
Ange Albertini
March 21, 2014
Technology
1
250
Binary art - funky PoCs & visual docs
Ange Albertini
March 21, 2014
Tweet
Share
More Decks by Ange Albertini
See All by Ange Albertini
Fearsome File Formats
ange
0
850
Overview of file type identifiers
ange
0
1.2k
A question of time
ange
0
1.1k
SBuD: InfoVis in InfoSec
ange
1
880
Generating Weird Files
ange
0
400
Technical challenges with file formats
ange
1
2.3k
Inside out - abusing archive file formats
ange
3
1.9k
Relations between archive formats
ange
0
2.2k
Beyond your studies v2
ange
2
1k
Other Decks in Technology
See All in Technology
Wasmで社内ツールを作って配布しよう
askua
0
150
TypeScript 上達の道
ysknsid25
23
4.8k
CSPヘッダー導入で実現するWebサイトの多層防御:今すぐ試せる設定例と運用知見
llamakko
1
270
大規模イベントを支える ABEMA の アーキテクチャ 変遷 2025
nagapad
5
530
増え続ける脆弱性に立ち向かう: 事前対策と優先度づけによる 持続可能な脆弱性管理 / Confronting the Rise of Vulnerabilities: Sustainable Management Through Proactive Measures and Prioritization
nttcom
1
220
ビジネス文書に特化した基盤モデル開発 / SaaSxML_Session_2
sansan_randd
0
150
Jitera Company Deck / JP
jitera
0
270
Kiro Hookを Terraformで検証
ao_inoue
0
140
LLMでAI-OCR、実際どうなの? / llm_ai_ocr_layerx_bet_ai_day_lt
sbrf248
0
210
なぜAI時代に 「イベント」を中心に考えるのか? / Why focus on "events" in the age of AI?
ytake
2
810
Amazon CloudWatchのメトリクスインターバルについて / Metrics interval matters
ymotongpoo
3
290
隙間時間で爆速開発! Claude Code × Vibe Coding で作るマニュアル自動生成サービス
akitomonam
2
200
Featured
See All Featured
Fight the Zombie Pattern Library - RWD Summit 2016
marcelosomers
234
17k
Understanding Cognitive Biases in Performance Measurement
bluesmoon
29
1.8k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
irinanazarova
8
860
Building Adaptive Systems
keathley
43
2.7k
Done Done
chrislema
184
16k
10 Git Anti Patterns You Should be Aware of
lemiorhan
PRO
656
60k
GraphQLとの向き合い方2022年版
quramy
49
14k
Bootstrapping a Software Product
garrettdimon
PRO
307
110k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
251
21k
A designer walks into a library…
pauljervisheath
207
24k
Improving Core Web Vitals using Speculation Rules API
sergeychernyshev
18
1k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
130
19k
Transcript
Insomni’hack Geneva, Switzerland Ange Albertini 2014/03/21 funky PoCs & visual
docs
http:// corkami.com reverse engineering & visual documentations
boring? • file formats were supposed to be safe ◦
public specs ◦ open-source parsers • {weirdness} == {exploits} ? • software = parse, sanitize, recover
formats’ diversity 1/2 no header • COM (1982), MBR (1982)
magic signature • none: DOL (2001) • 2: TIFF, PE • 4: most standard • >4: PNG, PDF
start offset: • archives • range: PDF • mostly 0
special properties • deprecated header: PE • variable scanning direction: PDF • multi-versions: BMP • scanned chunk: JPEG • no official names: ZIP formats’ diversity 2/2
None
None
None
None
None
None
None
quine (relay)
None
polyglot
None
None
None
None
None
schizophren
None
misc
None
128, 217, 255, 217, 128, 38, 1, 38
None
None
None
crypto-tology: for anything crypto, ask @veorq (coz he’s awesome)
None
None
None
None
None
None
None
None
None
None
None
conclusion on binary formats
On binary formats • specs far from perfect • plenty
of fun • many consequences for infosec ◦ unforeseen attack channels
None
on visual docs http://pics.corkami.com http://prints.corkami.com
disclaimer no awards, no studies
None
None
None
None
goal create useful documentations based on reality
posters self-contained • immediate ‘big picture’ • no roleplay gamebook
use common sense and your own eyes
None
creativity? give yourself time! to fail!
None
None
None
None
None
define your audience lower and upper limits
“you should add …” see “setting a upper limit”
“too simple/simplified”? 1/ teach others, beginners, kids 2/ no more
excuses for not knowing
remove the obvious guessing doesn’t hurt
None
space optimal separator
left right
left right
left right
None
None
no unnecessary extras leave doors closed (to be opened somewhere
else)
requirements
a computer a transparent tablecloth
None
http://src.corkami.com
@jaredcatkinson’s prefetch101
conclusion on visual docs
On visual documentations • it doesn’t hurt • it’s not
so hard • requires time
Questions ? thank YOU ! @angealbertini ✉
[email protected]