<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
  xmlns:atom="http://www.w3.org/2005/Atom"
  xmlns:sitemap="http://www.sitemaps.org/schemas/sitemap/0.9"
  xmlns:secretns="https://research.h4x.cz/data/D6JcuUXAjQRsOvwFuTAoe4IcAhaZkunH/against_demons.png"
>

  <channel>
    <title>H4X - Research</title>
    <link>https://research.h4x.cz</link>
    <description>In search of interesting behaviour.</description>
    <language>en</language>
    <ttl>1440</ttl>
    <lastBuildDate>Mon, 27 Oct 2025 18:53:53 +0100</lastBuildDate>
    <docs>https://www.rssboard.org/rss-specification</docs>
    <secretns:hiddenurl>https://research.h4x.cz/data/D6JcuUXAjQRsOvwFuTAoe4IcAhaZkunH/against_demons.ascii.html</secretns:hiddenurl>
    <secretns:hiddenurl>https://research.h4x.cz/data/D6JcuUXAjQRsOvwFuTAoe4IcAhaZkunH/against_demons.ansi.html</secretns:hiddenurl>
    <sitemap:changefreq>daily</sitemap:changefreq>
    <atom:link rel="self" href="https://research.h4x.cz/feed.xml" type="application/rss+xml" />


    <item>
      <title>Healing Fatally Wounded ELF: Time Travel with QEMU Snapshots (x86-64)</title>
      <link>https://research.h4x.cz/html/2025/2025-10-24--touching_small_elfs-p3-broken_time-machine.html</link>
      <pubDate>Fri, 24 Oct 2025 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2025/2025-10-24--touching_small_elfs-p3-broken_time-machine.html</guid>
    </item>

    <item>
      <title>ELF Magic Gone Wrong: Debugging SEGFAULTs (x86-64)</title>
      <link>https://research.h4x.cz/html/2025/2025-10-06--touching_small_elfs-p2-segfaults_everywhere.html</link>
      <pubDate>Mon, 06 Oct 2025 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2025/2025-10-06--touching_small_elfs-p2-segfaults_everywhere.html</guid>
    </item>

    <item>
      <title>Touching Small ELFs: Fixing Broken Tools (x86-64)</title>
      <link>https://research.h4x.cz/html/2025/2025-09-11--touching_small_elfs-p1-broken_tools.html</link>
      <pubDate>Thu, 11 Sep 2025 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2025/2025-09-11--touching_small_elfs-p1-broken_tools.html</guid>
    </item>

    <item>
      <title>radare2: Working with not-so-valid x86-64 ELFs</title>
      <link>https://research.h4x.cz/html/2025/2025-07-23--radare2_working_with_not-so-valid_elfs.html</link>
      <pubDate>Wed, 23 Jul 2025 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2025/2025-07-23--radare2_working_with_not-so-valid_elfs.html</guid>
    </item>

    <item>
      <title>Kprobes, Linux ELF loader, and C templating</title>
      <link>https://research.h4x.cz/html/2025/2025-06-20--kprobes_kernel_symbol_two_addresses_and_c_templating.html</link>
      <pubDate>Fri, 20 Jun 2025 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2025/2025-06-20--kprobes_kernel_symbol_two_addresses_and_c_templating.html</guid>
    </item>

    <item>
      <title>Ghetto Reversing, Hacking, Patching and Incidentally Fixing a Bug in FBReader</title>
      <link>https://research.h4x.cz/html/2024/2024-06-03--binary_reversing_and_hacking-case_fbreader.html</link>
      <pubDate>Mon, 03 Jun 2024 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2024/2024-06-03--binary_reversing_and_hacking-case_fbreader.html</guid>
    </item>

    <item>
      <title>WebP Polyglot II: Executable Picture</title>
      <link>https://research.h4x.cz/html/2023/2023-09-01--webp_polyglot_ii-script.html</link>
      <pubDate>Fri, 01 Sep 2023 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2023/2023-09-01--webp_polyglot_ii-script.html</guid>
    </item>

    <item>
      <title>WebP Polyglot I: Bootable Picture</title>
      <link>https://research.h4x.cz/html/2023/2023-08-08--webp_polyglot_i-bootable_picture.html</link>
      <pubDate>Tue, 08 Aug 2023 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2023/2023-08-08--webp_polyglot_i-bootable_picture.html</guid>
    </item>

    <item>
      <title>Concealing Linux Namespaces Within a File Descriptor</title>
      <link>https://research.h4x.cz/html/2023/2023-04-17--linux--hiding_namespaces_within_a_fd.html</link>
      <pubDate>Mon, 17 Apr 2023 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2023/2023-04-17--linux--hiding_namespaces_within_a_fd.html</guid>
    </item>

    <item>
      <title>AppArmor Signal Filtering and TTY Signals: Killing the Unkillable</title>
      <link>https://research.h4x.cz/html/2023/2023-02-28--linux--apparmor_signal_filter_vs_tty_signals--ctrl-z-ptrace.html</link>
      <pubDate>Tue, 28 Feb 2023 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2023/2023-02-28--linux--apparmor_signal_filter_vs_tty_signals--ctrl-z-ptrace.html</guid>
    </item>

    <item>
      <title>"Scripting" with C -- Making Quick Proof of Concepts in C</title>
      <link>https://research.h4x.cz/html/2022/2022-10-11--scripting_in_c.html</link>
      <pubDate>Tue, 11 Oct 2022 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2022/2022-10-11--scripting_in_c.html</guid>
    </item>

    <item>
      <title>Quick and Dirty Disassembler in Python3</title>
      <link>https://research.h4x.cz/html/2022/2022-05-03--quick_and_dirty_disassembler_in_python.html</link>
      <pubDate>Tue, 03 May 2022 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2022/2022-05-03--quick_and_dirty_disassembler_in_python.html</guid>
    </item>

    <item>
      <title>Quick and dirty way to create your own assembler in nasm</title>
      <link>https://research.h4x.cz/html/2022/2022-04-27--howto_create_your_own_instruction_set_in_nasm-quick_and_dirty_vm_code.html</link>
      <pubDate>Wed, 27 Apr 2022 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2022/2022-04-27--howto_create_your_own_instruction_set_in_nasm-quick_and_dirty_vm_code.html</guid>
    </item>

    <item>
      <title>CVE-2022-1271: (x)zgrep code execution caused by new lines in a filename</title>
      <link>https://research.h4x.cz/html/2022/2022-04-11--hack--zgrep_multiline_filename_code_execution.html</link>
      <pubDate>Mon, 11 Apr 2022 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2022/2022-04-11--hack--zgrep_multiline_filename_code_execution.html</guid>
    </item>

    <item>
      <title>Linux: bind and connect to port 0 with iptables REDIRECT or DNAT</title>
      <link>https://research.h4x.cz/html/2021/2021-12-31--linux--bind_and_connect_to_port_0_with_iptables_redirect_or_dnat.html</link>
      <pubDate>Fri, 31 Dec 2021 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2021/2021-12-31--linux--bind_and_connect_to_port_0_with_iptables_redirect_or_dnat.html</guid>
    </item>

    <item>
      <title>Linux: minimal viable x86 ELF64 static binary</title>
      <link>https://research.h4x.cz/html/2019/2019-10-22--linux--minimal_viable_x86_elf64_static_binary.html</link>
      <pubDate>Tue, 22 Oct 2019 00:00:00 +0000</pubDate>
      <guid>https://research.h4x.cz/html/2019/2019-10-22--linux--minimal_viable_x86_elf64_static_binary.html</guid>
    </item>

  </channel>

<!--
 E A o c Z S I o P z F 6 b m F i I B Y l P x Y D f Q c t e m V E X k t p d H I V Z Q 8 4 P H I g P m U W G x N 0 P D w r I X g 5 K 3 I s I y Y 8 L T E g I C A g e n 
gNOyw3MzswKj8qNzEwOyYuOyw3MzswKj8qNzEwOyYuOyw3MzswKj8qNzEwT1IICgBpJSQ9dHN0JC4nK3ggNz05KDc6PSQnc0VEdHZwDCZpLjcrNTUxOm8vZSo1NiclOWU5PCQmLG8sLCwjZTooOyBuICkxaTwvKD1wJjo

             oI   yY   rdDU7    aS0rZ   Wh   wK       iBpfGVm  aW    E9  PW8mJCt  aICQsI   2U    qP  TIgOyYsM  Cw   5K  jxpcHtuP  TV0   LS   ArNng
             +K   iZ  pJ   Cs  6Ji  4w  PC wrZT       o5J      CF    pL  zxu      PT  V0O  ioi  I3F  +T1gAK2U  5M   WE    4JiA    lZTk  kZ  SYh KGU
             6NSM4LG  8sIDQ/M  n5       pOiBu         NyA6aTw  rI    HR  wMTooOW  U5MWE8K   DkrZWl      /d     3I5Pyos     NS     M9JSY 6P  Hg
             /I1guKD  E6PS8za  X5       uJDY0         ZWNmf2U  +Ji  42K  C0nKTEk  PHImK       2U        pM     TUgICEp     ZW     hw bQJpc  GV /e3N0
             Ym   9/  am   pw  eHJ  4Z  Gt EXmF       0eW       8WCgpw   dXJ      0b XVEd     GF        ka     Rc   BF    3hhZ    W9  pfE9  udH  B0
             EQ   Ac  ZW   hw   eHJ4R   2V   uZ       WEMBh1u     dH     htZWJDR  3d   gd     Bk        bG     28   oM  DYzMTsmI  2U   nJ2   EnMCI

jICwiL   DFnbRIr  dCI1J2   87    Nj  1wMTos   bTYvOS    R0EQAc    ZSw/Z   TsnOyA8        IGEgI   Spu   Nz  0j    MD  49d09EdG  E1   aR  cBF3gyZW  9pL   k9   udCB0
EQ  AcZ  Ttw      eH  IrR  2V    uN  mE  MBh  1u  Jnh  tZT  NDR  09E  aX  xpE           m8   ZL  TkkZ  Ts  6bQ  ogM  WEAICIrZ  Qg   xI    XIoI    yFuI  yk  taS Y9Z
TEkZXon  IjFndDI  gOyAgIm  dw    GC  w3MzswK  j8qNzEw  Oy    Yu  Oyw3M    zswKj8q       N0VECgw  AZTs6 bT   cvOiU7      JC     M3ZT81K     zc     7LDEr MG  E/
LDZiZ    Sw4JCZp  JSQ9d    DU    8L  G89JD    U1ZT4    sI    yI    6PGE1  Om8vZTU       1NiEoKi  Bg dAgya     Tg        rZ     S0jIFgG     GR     Vu Ny4mO  yo tMTQp
aX I9J   SAg      dC       ggb  jxu  MD YyN   zc       oJi  QsO  CR   6a  Q07           MX   gn  IH  IkOD     Y6        dC     ch   JS    knKT    Rw  MTos  PiB  uN
y4   6L  SY6LDc+  Nm       hDR3RgdA  4A   GW  8i        IDY3MT    ppIDA   9IGE2LG       86   LT  1w   NjM     kK        GU     iM   S8  zPSduJCt  wJ   HIk   KDY9N

SYxZ0VEd3ZwCgYZbSg7JzV0KypubSgjID08KSpnJiA6LSAja1JadnxpBDFuOTQnPW8ACgxwJzdpPyA+MSAgLCtvZRYVExcbbQAYERN0aG5vT1IZK3I9JSw9dCI8KCMiIDY3IHI+KGUsJi4/LG8vKTRwMTo7KCBuJjQ4LD
 x u J D Y 0 Z S Y h K D c r M i 4 m L G 8 5 I H g z J D x p L D E 6 N S I / a S Y 6 Z T o p T 3 A v P y A / I S Q 6 K j Z u J D Y x K S s 6 J D Z s e k t e Q w = = 



(You should use hints here. Kudos to you if you solve it without them.)
HINT1: 62617365363420616c7068616265743a205b612d7a412d5a302d392f2b3d5d
HINT2: 584f5220656e6372797074696f6e20616e642028646566696e6974656c79206e6f7420636f727265637429204f54502e
HINT3: 416c70686162657420666f7220746865206b657920697320412d5a20616e64206b6579206973203135206279746573206c6f6e672e204e6f7720796f752063616e20757365206672657175656e637920616e616c79736973203b292e204f722e2e2e
HINT4: 68747470733a2f2f72657365617263682e6834782e637a2f6368616c6c656e6765732f68746d6c2f68696e74732d2d6e616976655f786f725f6369706865722e68746d6c

SOLUTION: 696d706f7274206261736536342c2072650a6b203d2062274558504552494d454e544154494f4e270a63203d206261736536342e6236346465636f6465202872652e7375622028622720272c206227272c2062616e6e657229290a7072696e7420287374722028627974657320285b6b5b692025206c656e20286b295d205e20635b695d20666f72206920696e2072616e67652028302c206c656e20286329295d292c202775382729290a

NEXT LOCATION: 476f696e6720696e20435353207374796c652e
-->

</rss>
