Paul Courbis

04. Know the selling price of an item sold on the site Naturabuy

2011-03-31T11:01:00Z

Naturabuy is an online auction dedicated to the world of hunting and target shooting. It is usually impossible to know the selling price of an item sold, which is unfortunate for both the seller (to find out how much it can expect from a similar object), as a buyer (which may have an idea market price). Here's how to get around this limitation ...

Step One : Setting the desktop

It should first properly configure your workstation to use our tools. To do this : - Using "regedit" create the registry key EnableAutoproxyResultCache (type : REG_DWORD) in "HKEY_CURRENT_USER Software Policies Microsoft Windows CurrentVersion Internet Settings" and give it the value 0 (see http: / / support.microsoft.com/kb/271361/fr). This forces IE to behave intelligently by checking each URL for the proxy configuration to use (by default, IE does once for each site, which may cause malfunction, for example in companies where proxies differ depending on the type of protocol used (HTTP, HTTPS, FTP, ...) ;

If this method does not work, use the second method suggested by Microsoft : Run the utility "gpedit.msc" then "User Configuration Administrative Templates Windows Components Internet Explorer", double click "Turn off caching proxy scripts automatically, choose "Enable" and click "OK" ;

Internet Explorer menu "Tools" "Internet Options", choose "Connections" tab, click "LAN Settings", check "Use automatic configuration script" and enter the address http://www.courbis.com/NATURABUY/proxy.pac .

For more security (with IE, you never know), empty the cache of Internet Explorer, quit and restart.

Use

- Go to page http://www.naturabuy.fr/NATURABUY/index.html

You normally have a page divided into 2 frames. The upper one contains the site Naturabuy, the lower our control interface. If not, check that you have successfully completed the setup above ;

In the top frame, log on to the site with your login page and then view the object still for sale ;

Enter number of the object you want to know the selling price - Click "Change ID" (the images will disappear, this is normal) ;

Click on "Add to list your business forward".

It'll just go see your business listing to follow. The object should normally be there, with its selling price ...

This method has been successfully tested with Internet Explorer 8 and Chrome.

03. A key example in hand edit the HTML of a page on the fly

2011-03-29T11:01:42Z

It would sometimes change a detail in a HTML page of a website, such as changing a value in a read-only field, allow copy and paste into a field where it is denied, see a hidden field, etc. ...

The technique below will allow you (on a Windows PC with Internet Explorer). WARNING : This method works only for PCs that do not already have a proxy (which is usually the case for the PC business) ...

First step

It should first properly configure your workstation to use our tools. To do this :

Using "regedit" create the registry key EnableAutoproxyResultCache (type : REG_DWORD) in "HKEY_CURRENT_USER Software Policies Microsoft Windows CurrentVersion Internet Settings" and give it the value 0 (see http:// support.microsoft.com/kb/271361/fr). This forces IE to behave intelligently by checking each URL for the proxy configuration to use (by default, IE does once for each site, which may cause malfunction, for example in companies where proxies differ depending on the type of protocol used (HTTP, HTTPS, FTP ...) - if this method does not work, use the second method suggested by Microsoft : Run the utility "gpedit.msc" then "User Configuration Models Administration Windows Components Internet Explorer ", double click on" Disable caching proxy scripts automatically, choose "Enable" and click "OK" - in Internet Explorer menu "Tools" "Internet Options" , choose "Connections" tab, click "LAN Settings", check "Use automatic configuration script" and enter the address "http://www.courbis.com/MITM/proxy.pac.

For more security (with IE, you never know), empty the cache of Internet Explorer, quit and restart.

Use

Then access the root site of your choice by adding / MITM / index.cgi after the server name. For example http://www.google.fr/MITM/index.cgi

The display of your browser will be divided into two and, in the bottom frame, you can "Get HTML", edit it and "Return the frame".

The image below shows an example of the Google home page (still functional) issued to : - change the title - change the button text - reveal hidden fields (hidden) converted to editable text fields.

Note that this mÃ©cannique works on all types of web pages, including pages protected by an encrypted connection (SSL). You'll get a "warning" of the browser unless the position was changed, in which case you'll find anything and a frame "hidden" will capture your login connections, change the actions that make you think (amount and recipient of a payment for example, etc. ...).

In conclusion : DO NOT AWARE OF OPERATION ON AN ITEM THAT YOU DO NOT BELONG (particularly in the cyber cafes) !!

Trace No. 7 - "Bugs, Tricks, errors"

2010-11-16T22:01:06Z

"Bugs, tips, mistakes," Trace, No. 7, October 1983, p. 61. Also available in PDF format more readable ...

Intervention by Travis Goodspeed

Paul Courbis — 2010-09-02T11:25:42Z

Video of Travis Goodspeed about "Journey to the Center of the HP28" at DEFCON 2008

USER NÂ°1 de 1988 - Le tour du HP28c en 80 pages... Ou presque - Version Danoise

Paul Courbis — 2009-12-26T18:29:19Z

Version Danoise de Le tour du HP28c en 80 pages... Ou presque

Aussi disponible en version PDF plus lisible, pages 22 Ã 36 du document (pages 40 Ã 68 de la revue)...

11. MÃ©tÃ©o du RER - L'annÃ©e 2008 d'un coup d'oeil

Paul Courbis — 2009-01-05T11:16:00Z

	Janvier 2008
	1 34.5 %	2 71.1 %	3 93.0 %	4 58.3 %	5 75.2 %	6 80.8 %
7 35.5 %	8 37.4 %	9 57.8 %	10 30.7 %	11 49.0 %	12 100.0 %	13 100.0 %
14 97.2 %	15 71.0 %	16 97.9 %	17 93.3 %	18 77.6 %	19 81.2 %	20
21 26.6 %	22 65.1 %	23 100.0 %	24 87.1 %	25 85.4 %	26 100.0 %	27 100.0 %
28 60.6 %	29 85.2 %	30 79.5 %	31 67.3 %

	Février 2008
				1 67.4 %	2 100.0 %	3 100.0 %
4 98.0 %	5 66.8 %	6 42.1 %	7 51.7 %	8 38.2 %	9 0.0 %	10 0.0 %
11 35.5 %	12 70.9 %	13 29.2 %	14 75.1 %	15 82.1 %	16 100.0 %	17 100.0 %
18 81.4 %	19 85.2 %	20 55.6 %	21 74.9 %	22 62.0 %	23 100.0 %	24 100.0 %
25 41.6 %	26 56.7 %	27 72.6 %	28 49.7 %	29 69.2 %

	Mars 2008
					1 100.0 %	2 100.0 %
3	4	5	6	7	8	9 100.0 %
10 69.6 %	11 78.2 %	12 59.5 %	13 42.1 %	14 63.5 %	15 100.0 %	16 53.5 %
17 36.0 %	18 90.1 %	19 86.1 %	20 82.3 %	21 64.6 %	22 75.6 %	23 100.0 %
24 96.9 %	25 93.1 %	26 84.5 %	27 37.8 %	28 0.0 %	29 75.6 %	30 100.0 %
31 54.4 %

	Avril 2008
	1 81.8 %	2 86.8 %	3 92.0 %	4 97.1 %	5 96.9 %	6 100.0 %
7 87.9 %	8 78.9 %	9 54.3 %	10 37.4 %	11	12	13
14	15 68.7 %	16 83.9 %	17 53.5 %	18 70.2 %	19 64.8 %	20 100.0 %
21 81.5 %	22 79.4 %	23 100.0 %	24 97.2 %	25 100.0 %	26 73.2 %	27 0.0 %
28 69.1 %	29 100.0 %	30 89.8 %

	Mai 2008
			1 95.8 %	2 100.0 %	3 90.0 %	4 95.8 %
5 78.9 %	6 47.7 %	7 24.7 %	8 61.8 %	9 86.7 %	10 100.0 %	11 100.0 %
12 96.9 %	13 85.9 %	14 63.4 %	15 49.5 %	16 51.6 %	17 71.6 %	18 100.0 %
19 100.0 %	20 73.8 %	21 92.5 %	22 29.3 %	23 50.9 %	24 87.1 %	25 100.0 %
26 100.0 %	27 95.2 %	28 85.5 %	29 82.0 %	30 85.8 %	31 95.2 %

	Juin 2008
						1 87.8 %
2 92.6 %	3 67.9 %	4 87.2 %	5 100.0 %	6 93.8 %	7 100.0 %	8 99.7 %
9 100.0 %	10 9.2 %	11 1.8 %	12 93.0 %	13 99.4 %	14 64.0 %	15 0.0 %
16 0.0 %	17 0.0 %	18 75.6 %	19 100.0 %	20 100.0 %	21 91.5 %	22 100.0 %
23 82.5 %	24 100.0 %	25 70.8 %	26 61.3 %	27 90.7 %	28 41.6 %	29 76.2 %
30 74.9 %

	Juillet 2008
	1 0.0 %	2 49.4 %	3 88.8 %	4 81.4 %	5 75.4 %	6 96.0 %
7	8	9	10	11	12	13
14	15	16 100.0 %	17 70.6 %	18 53.4 %	19 66.7 %	20 96.9 %
21 87.8 %	22 96.9 %	23 95.2 %	24 83.8 %	25 76.7 %	26 100.0 %	27 100.0 %
28 95.8 %	29 62.4 %	30 100.0 %	31 100.0 %

	Août 2008
				1 90.1 %	2 99.4 %	3 100.0 %
4 100.0 %	5 100.0 %	6 91.0 %	7 85.2 %	8 90.6 %	9 100.0 %	10 100.0 %
11 100.0 %	12 26.7 %	13 76.1 %	14 90.7 %	15 100.0 %	16 100.0 %	17 100.0 %
18 98.7 %	19 100.0 %	20 100.0 %	21 71.3 %	22 100.0 %	23 92.3 %	24 100.0 %
25 100.0 %	26 92.9 %	27 100.0 %	28 93.5 %	29 95.8 %	30 100.0 %	31 100.0 %

	Septembre 2008
1 87.2 %	2 93.6 %	3 100.0 %	4 76.6 %	5 92.0 %	6 82.4 %	7 76.2 %
8 85.7 %	9 93.1 %	10 58.0 %	11 5.4 %	12 39.0 %	13 100.0 %	14 100.0 %
15 100.0 %	16 78.6 %	17 90.3 %	18 67.9 %	19 69.5 %	20 100.0 %	21 100.0 %
22 25.8 %	23 0.0 %	24 0.0 %	25 74.5 %	26 100.0 %	27 100.0 %	28 100.0 %
29 91.1 %	30 83.8 %

	Octobre 2008
		1 87.7 %	2 73.3 %	3 86.2 %	4 98.6 %	5 100.0 %
6 82.2 %	7 93.2 %	8 34.4 %	9 69.0 %	10 72.0 %	11 74.0 %	12 100.0 %
13 88.2 %	14 74.7 %	15 86.7 %	16 77.7 %	17 97.5 %	18 100.0 %	19 76.8 %
20 37.4 %	21 61.5 %	22 92.6 %	23 92.0 %	24 63.0 %	25 72.1 %	26 100.0 %
27 44.9 %	28 52.1 %	29 57.5 %	30 42.3 %	31 60.8 %

	Novembre 2008
					1 90.1 %	2 100.0 %
3 58.5 %	4 58.5 %	5 66.3 %	6 0.0 %	7 60.1 %	8 24.5 %	9 0.0 %
10 0.0 %	11 0.0 %	12 50.0 %	13 54.8 %	14 62.2 %	15 75.6 %	16 100.0 %
17 50.2 %	18 44.7 %	19 60.4 %	20 70.9 %	21 71.8 %	22 100.0 %	23 95.1 %
24 39.4 %	25 50.9 %	26 16.8 %	27 9.6 %	28 42.5 %	29	30

	Décembre 2008
1 59.1 %	2 34.3 %	3 27.9 %	4 8.3 %	5 47.8 %	6 89.9 %	7 100.0 %
8 70.6 %	9 17.5 %	10 38.1 %	11 48.3 %	12 20.5 %	13 65.0 %	14 95.8 %
15 25.9 %	16 0.0 %	17 0.0 %	18 44.7 %	19 76.6 %	20 76.2 %	21 100.0 %
22 100.0 %	23 100.0 %	24 100.0 %	25 100.0 %	26 100.0 %	27 100.0 %	28 100.0 %
29 100.0 %	30 86.8 %	31 100.0 %

10. An RSS feed for weather RER

Paul Courbis — 2009-01-01T17:01:33Z

The last recorded events are now available as an RSS feed: You can also add it directly to your iGoogle page

Paul Courbis — 2008-12-29T16:24:39Z

En utilisant l'outil du site "webxrank.com", voici une page de recherche Google enrichie de l'affichage du PageRank des sites et des pages trouvÃ©s... Au passage, on peut constater que le PageRank n'explique pas directement l'ordre des rÃ©sultats proposÃ©s... Le rÃ©sultat de la recherche sera affichÃ© enrichi du PageRank Google (si votre navigateur supporte les cadres (...) - 99. Other software / Copyright, Informatique

03. The account is good for HP48g/gx

Paul Courbis — 2008-08-26T09:09:31Z

On the same principle as the Java applet , you will find attached a program to solve the problem "of the account is good" on HP48g/gx. The principle is the exploration of a comprehensive tree optimized for different possible solutions (this optimization is based on the properties of various operations, such as commutativity of addition for example ...).

The program source code format HPDS
The binary code of the program format GASS (it should be transferred to the string to HP48g/gx in a single line, without spaces or carriage returns, and convert it into an object with the GASS program presented in the book Journey to center HP48g/gx

This program takes as an argument (the stack) the values of 6 numbers and the total starting to find. He presents his successive approximation to the best possible outcome ...

Journey to the Center of the HP28 c / o: we talk

Paul Courbis — 2008-06-27T12:18:26Z

Travis Goodspeed, who translated for his recreation, "Journey to the Center of the HP28c / s" in English, spoke in Las Vegas on this subject at the 16th conference DEFCON (from 8 to 10 August 2008).

Journey to the Center of the HP28

Travis Goodspeed

Security Researcher

In 1990, a wire-bound book published in Paris by WAS The title of "Journey to the Center of the HP28 c / s". It presents a very Thorough account of the Inner Workings Of The Hewlett Packard 28 series of graphing calculators. Designed Before the days of Prepackaged microprocessors, The Series The Saturn uses architecture, Which HP Designed in-house. Cette architecture est trÃ¨s different from today's RISC chips homogeneous, With registers of 1, 4, 12, 16, 20, and 64 bits in width. The Fundamental Unit of Addressing Is The nibble, Rather Than The byte. Floats are Represented as binary-coded decimal, and A Fundamental Object In The Operating System Is an algebraic expression.

This Architecture Is Still Used, Albeit in emulation, in The Modern HP50g. With this talk, I intend "to call attention to a Fascinating, professional, and well-documented feat of reverse engineering. Using Little More Than Their ingenuity and an Apple] [e, Paul Courbis and Sebastien Lalande reverse engineered a black box calculator Into a real computer, one user-programmable Which Became in machine language as a result. More than that, THEY Documented The Hack Such exquisite detail in Their Book That Is Not Just A Fascinating read, true to holy scripture aussi for anyone Trying to write custom software for this machine.

Expect a Thorough Review, in English, of The Content of the Book. This Is not a sales pitch; electronic copies of Both The translation & the original are free to all readers intÃ©ressÃ©e. The topics include datatypes Of The Computer Algebra System, hacking year upgrade Into the memory bus, assemble bootstrapping year, writing in machine language by tables, and Adding an I / O port for software backups.

Travis Goodspeed works at the Extreme Measurement Communications Center of the DOE's Oak Ridge National Laboratory. He has spoken at ToorCon 9 and the Texas Instruments Developer's Conference regarding stack overflow exploits pour la MSP430-based Wireless Sensor Networks. Having Demonstrated That Such attacks are possible, this historical research IS Aimed at porting defense techniques, Such as ASLR and code-auditing, to this platform. For the past year, he has been "translating" Journey to the Center of the HP28 c / s "Fascinating work of Francophone reverse engineering, Into English.

More details ... See the video of the intervention by Travis Goodspeed ...