Phrack Magazine issue 63

==Phrack Inc.==Volume 0x0b, Issue 0x3f, Phile #0x01 of 0x14[-]=====================================================================[-][-]=====================================================================[-][-]=====================================================================[-]For 20 years PHRACK magazine has been the most technical, most original,the most Hacker magazine in the world. The last five of those years havebeen under the guidance of the current editorial team. Over that time, manynew techniques, new bugs and new attacks have been published in PHRACK. Weenojoyed every single moment working on the magazine.The time is right for new blood, and a fresh phrackstaff.PHRACK 63 marks the end of the line for some and the start of the line forothers. Our hearts will alwasy be with PHRACK.Expect a new release, under a new regime, sometime in 2006/2007.As long as there is technology, there will be hackers. As long as there arehackers, there will be PHRACK magazine. We look forward to the next 20 years.__^__ __^__( ___ )-------------------------------------------------------------( ___ )| / | 0x01 Introduction phrackstaff 0x07 kb | \ || / | 0x02 Loopback phrackstaff 0x05 kb | \ || / | 0x03 Linenoise phrackstaff 0x1c kb | \ || / | .1 Analysing suspicious binary files | \ || / | .2 TCP Timestamp to count hosts behind NAT | \ || / | .3 Elliptic Curve Cryptography | \ || / | 0x04 Phrack Prophile on Tiago phrackstaff 0x21 kb | \ || / | 0x05 OS X heap exploitation techniques Nemo 0x24 kb | \ || / | 0x06 Hacking Windows CE (pocketpcs & others) San 0x33 kb | \ || / | 0x07 Games with kernel Memory...FreeBSD Style jkong 0x2e kb | \ || / | 0x08 Raising The Bar For Windows Rootkit Detection 0x4c kb | \ || / | Jamie Butler & Sherri Sparks | \ || / | 0x09 Embedded ELF Debugging ELFsh crew 0x5b kb | \ || / | 0x0a Hacking Grub for Fun & Profit CoolQ 0x2a kb | \ || / | 0x0b Advanced antiforensics : SELF Ripe & Pluf 0x29 kb | \ || / | 0x0c Process Dump and Binary Reconstruction ilo 0x69 kb | \ || / | 0x0d Next-Gen. Runtime Binary Encryption Zvrba 0x45 kb | \ || / | 0x0e Shifting the Stack Pointer andrewg 0x1a kb | \ || / | 0x0f NT Shellcode Prevention Demystified Piotr 0xdc kb | \ || / | 0x10 PowerPC Cracking on OSX with GDB curious 0x1b kb | \ || / | 0x11 Hacking with Embedded Systems cawan 0x27 kb | \ || / | 0x12 Process Hiding & The Linux Scheduler Ubra 0x2c kb | \ || / | 0x13 Breaking Through a Firewall kotkrye 0x1e kb | \ || / | 0x14 Phrack World News phrackstaff 0x0a kb | \ ||___|_____________[ PHRACK, NO FEAR & NO DOUBT ]_________________|___|(_____)-------------------------------------------------------------(_____)^ ^

Shoutz:Phenoelit : beeing cool & quick with solutions at WTH.The Dark Tangent : masterminding defc0njoep : no joep == no hardcover.rootfiend, lirakis, dink : arizona printing & for keepting the spirit aliveEnjoy the magazine!Phrack Magazine Vol 11 Number 63, Build 2, Jul 30, 2005. ISSN 1068-1035Contents Copyright (c) 2005 Phrack Magazine. All Rights Reserved.Nothing may be reproduced in whole or in part without the prior writtenpermission from the editors. Phrack Magazine is made available to thepublic, as often as possible, free of charge.|=-----------=[ C O N T A C T P H R A C K M A G A Z I N E ]=---------=|Editors : phrackstaff@phrack.orgSubmissions : phrackstaff@phrack.orgCommentary : loopback@phrack.orgPhrack World News : pwn@phrack.orgNote: You must put the word 'ANTISPAM' somewhere in the Subject-line ofyour email. All others will meet their master in /dev/null. We reply toevery email. Lame emails make it into loopback.|=-----------------------------------------------------------------------=|Submissions may be encrypted with the following PGP key:(Hint: Always use the PGP key from the latest issue)-----BEGIN PGP PUBLIC KEY BLOCK-----Version: GnuPG v1.4.1 (GNU/Linux)mQGiBELk+MARBACP4uJ+aCmxUejehggv2Us9aUg0JV0/fbsvANY45uYCFprOOCQt/DTvvbkEEFE89CsAAMTGLWFoxfChVzJ8s01ZQSyoQP0bcT1+c08p2yDXPJd9AQT8TNF9fdeKCgW3TGaYl/ggHPrJOExXbc4iQptfAXrzPLVa1IjbJIfA76OTrwCgncmedl2rmPrJ6aUkdtWwO+4MwOsD/0Z+WKLPWPJpsT6jXHHKtniEyc4Oy83b5nJch72AZ5/PnIY0CoTR2JkYT7o5unFmu57N99FiNSlKOCnrec9/IQrty3iQhI+ISiCOqd/a3hfSoegInf3iqad4SBgxCy+bEqIxOl6GDtI2GbB3V7rjeFn6Ik/gC3V/4JnMbj/U2FVNA/wLKu2NUFG2nTznkcYXHmOjAz7JAufyLuQI8n9ha0HZ6H4hrDN/xOZrqTIYuRWdc12qgV/awSjRde+UIcm3tMFO/H771iUktPVSxefpXEADnQ0xgQV86WBL6+32kDDF+nYIbqTy5SBQrxfUfycyE8CWqQ97CoBkhcpBy2tNKO6OGbQLcGhyYWNrc3RhZmaIXgQTEQIAHgUCQuT4wAIbAwYLCQgHAwIDFQIDAxYCAQIeAQIXgAAKCRANbHBhkEdcM0zIAKCE1ysoiu7o96qzD+P2wTipsjvITwCZAaSznPOGTPEesxbD0RkejuOgDLe5Ag0EQuT4xRAIALDbRMPpYFSGQwcHJf9fTGTZeU+RyfCelYXYRi9F28SkbrI/FkdQHIe8/FFiQtIVIkkbw+UZPsSJenkUebA8wQCTKWpkDkwIoFJQxrpef5wHE3J4zJ+fBgSNovfEMChe58wYcnuyaWM4eQ72ZnGw7C92spQD1QGajxFZlUXBBa6K3nRW7xJhXsuYMgPXQ8mi6OIYiOiOa4RfrYrKIUQR/2AwZcO4KK/l4DWjfSjEYh9i3/Ch7u8vX82skoIabgEFGDQZPG9afI/7TGXpQDQRc4ERHtDP64KIJwVA85e7d8sYjLHmocNTIMQHg4MAOoKt+LOYr5qltXZiKI8A/3p77k8AAwUH/ia+AexXwN1zrmn46lBs7GTaLYI5sM+f/gBzgm81KPjaknbfARJ6+Z2vtgM9OcAHnbW2mkcpuglhVEAQ0+lrG1ig4xxCqS1yTYlTLbPgzuetjMHJEf4XYTsYOHZRfDJinSJZb+vwa0LEhzE/YVucEUEBhKsJWo7mYdoTLuMblfw/eWYs+LMmUVp+HnF9NxWHwqsJiHGSnEX4Kd3264lUvtsq478wmdMokRHTK23p8uiiWLL8Cl/kMlw8ARVJLqDqoEFAmzO8Rbc5PIzIZPJT9yf2U5a5jzoZITIuuCBtY9pZ9ww0+SjXJ8xsW1CrNNSYPumnBAmgPgCfvZNoQ5hk7gOISQQYEQIACQUCQuT4xQIbDAAKCRANbHBhkEdcM+c7AJ9PqXpUL+EkzHIlfOYz

96MpjPYm5QCgiqW0EZcest0fguHXc8K6KDXYpzg==m9ny-----END PGP PUBLIC KEY BLOCK-----phrack:~# head -22 /usr/include/std-disclaimer.h/** All information in Phrack Magazine is, to the best of the ability of* the editors and contributors, truthful and accurate. When possible,* all facts are checked, all code is compiled. However, we are not* omniscient (hell, we don't even get paid). It is entirely possible* something contained within this publication is incorrect in some way.* If this is the case, please drop us some email so that we can correct* it in a future issue.*** Also, keep in mind that Phrack Magazine accepts no responsibility for* the entirely stupid (or illegal) things people may do with the* information contained herein. Phrack is a compendium of knowledge,* wisdom, wit, and sass. We neither advocate, condone nor participate* in any sort of illicit behavior. But we will sit back and watch.*** Lastly, it bears mentioning that the opinions that may be expressed in* the articles of Phrack Magazine are intellectual property of their* authors.* These opinions do not necessarily represent those of the Phrack Staff.*/|=[ EOF ]=---------------------------------------------------------------=|==Phrack Inc.==Volume 0x0b, Issue 0x3f, Phile #0x02 of 0x14|=----------------------=[ L O O P B A C K ]=----------------------------=||=-----------------------------------------------------------------------=||=-----------------------=[ Phrack Staff ]=-----------------------------=|Wow people. We received so much feedback since we announcedthat this is our final issue. I'm thrilled. We are hated by so many(hi Mr. Government) and loved but so few. And yet it's because of the fewwhat kept us alive."Phrack helped me survive the crazyness and boredom inherent in The Man'ssystem. Big thanks to all authors, editors and hangarounds of Phrack,past and present." --- Kurisuteru[ ... ]"Guys, if it wasn't for you, the internet wouldn't be the same, ourwhole lifes wouldn't be the same. I wish you all the best luck thereis in your future. God bless you all and good bye!!!!! --- wolfinux[ I hope there is a god. There must be. Because I ran this magazine. Ifought against unjustice, opression and against all those who wantedto shut us down. I fought against stupidity and ignorance. I shook