-
Notifications
You must be signed in to change notification settings - Fork 6
About
Corkami is my notepad, and doesn't follow a clear roadmap: I try to organize some of my knowledge in a useful way (so that I can re-use it myself), and I share it.
Corkami is:
- technical
- based on findings on real hardware
- confirmed with many !PoCs
- free
- to browse (no annoying layout, no ads, ...)
- to download (no login required)
- to test (pre-compiled !PoCs included)
- to modify (BSD Licence, complete sources included, even for pictures and documents, using open-source tools)
- useful
- constantly updated (wiki format)
- always public, thus subject to feedback: correction, suggestion, etc...
- binaries are directly downloadable
- binaries are hand made to be concise
- printable documents (cheat sheets, diagrams, tables) to use daily at work
the way I work:
- I study a specific topic (PDF, PE, x86...)
- when I learn something new, I code a small PoC that just focuses on this specific point
- when I have enough !PoCs, I write a wiki page for it (but my !PoCs are the most up to date part, so be sure to check the nightly builds!)
- everything is public, thus commented, corrected, noticed by the community
- when my coverage of the topic is good enough, I apply to present in a conference.
Hope you like it,
- 2013 was quite intensive:
- 5 distinct materials, 8 presentations in 5 countries.
- 6 new posters, and 7 alternate versions.
- 4 articles
- getting some recognition: first poster request, first custom binary requests...
- plan for 2014: much less traveling (strict minimum?), more focus on work.
- starting early, presenting on puzzles at Hackpra in January.
- 'back to France' - will apply to present at HES, SSTIC, HiP - pour essayer de se reconnecter au pays ;)
- more graphs, more topics, more !PoCs. same old. my usual style ;)
- 2012 is soon over, it was a great year:
- Reworked the BerlinSides page to integrate the notes and screencasts. Nice all-in-one layout, but I now prefer the double deck (see below)
- improved the PE page with many examples, animations and screencasts.
- Opcodes Tables for Android/JVM/.NET/x86.
- the PE 101 poster, first in 32b then in 64b, in 9 languages, including Arabic and Japanese, and then later in a lighter 'xkcd' version.
- CorkaMIX, my all-in-one PDF/Java/HTML/... file in a PE, followed by its Linux counterpart, CorkaMInuX.
- the PDF page also got some improvments.
- the Initial Values got also a huge update.
- Presentations on PE at Hack in Paris then Hashdays, which introduced a dual slide-deck release, which should be my standard from now on.
- met a lot of nice people - thanks a lot everybody for 2012!
- Thanks to Candid Wüest and FX for pushing me (I initially didn't plan that at all, in both cases), I presented at Hashdays and BerlinSides.
- Both were great experiences, and as things went not too wrong, I had a good time, while being able to express myself freely, and experimenting on making presentations.
- I spend maybe too much time on them, but I have my own personal style now, and I'll definitely reiterate the experience next year.
This unplanned extra step makes this year 2011 even better. It was great altogether!
- the basics are now covered: x86 and [- the style of publication reached a suitable form:
- wiki pages with proof of concepts, and quoted snippets of code (PE, x86 PDF)
- pdf made from svg (cheat sheets)
- screencasts, with Wink (reJava OllyDbg tracing)
so Corkami can step up and move on to the next level, following the same methods but tackling more advanced topics such as malware/packer analysis.
To show your support (this project is just a hobby, done in my spare time) you can:
- buy something in my Amazon wishlist (et celle-ci pour les français).
- donate via Paypal
https://www.paypalobjects.com/en_US/FR/i/btn/btn_donateCC_LG.gif
Sébastien Kirche
these people were beyond helpful or supportive:
- Adam Błaszczyk
- Cathal Mullaney
- Peter Ferrie
if you ever meet them, pay them a beer !
a lot of people contributed (directly or not) to this project: Alexander Matrosov, BeatriX, Bruce Dang, Candid Wüest, Costin Ionescu, Damien Saint Macary, Daniel Plohmann, deroko, Donato Ferrante, Didier Stevens, Elia Florio, Elias Bachaalany, Ero Carrera, Eugeny Suslikov, Fabian Sauter, Frank Boldewin, Georg Wicherski, Gil Dabah, Guillaume Delugré, Guillaume Lovet, Gynvael Coldwin, Heather Shannon, Igor Skochinsky, Ilfak Guilfanov, Ivanlef0u, Jean-Baptiste Bédrune, j00ru, Jim Leonard, Jon Larimer, Karthik Selvaraj, Kazumasa Itabashi, Kris Kaspersky, Oleh Yuschuk, Mark Vincent Yason, Markus Hinderhofer, Mircea Ciubotariu, Moritz Kroll, Nicolas Brulez, Nicolas Fallière, Rewolf, Robert !McArdle, Sami Koivu, Sebastian Biallas, Sebastian Porst, StalkR, Tomislav Pericin, Waleed Assar, Yoann Guillot . and those who pulled me forward:
Andreas Naive, Charles !McDonald, CrackZ, Dimedrol, Fabrice Catoir, Fravia, Kostya Kortchinsky, Nicola Salmoria, Omar Cornut, ...