Advertisement · 728 × 90

Posts by Gynvael Coldwind

Yes.

4 days ago 0 0 0 0

Hey folks! We're running a 2-3 challenge K8s-themed mini-CTF. It's both for fun, but also to test our infra before the upcoming workshops on security of K8s. Anyway, it starts April 29, so sign up if you want to hack some Kubernetes :)

5 days ago 7 1 2 0
Post image

A 25-hour RPG finished in under 2 minutes.
Not speedrunning - hacking.

@gynvael.bsky.social breaks the game using reverse engineering, bugs, and his uncanny skills.

#CONFidenceConf 2026 👉 bit.ly/joinCONFI2026

6 days ago 3 2 0 0
Paged Out! Deeply technical zine. And it's free.

How to submit an article:
1. Write article (max content size: 174mm x 253mm).
2. Send it to us.
3. ...
4. Have it published in Issue #9!
Details: → pagedout.institute?page=cfp.php

1 week ago 1 0 0 0
Post image

When working with computers we frequently find these cool little tidbits/tricks/tips we could share. They are too small to make a full article, but they are likely the right size for Paged Out! magazine, where each article is just 1 page 😎
CFP deadline for Issue #9: 30th April'26

1 week ago 7 3 2 0
FPGA simulated on a GPU - GPURTL Google CTF Finals 2019 (reversing)
FPGA simulated on a GPU - GPURTL Google CTF Finals 2019 (reversing) YouTube video by LiveOverflow

Video – www.youtube.com/watch?v=3ac9... – by @liveoverflow.bsky.social

2 weeks ago 1 1 0 0

This article reminded me of a GOATed FPGA bistream RE task from GoogleCTF - GPURTL by Robin - where the key to solving it for me was observing the pattern of changing bits in FPGA's registers.
LiveOverflow made a video about it - link in the reply in case you want to check it out.

2 weeks ago 2 1 1 0
CTF In A Box ? The Weirdest NETGEAR Network Switch 2021 Exploit Chain - Gynvael Coldwind
CTF In A Box ? The Weirdest NETGEAR Network Switch 2021 Exploit Chain - Gynvael Coldwind YouTube video by GreHack

www.youtube.com/watch?v=gJM9... ← my new old talk was released as a standalone; it's a fun story of how you go from being able to write '2' (0x32, 1 byte) anywhere on the FS to full RCE with admin/root privs

2 weeks ago 5 1 0 0
Preview
Paged Out! Deeply technical zine. And it's free.

Link to the article:
pagedout.institute/webview.php?...

Link to the whole PDF:
pagedout.institute/download/Pag...

3 weeks ago 2 1 1 0
Advertisement
Post image

A perfect 1-page Friday reading → here's a fun article by Jacob Strieb about (ab)using <canvas> element in HTML and PNGs to get DEFLATE compression into older browsers (without reimplementing the whole thing in JS).

3 weeks ago 8 3 1 0
Preview
Paged Out! Deeply technical zine. And it's free.

Direct link to the article: pagedout.institute/webview.php?... (better quality)
And PDF: pagedout.institute/download/Pag...

4 weeks ago 0 0 0 0
Post image

This 1-pager from Xusheng Li on GDB internals of how watchpoints are implemented is a delight to read! (especially that double-write behaviour false positive - I did not know about that)

4 weeks ago 8 2 1 0

My favorite XSS trick when you can add only attributes (when < and > are removed from the input) is to add onfocus=alert(1) and autofocus: <input value="" onfocus="..." autofocus="">

To not create a loop, I add this.blur(), otherwise alert() steals the focus, and then the field gains it once again.

1 month ago 4 1 0 0
Preview
CFP 2026 - CONFidence Speak at CONFidence 2026 Is cybersecurity your passion? Do you work on the offensive or defensive side - or somewhere in between? Present your latest research, analysis, real-world case study, or hard...

confidence-conference.org/cfp-2026/ ← quick reminder that the Call For Papers for CONFidence 2026 (May, Poland) closes this week!

1 month ago 1 1 0 0
Post image

Woah! @phrack.org zine raising the bar for CFPs I see! They have an actual crack intro with music and stuff on their website now!

1 month ago 6 1 0 0

Paged Out! made it to RE//verse! <3

1 month ago 10 2 0 0
Preview
Paged Out! Deeply technical zine. And it's free.

Article: pagedout.institute/webview.php?...
PDFs download: pagedout.institute?page=issues....

1 month ago 2 0 0 0
Advertisement
Post image

My second article in Paged Out! #8 was about the architecture of the terminal emulator on Linux - it's a really obvious thing until you start digging into details, as usual (link to article/issue is in reply).

1 month ago 11 5 1 0
Post image

My article in newest Paged Out! about everyone's favorite Python party trick:
pagedout.institute/webview.php?...

#python #goingtoapythonprogrammersparty #pythonprogramminglanguagethemedparty #whatispythonsis

1 month ago 4 0 0 0

Guess what's out :)

2 months ago 7 4 0 0
Preview
Bootblock Rebels The Hidden Stars of the Amiga Underground. Stories from the Amiga Cracking Scene.

Just got this link on my discord - www.kickstarter.com/projects/bit... - passing it along because this book looks fun!

2 months ago 4 2 0 0
Post image

We are excited to announce the CFP for the next tmp.0ut Volume 5!

tmpout.sh/blog/vol5-cf...

3 months ago 31 18 0 0
Post image

A useful chart on what type to use for flags in C/C++ depending on your D&D alignment:

3 months ago 10 0 0 0
How Speedrunners BEAT Hollow Knight Silksong In 10 Minutes!
How Speedrunners BEAT Hollow Knight Silksong In 10 Minutes! YouTube video by Abyssoft

Glitches in games, especially used for speedrunning, are one of the most fun aspects of hacking to watch!

As an example, check out this video "How Speedrunners BEAT Hollow Knight Silksong In 10 Minutes!" by Abyssoft

www.youtube.com/watch?v=M6Jn...

3 months ago 4 1 0 0
Preview
Paged Out! Deeply technical zine. And it's free.

Ah Saturday morning! What a great time to...

...write a 1-page article for Paged Out! zine!

Deadline is 4th Jan - just a week away.

CFP: pagedout.institute?page=cfp.php

3 months ago 2 2 0 0
Preview
Paged Out! Deeply technical zine. And it's free.

𝙿𝙰𝙶𝙴𝙳 𝙾𝚄𝚃! #𝟾 𝙳𝙴𝙰𝙳𝙻𝙸𝙽𝙴: 𝟺 𝙹𝚊𝚗𝚞𝚊𝚛𝚢 𝟸𝟶𝟸𝟼 𝙴𝚘𝙳 𝙴𝚘𝙰

Save the date if you're planning to write an article or showcase your digital art in the next issue of our magazine.

pagedout.institute

P.S. We're looking for sponsors for issue #8 as well.

4 months ago 5 4 0 0

One of my favorite projects just hit a HUGE milestone of 1 million downloads!

Kudos to the team and everyone who supported us!

4 months ago 6 1 0 0
Advertisement
GreHack 2025 Live Stream Minatec
GreHack 2025 Live Stream Minatec YouTube video by GreHack

You can write '2' (0x32) anywhere in the filesystem of a Linux-based network switch. How do you get root?

That's basically what my talk at GreHack conference was about - enjoy!
youtu.be/F4CudbWHZ7Y?...
youtu.be/X-ZJH4d2tuE?...

4 months ago 9 0 0 0

Btw, you can get Paged Out! either at events (pagedout.institute?page=event-p...) or, if you want to buy one, we have #6 and #7 available on lulu: www.lulu.com/spotlight/pa...
And if you want Paged Out! at your event - or you want to sponsor Paged Out! prints for events, get in touch with us :)

4 months ago 1 0 0 0
9 printed magazines lined up; the side one is visibly matte, next ones are glossy, apart from two last ones which seem to be in-between. There's issue 1, issue 5, 3 times issue 6, and 4 times issue 7. As per text on the photo, they are either from print series for various conferences, or just test-prints ordered at lulu.

9 printed magazines lined up; the side one is visibly matte, next ones are glossy, apart from two last ones which seem to be in-between. There's issue 1, issue 5, 3 times issue 6, and 4 times issue 7. As per text on the photo, they are either from print series for various conferences, or just test-prints ordered at lulu.

With the newest Black Alps 2025 and GreHack 2025 additions, my printed Paged Out! collection is slowly growing!

4 months ago 9 0 2 0