Contents

Introduction

Laphroaig screams high five to the heavens!

14:02 Z-Ring Phreaking

by Vicki Pfau

14:03 Concerning Desert Studies

by Manul Laphroaig

14:04 Texting with Flush+Reload

by Taylor Hornby

14:05 Anti-Keylogging with Noise

by Mike Myers

14:06 Random NOPs in ARM

by Timmers and Spruyt

14:07 Ethernet Over GDB

by Micah Elizabeth Scott

14:08 Control Panel Vulnerabilities

by Geoff Chappell

14:09 Hash Function Pseudo-Fixpoints

by Greg Kopf

14:10 A PDF That Shows Its Own MD5

by Mako

14:11 A GIF shows its own MD5!

by Kristoffer Janke

14:12 MD5 NES Polyglot

by Evan Sultanik and Evan Teran

I slipped a little, but Laphroaig was there

15:02 Pier Solar and the Great Reverser

by Brandon L. Wilson

15:03 The Alternator Sermon

by Manul Laphroaig

15:04 Text2Com

by Saumil Shah

15:05 RISC-V Shellcode

by Don A. Bailey

15:06 Cracking Gumball

by 4am and Peter Ferrie

15:07 A PDF that is a Git Repo

by Evan Sultanik

15:08 Zero Overhead Networking

by Robert Graham

15:09 Detecting MIPS16 Emulation

by Goodspeed and Speers

15:10 Tracing Race Conditions

by BSDaemon and NadavCh

15:11 x86 without Data Fetches

by Chris Domas

15:12 Java Key Store’s Coffin

by Tobias “Floyd” Ospelt

15:13 The PNG Gamma Trick

by Hector Martin

Laphroaig Races the Runtime Relinker

16:02 Sapere aude!

by Manul Laphroaig

16:03 Emulating my Chevy

by Brandon L. Wilson

16:04 Wafer Thin Locks

by Deviant Ollam

16:05 Uses for Useless Bugs

by EA

16:06 Fragmented Chunks

by Yannay Livneh

16:07 Executing Unmapped Thumb

by Maribel Hearn

16:08 Naming Network Interfaces

by Cornelius Diekmann

16:09 Obfuscation via Symbolic Regression

by JBS

16:10 Stack Return Addresses from Canaries

by Matt Davis

16:11 Rescuing Orphans in Thumb2

by T. Goodspeed

16:12 This PDF Reverse Engineers Itself

by Evan Sultanik

It’s damned cold outside, so let’s light ourselves a fire!

17:02 AES-CBC Shellcode

by Spruyt and Timmers

17:03 Tall Tales of Science and Fiction

by PML

17:04 Sniffing BTLE with the Micro:Bit

by Damien Cauquil

17:05 Bit-Banging Ethernet

by Andrew Zonenberg

17:06 The DIP Flip Whixr Trick

by Joe Grand

17:07 Injecting Shared Objects on FreeBSD

by Shawn Webb

17:08 Murder on the USS Table

by Soldier of Fortran

17:09 Infect to Protect

by Leandro Pereira

Montessory Soldering School

18:02 An 8 Kilobyte Mode 7 Demo

by Vincent Weaver

18:03 Exploits for Kids with Scratch!

by Kev Sheldrake

18:04 Concealing ZIP Files in NES Cartridges

by Vi Grey

18:05 House of Fun

by Yannay Livneh

18:06 Read Only Relocations for Static ELF

by Ryan O’Neill

18:07 Remotely Exploiting Tetrinet

by Laky and Hanslovan

18:08 KLEE Internals

by Julien Vanegue

18:09 Reversing DDR3 Scrambling

by Nico Heijningen

18:10 SHA-1 Collisions with PDFLaTeX

by Ange Albertini

Useful Tables

Index

Colophon