Breaking the world, one application at a time
On 17-Jul-2026 an obscure security outfit Searchlight Cyber published their discovery: wp2shell - remote code execution in recent WordPress versions. Of course it was on Friday, the best time to publish information about an extremely dangerous bug! 😡
Since my blog runs on WordPress, I decided to analyze my webserver logs and see what's happening in the wild.
It's been quiet here for more than a year. That's OK, I've been busy with my real life and other projects.
Well, that's a lame excuse! 🙂 In this post I'll try to explain what happened and how I (hopefully) solved the issue.
Read More
For some weird and inexplicable reason, every year there are plenty of IT-related advent challenges.
Have you ever seen gardeners, baristas, graphic designers or any other creative profession making advent challenges glorifying their craft? I bet you haven't. Yet, there's an Advent of Code event every year and there are lesser-known events for most popular programming languages. Just to name a few - Advent of SQL, Advent of JavaScript, Advent of Rust and even Advent of No-Code.
This year I decided to try out few of these challenges during my Christmas holidays.
I'm sorry. My hoster suddenly required me to migrate to a newer version of PHP. That severely broke my WordPress setup, including the old theme and syntax highlighting, and download buttons. I'm working hard to get it all working again.
Looks like I've resolved most of the issues. Have a great stay!
Enigma Virtual Box authors made some changes in version 10.70 and broke my unpacker again. 🙁 To be able to support more and more versions, my unpacker requires some serious redesign.
That will take some thinking time and energy but I'll eventually get around to it.
In the meantime, here's a quick fix:
To start new year on a positive note, here's a new version of my Enigma Virtual Box unpacker.
Big thank you goes to everyone who reported issues with my tools. I really appreciate it!
Have a great year!
It's taken over a year but the medal for 2022 contest is finally in my hands. 🙂
This time organizers had to deal with some manufacturing issues (which took them a full year to resolve), and I had to deal with overly zealous customs and taxes office. They billed me around 20 eur in taxes and surcharges for a simple trinket. Un-fucking-believable!
There are few minor fixes:
There are few minor fixes:
Ox777h's crackme was posted on Tuts4You forum in October 2022. Description said that it uses simple anti-debugging and code virtualization, so I decided to take a look.
In this post I'll describe how the protection works and steps I took to defeat it.
Read More