require 'json' require 'socket' require 'uri' =begin %PDF-1.5 %ÐÔÅØ 9999 0 obj << /Length 10944 >> stream =end port = 8080 if ARGV.length > 0 then port = ARGV[0].to_i end v=TCPServer.new('',port) html=DATA.read().encode('UTF-8', 'binary', :invalid => :replace, :undef => :replace).split(/<\/html>/)[0]+"\n" zip_contents = `unzip -l "#{__FILE__}"` zip = [] indexes = {} i=0 zip_contents.scan(/^\s*(\d+)\s+\d+-\d+-\d+\s+\d+:\d+\s+(.+[^\/])\s*$/).each do |m| zip << [m[0].to_i, m[1]] indexes[m[1]] = i i += 1 end raw_zip = `unzip -p "#{__FILE__}"`.bytes.to_a code = $?.exitstatus if code != 0 then print "Error unzipping #{__FILE__}! unzip exited with code #{code}\n" exit(code) end zip.each do |z| z << raw_zip[0..z[0]] raw_zip = raw_zip[z[0],raw_zip.length-z[0]] end raw_zip = nil zip_index = {} zip[indexes["index.txt"]][2].pack('c*').scan(/^"([^"]+)" +(.*)$/).each do |m| if indexes.has_key? m[0] then zip_index[m[0]] = m[1] end end indexes.keys.each do |i| if !zip_index.has_key? i then zip_index[i] = "" end end zip_index["index.txt"] = "a text version of this feelies index" mime_types = {".pdf" => "application/pdf", ".txt" => "text/plain", ".png" => "image/png", ".bmp" => "image/bmp", ".jpg" => "image/jpeg", ".gif" => "image/gif", ".c" => "text/plain", ".py" => "text/plain", ".bib" => "text/plain"} mime_types.default = "application/octet-stream" print "Listening for connections on port #{port}.\nTo listen on a different port,\nre-run with the desired port as a command-line argument.\n\n" loop do s=v.accept ip = Socket.unpack_sockaddr_in(s.getpeername)[1] request=s.gets if request != nil then request = request.split(' ') end begin if request == nil or request.length < 2 or request[0].upcase != "GET" then s.print "HTTP/1.1 400 Bad Request\r\nContent-Length: 0\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n" s.close next end req_filename = URI.unescape(request[1].sub(/^\//,"")) print "A neighbor at #{ip} is requesting /#{req_filename}\n" if req_filename == "favicon.ico" then s.print "HTTP/1.1 404 Not Found\r\nContent-Length: 0\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n" s.close next elsif indexes.has_key? req_filename then feelie = zip[indexes[req_filename]] c=mime_types[feelie[1][-4,4].downcase] d=feelie[2].pack('c*') n=feelie[0] elsif req_filename == "ajax/feelies.json" then c="application/json" d=JSON.generate(zip_index) n=d.length elsif req_filename.downcase.end_with? ".pdf" then c="application/pdf" d=File.open(__FILE__).read n=File.size(__FILE__) else c="text/html" d=html n=html.length end s.print "HTTP/1.1 200 OK\r\nContent-Type: #{c}\r\nContent-Length: #{n}\r\nConnection: close\r\n\r\n"+d s.close rescue Errno::EPIPE print "Connection from #{ip} closed; broken pipe\n" end end __END__ PoC‖GTFO Issue 0x11

International Journal of PoC‖GTFO Issue 0x11

In a Fit of Stubborn Optimism,
Pastor Manul Laphroaig
and His Clever Crew
Set Sail Toward
Welcoming Shores of
The Great Unknown!

Click here to download the PDF!

11.1	Please Stand and Be Seated		11.6	Phrasebook for ARM Cortex M
11.2	In Praise of Junk Hacking		11.7	Ghetto CFI for x86
11.3	Emulating Star Wars on a Vector Display		11.8	Tourist’s Guide to the MSP430
11.4	Tron in 512 Bytes		11.9	This PDF is a Webserver
11.5	Defeating the E7 Protection		11.10	In Memoriam: Ben “bushing” Byer

This is an HTML/Ruby/PDF/ZIP polyglot. When interpreted by Ruby, it acts as a web server that serves this page. If the URL requested of the webserver matches a path inside the ZIP, that file is served. If loaded directly in a web browser, the file will render as this webpage, too, however, the link to the PDF download is hidden.

Heidelberg, Baden-Wüttemberg

Funded by our famous Single Malt Waterfall and
Pastor Laphroaig’s Рентгениздат Gospel Choir,
to be Freely Distributed to all Good Readers, and
to be Freely Copied by all Good Bookleggers.

Это самиздат. Denn was man Schwarz auf Weiß besitzt, kann man getrost nach Hause tragen.

€0, $0 USD, £0, 0 RSD, 0 SEK, $50 CAD. March 13, 2016.