nullsecurity.org/home

Special announcement

You might have noticed that lately this site is surprisingly stable and the so-called "sleeping" message by 000webhost.com is gone.
News is, I moved out from 000webhost free services and went with GoDaddy's paid hosting.
The whole idea of this website was to be a self sustainable system, where I can publish my intellectual farts to the open public and cover my expenses by donations.

Of course, the site is too small and unpopular to be a "self sustainable", so I was trying to keep it as close to the 0$ price and using 000webhost free hosting was a good start.

Back in 2010 and 2011, 000webhost was offering excellent free hosting services, that was perfect for small projects like this one here. Years passed by and just recently, the change of their terms of service (and overall their business politics) made things rough for their free hosted users.

First problem that I encounter, was their major client system update, when the old sites had to be manually migrated to the new system. That's right - everyone using their free (and probably paid) services had to basically migrate his website from 000webhost server A to 000webhost server B.

That included the need of registering, this time on their new system, and basically go through the whole sign up procedure again.

The first red flag was the fact that I wasn't being able to register using my domain name - nullsecurity.org because according to their new system that's a potentially scamish website name, no matter that 2 days ago there was no such problem with their old system, for the past 5+ years.

Trying to sort that problem out with the tech support was the second red flag. There's no longer any tech support for their free services and the only option left for us free users was to use their forums, where some third party user (totally not affiliated with 000webhost) will try to help with a solution.
You might already guessed that this does not work - a guy that has no affiliation with a remote service cannot troubleshoot internal problems of that remote service.
Eventually a lot of users start complaining that they cannot re-register (for example websites which names containing the word "apple" were blacklisted), so the real tech support had to take action and removed or temporary disable that nonsense of a rule.

The third red flag was when 000webhost introduced the "website sleeping" hour: "From November 1, 2017 every website hosted on a free 000webhost platform will get 1 hour of sleep every day."
So, the free hosted sites are going down for a hour each day, to, and I quote that - "make the platform more stable". That was of course a ridiculous excuse, when you just advertise your latest major upgrade and in the same time, claim for a 99.9% uptime.
This last major change also changed their ToS, and from a free web hosting they are now "learning" platform, that by their words means the 000webhost free hosting service is designed for people learning web coding, where they can upload their projects. In the same time, from their ToS we read that it's prohibited user web sites to "Contains or installs .exe, .apk, .dmg, .cmd, .com, .bat, .osx, .msi, .app files;", which contradicts with the "learning" thing.

All this ended up to the point where for three continuous days, my website was either timeouting or sleeping. In the end it even got suspended, that turned out to be a false flag, because the devs of 000webhost just decided to use the "your site is suspended for ToS violation" message as a placeholder text when their service totally crash down...

So I had enough of this bullshit. The whole thing with "we are now learning platform, or you might upgrade to a paid plan", "free sites will be sleeping, or you might upgrade to a paid plan" and "there's tech support for paid users only" was pretty obvious - move to our paid services.
That's perfectly fine - a ~100$ for a year of paid hosting is fine, but dear 000webhost - grow a pair and put the things straight, without bullshitting and bashing your free users you are so proud of and mention every time in your advertisements.

If you get to here and want a bit more, here you can download a copy of the forum thread that I started, and that eventually got deleted along with my profile at 000webhost's forums.

* don't display this announcement in future (uses cookes)

Latest articles

ESET - Malware analyst challenge 31 Jul, 2018

I finally decided to try this one. Ok I lied. I tried it like, 2 years ago but never finished it, so the time has ...

crackmes.one : TheClueCreator's AGZ Crackme 5 3 May, 2018

Seems like I got the Stockholm syndrome, because even thought I dislike Java (and I really mean it), I'm starting to enjoy reverse engineering it. That's a terrible perspective and I should fight it ...

crackmes.one : noverify's GraxCode's Java CrackMe 1 1 May, 2018

How i defeated the GraxCode's obfuscation and solved the ...

Battelle: Cyber Challenge 1 Dec, 2017

I was again lurking for sweet, sweet reverse engineering challenges and stumbled upon these, released by Battelle. They have a set of challenges - one for reverse engineering, one for shellcode ...

Ceaser Creek Software RE challenges 26 Nov, 2017

Just recently I found this challenge released by Ceaser Creek Software - a Ohio based software security company. The challenge is designed as entry level "interview" for potentially new ...

HackThisSite.org - Application challenges 19 Nov, 2017

This is something I was planning for a long time. THIS ARTICLE IS A GIANT SPOILER! If you haven't completed the achievements already but plan to do it some day, you should stop reading ...

Reverse engineering REALbasic applications 15 Jul, 2017

I was fiddling around with the application challenges of HackThisSite.org and it turned out the first few are compiled with REALbasic. Throwing in in IDA didn't help a lot, so here's an article ...

Old threat in new pants (the NRA trojan) 22 Mar, 2017

The good old scaremongering threat, targeting the Bulgarian users has returned, and this time it's in brand new ...

7Script.exe - Reverse engineering the license scheme 15 Mar, 2016

You know what's stupid in multiplayer games? Cheating. You know what's even worse? Selling cheat tools to assholes who cant play. So, in the next "few" lines, I'm about to take a look at a cheat ...

MiniPro : Reverse engineering the InfoIC.dll 13 Sep, 2015

From quite some time already I got interested in the art of electronics and more specifically into hardware reverse engineering. Since I'm mostly interested in the device's firmware, I have to deal ...

In depth analysis of malware obfuscations 9 Aug, 2015

I've started this article with the idea to throw some light on the latest malware obfuscation ...

crackmes.de : Grzzlwmpf's CrackMe 5 Jan, 2014

A stretchy, but full solution to a .NET CrackMe by ...

crackmes.de : MaxXor's KeygenMe V6 27 Dec, 2013

Solution to MaxXor's KeygenMe V6, including full list of valid serials and keygen ...

crackmes.de : CrackMe v1.1 by Greedy_Fly 16 Oct, 2013

Here's how i defeated that challenge. The crackme is seems to be written in assembly language (MASM/FASM?) so the code is pretty clear. As usual I've loaded the EXE in ollydbg to take a quick look ...

Soldier of Fortune - bugfix 3 Apr, 2013

I'm continuing to play outdated games, and after completing Max Payne, I've remember about another first person shooter classic - Soldier of ...

Command & Conquer - map corner bugfix 24 Mar, 2013

While playing the first game of the series (the one released back in 1995) I've encountered a really annoying bug, when trying to unveil the fog of war in the map ...

Predicting numbers - Visionaire 3.x XOR encryption 23 Feb, 2013

I wanted to write this one, as a hint to everyone interested in cryptography and breaking into algorithms. It might not cover your current task, but at least you may get an idea for a exploit ...

DirectMusic under Windows 2003 20 May, 2012

Ever tried to play old games on a nowadays machine without any problems? Well yesterday I was bored and decided to play "Battlefield 1942". After executing BF1942.exe the screen just blinked for a ...

"The big bang theory" easter egg (sort of) 19 Mar, 2012

At the beginning of episode 5 from season 5, the scene where Wil Wheaton enters the shop, there is a large QR code on the seller's ...

Botnet analysis PictureXX.JPG 12 Mar, 2012

Few people already send me a samples of this one few weeks ago, so i decided it will become a nice material out of ...

Zeit² [squared] - rebuilding your own Zeit2.resources.dll 30 Nov, 2011

So you like modding games, eh? Here's something for anyone interested in translating Zeit2. By default the game comes with the following languages included - English(Default), Spanish, Italian, ...

Code obfuscation and Lighty Compressor unpacking 25 Oct, 2011

After a week spent in analyzing, screenshooting, writing (and other things that i don't want to mention), i gladly present you this interesting material about defeating code obfuscation and "Lighty ...

Extracting SWF from Flash Projector 25 Sep, 2011

Ever wondered how to extract a SWF file from Adobe's Flash Projector? There is already both free and paid (LOL!) programs which should do the trick, but it's so easy that it doesn't worth the effort ...

"A New Beginning" - PNG fixing 16 Aug, 2011

A few days ago while unpacking some VIS3 archives from the game "A New Beginning" I noticed that all of its PNG files were broken. And by broken I mean you can't view them nor edit them. Seems like ...

Torbutton 1.4.0 toggle button fix 4 Jul, 2011

Today I noticed that when you click on Torbutton with the left mouse button instead of starting the TOR support, a menu pops up - the same menu that you usually see when you click with the right ...

Chatbox

Guest: у

XpoZed: "Cannot Load Module". Make sure you are not trying to use new modules with the old Unpakke

Guest: Hi! What does mean UPKK!CLM

XpoZed: more details? what unpakke version are you using and which module you are trying to use

Guest: Here

Guest: no modules found..help?

XpoZed: click on "API Reference" under the download link

Guest: where is the user manual

Guest: If you need it for Just Dance pictures have extensions *.png.ckd and *.tga.ckd and can't be packed and unpacked with Ubisoft IPK module

XpoZed: do you have zlib1.dll in your /lib folder?

Guest: I did that and the filesize remains the same. nothing was compressed

XpoZed: open the unpakke.ini file that comes with the module and add the extensions you want to get compressed to the "compress" array

Guest: Hi! I'm using the Ubisoft IPK module, I was wondering if there is a way when packing to compress textures?

Guest: GoDaddy are same shit..

XpoZed: nah, QuickBMS is pretty good for what it's designed for ;)

Guest: Xpozed, you are a saint. Fuck QuickBMS, this is better in every way, shape, and form.

Guest: But I'm trying to do it.

Guest: No, this is just tool to do so.

Guest: Are people here trying to mod Just Dance?

XpoZed: you are quite possibly doing something wrong in the unpacking/packing process

Guest: hyeee

Guest: Hey XpoZed, I'm using you're Ubisoft IPK module. It works, but when I pack new IPK and test it in Just Dance there is no feedback nor pictos. I just extracted it and repacked it without changing any files.

XpoZed: the files i wasn't able to resolve were never been used in a normal playthrough, so they might be leftovers by the developers

Guest: XpoZed, I think i read that there are still some files that you do not unpack with path/name. How difficult would it be for me to use the game files I have to fill in the gapsto unpack with all files named?

Guest: ha just saw your beer reference

Guest: XpoZed, sweet the correct zlib1.dll fixed both issues. Love you man but youstill cannot have my beer.

XpoZed: As for the second question (that i guess is from a different guy) there should be a filename database in the module archive. You need to update your unpakke.ini to enable the filename database that will fix the filenames. Overall - read the readme.txt that comes with Mad Max module.

XpoZed: I've updated the zlib1.dll link so you can now directly download it

Guest: I got the x86 latest and renamed it which lets unpakke run and unpack the tab/arc files if I select the arc file. the result however are hash named files of little use. My reason for attempting to look through the game files is create a comprehensive list of encounter and mission information to be used towards acheiving a 100 percent game compltion. Hmmm OCD.

Guest: XpoZed thanks for the response. Is there an actual link to a file name zlib1.dill at zlib.net? Sorry for being newbish but I cannot see it.

XpoZed: as for zlib1.dll, it's available for download from zlib's official site

XpoZed: the unpakke version specified in the table is "minimum" version, so using the current one will work

Guest: Other guest this is guest. Where did you find an actual library named zlib1.dll?

Guest: My other question regards the library zlib1.dll. Which version exactly is that and do I need to rename it. The linked page does not have a zlib1.1 link that I can find.

Guest: Hello, I just begun messing with unpacking Mad Max and need to verify the correct version of unpakke. The table of supported games specifies 1.1 but there is not link for that version.

Guest: Hello XpoZed and thanks for this great tool. I'm trying to unpack the Mad Max files and Unpakke creates proper folder and file structure, however if I open any of the files in notepad++, all files are full of "NULLs". Am I doing something wrong? I put the Mad Max module (avalanche.umod and other files) inside the modules folder, updated the ini file, and also put ZLIB1.DLL inside libs folder.

Guest: Can you create new files with Unpakke

Guest: reeee

Guest: Do you think you can help me?

Guest: Hello, so i tried to unpack the .vis file of Anna's Quest, and it worked, but I couldn't find any text file. I'm trying to translate the game in Bulgarian.

Guest: There have hackers?

Guest: where to put modules?

Guest: nevermind i think i found where to download these

Guest: Hello, i'm looking for a mod that helps me unpack .vis files

Guest: :(

Guest: i need help

Guest: hi

Guest: Hello?

Guest: Thank you

XpoZed: check file extensions, google it, you know - do a basic research

Guest: How to check engine?

XpoZed: since the game is not listed in the supported games list, your best bet would be to check what engine it uses and use a matching module

Guest: Umm... What "umod" need to "The Adventures of Tintin"?

Guest: FBQ

Guest: ты обкаколся

Guest: ge

Guest: Hi how i can open file type vbf ?

XpoZed: from zlib's official website and many other places?

Guest: Where can I download zlib1.dll?

Guest: gg

Guest: Hi

Guest: 68cf1000

Guest: deponia

Guest: how to opemn .bf files ?

Guest: <script>alert("XSS fail!");</script>

Guest: is there a way to replace only the files i want to and not to replace other files

Guest: v

Guest: repack

Guest: Rayman legends

Guest: MiniPro

Guest: XpoZed, you're a fucking autistic faggot. Go back to /r9k/ or get a life plspls.

Guest: cancer

Guest: <sarc> nice website </sarc>

Guest: line up the blowjobs

Guest: ping -l 65510 www.fbi.gov

Guest: c:concon ath0++

Guest: You love cock

Guest: hi

XpoZed: Since this chatbox will soon be removed, you should consider joining the Discord!

XpoZed: do you really think I'll leave unsanitized fields literally on the frontpage? :|

Guest: "</p></div></div></div></div>

Guest: </p></div></div></div></div>

Guest: asdasdf

Guest: jn

Guest: huh

XpoZed: read the requirements

Guest: putting it in the modules folder doesn't seem to work

Guest: trying to use the rayman origins module

Guest: huh

Guest: hi

Guest: test

Guest: Hi

Announcements

As you may have already noticed, I made a few changes on the site.
Before anything else and to keep it clean from the beginning, be sure to read the "terms and rules" of the site (there's a link down there). So, whats new?
• The look obviously, made by me in 2 days and the design skills of a sea snail. You either like it or hate it - I really don't care. If you like it however, you can still buy me a beer...
• You can now register an account on the site. Thats the only way to use a nickname on the chatbox or comment boxes. Otherwise, you will appear as "Guest". Ofcourse thats not the only reason you should consider registering. In the near future I am going to add a message board for better communication and few challenging additions, so it's up to you.
• The old shoutbox is now transformed into chatbox. Use it wisely, and don't type BBCode in it, or you may get automatically banned.

I think that's all that's interesting to mention here.

Now have a nice time at nullsecurity.org

login

register

Special announcement

Latest articles

Chatbox

Announcements