So Zig can create some pretty small binaries!

So I was doing a ctf last week and found that I needed to upload some binaries to a target machine with minimal tooling via a somewhat cumbersome mechanism.

Thus I was very interested in minimizing the size of the uploaded binary.

So there’s this cool tweet:

So picked up a yubikey, and am digging into how linux handles these sorts of things exactly. It looks like the linux-pam module delegates to pam-u2f, which appears to be written by Yubico themselves.

While researching how libpam works, I learned you can search all man pages by using the -k option. So man -k pam_ will give you all the man pages associated with pam modules.

Old fat spider spinning in a tree! Old fat spider can’t see me! Attercop! Attercop! Won’t you stop, Stop your spinning and look for me?

https://www.ettercap-project.org/

Pari documentation read. Probably should have done this the first time. Pari Documentation Main things of note: avma corresponds to the top of the pari stack (pari stack is managed separately than the normal stack, presumably so that it can be made much larger than the usual stack). The following previously mysterious …

Alright, so it turns out that Pari doesn’t use just pohlig helman, or rather it doesn’t proceed use Baby Step Giant Step or Pohlard Rho for the discrete log step on the reduced prime (I’ll probably do a write up for those later, they’re cool!)

Rather, it uses the Index Calculus.

It’s a particle! In a box!

Well this is interesting. CISA has published an article detailing information about the SNAKE malware, which they have explicitly declared was created by Center 16 and is controlled by the Russian FSB

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-129a

So fun thing about pagination, its a pain.

When querying a large dataset, many apis will provide a “page” parameter (and also limit the maximum results that can be returned).

A serious problem though with APIs that do this is that they can result in an inconsistent view of the data. The worst thing that can …