0x00sec turns 0x01!
We made it, guys! 0x00sec is a year old. We went from a simple Jekyll blog with only three articles to a respectably-sized, full-on forum with over 500 users. Each day, one or more people took a chance and signed up.
Countless Introductions showcase our diversity of interests, origins, and languages (programming and spoken). Before we take a little peek into what the community has achieved in a year, let’s have a look at how many people have been peeking.
Stats
Some notable website statistics include (at time of writing):
- 44,300 people have visited 0x00sec
- with 93,700 total website sessions,
- and 422,700 page views.
- 583 registered users.
Top 5 most viewed pages:
- Remote Exploit Shellcode Without Sockets -> 11,250 views @0x00pf
- Reverse Engineering 101 -> 9,523 views @0x00pf
- Shellcoding Part 1 -> 8,757 views @IoTh1nkN0t
- PE File Injection -> 8,161 views @dtm
- A Simple Runtime Crypter -> 6,327 views @TheDoctor
Projects!
In no particular order, lets see what the community has worked on this year!
The Github Submission Platform
If you remember this one, you’re a real oldie! When we first started the site, we used Jekyll, a static webpage generator that depended on markdown files stored on GitHub. To submit an article, you had to make a pull request. @pry0cc thought this was super slick, but it didn’t scale. It was a nice concept, though.
Agora and Null-get / NullHub
Available here and developed early on, Agora and Null-get are package file managers that take advantage of git
. These projects were a fun little competition for some early members of 0x00sec.
Pupper
Developed by @pry0cc and @oaktree, Pupper is a tool that downloads articles from Discourse (the platform that 0x00sec uses), for offline reading. It also formats them into stylish webpages! This is very helpful to some who want to store articles locally, for reference.
Xerxes
Developed by @dtm and @TxS, this advanced malware project quickly came along. Notably, it’s entirely written in C and uses the WinAPI.
STELF
Of course, STELF, The Shell That Exercises Limited Fanfare. Well, not for long. STELF is written in python and developed primarily by @Joe_Schmoe. This project is capable of quite a lot – for example, it can encode executables on-the-fly.
unDLP
Developed by the one and only @Nitrax, unDLP allows the user to send files discretely by abusing HTTPS.
PAIN Framework
Developed internally by @0x00_Jinx, the PAIN Framework is secure, client-and-server POC.
PHPShell
Creatively-named and developed by @IoTh1nkN0t and @pry0cc, PHPShell is, well, a PHP shell that craftily recognizes user agents and javascript to avoid discovery. This project is a reflection of the older, simpler days of PHP shells.
Nullbot
Our very own IRC bot! Sitting in #0x00sec, @fraq has adapted his own legobot framework to meet our needs. And pine has his quirks too.
RICE
Saving children in third-world countries one grain of rice at a time, developed by @Joe_Schmoe, this dodgy script, solves math questions to get rice from http://freerice.com.
Argus
Argus is an Android RAT developed by @TheDoctor. The RAT provides many dope features like email C&C, command execution, solid error handling, and super 1337 xor encryption! This project is not only fun but educational.
Conclusion
This is only a fraction of what has been done in the community; by no means is this an exhaustive list of all the projects in the community. A lot of good memories have come out of all this. The members, who have put time and effort into the development, show such promise, for the community and infosec.
We must also take the time to appreciate all of you who have posted articles, tutorials, and replies, helping the next generation of hackers hone their skills.
0x00sec struggled in the past both financially and structurally, but support has always come through. We’d like to time to thank S^3, for their support in donation and providing the IRC + The GitLab! And also to Sequoia for their generous sponsorship!
Outlook
The purpose of 0x00sec was always to connect people who loved hacking and tinkering, allying veteran hackers with beginners, allowing them to learn from and teach each other.
Whether you’re a newcomer, or you’ve been here from the start, feel free to share your thoughts, your good memories, (especially on the IRC!). If you have any suggestions about how we can make this platform better, feel free to let the admins and moderators know. 0x00sec is focused on the community, and not $$$.
We look forward to scaling up the community to hundreds – and maybe thousands – more in the coming years. Please share this if you enjoy this site! I hope you have a good day, 0x00’ers!
Sincerely,
The 0x00sec Admins and Mods