<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
  <channel>
    <title>Pine Space</title>
    <link>https://pine.space</link>
    <description>Engineer &amp; writer. Fast, considered things for the web.</description>
    <item>
      <title>Flare-On 11: Frog</title>
      <link>https://pine.space/blog/flare-on-11-frog</link>
      <guid>https://pine.space/blog/flare-on-11-frog</guid>
      <pubDate>Sun, 20 Oct 2024 00:00:00 GMT</pubDate>
      <description>When the maze has no solution, don&apos;t play the game — read the source and call the win function yourself.</description>
    </item>
    <item>
      <title>Huntress CTF 2024: warmup write-ups</title>
      <link>https://pine.space/blog/huntress-ctf-2024</link>
      <guid>https://pine.space/blog/huntress-ctf-2024</guid>
      <pubDate>Mon, 14 Oct 2024 00:00:00 GMT</pubDate>
      <description>Nested QR codes, a cattle-themed esolang, a shop with no input validation, and an SGID find binary.</description>
    </item>
    <item>
      <title>How C2 frameworks work</title>
      <link>https://pine.space/blog/intro-to-c2</link>
      <guid>https://pine.space/blog/intro-to-c2</guid>
      <pubDate>Tue, 10 Sep 2024 00:00:00 GMT</pubDate>
      <description>Servers, agents, listeners, beacons — the moving parts of command and control, and how attackers hide the traffic.</description>
    </item>
    <item>
      <title>Container security: escapes and hardening</title>
      <link>https://pine.space/blog/container-escapes</link>
      <guid>https://pine.space/blog/container-escapes</guid>
      <pubDate>Thu, 15 Aug 2024 00:00:00 GMT</pubDate>
      <description>Four ways a misconfigured container hands you the host — and the full set of switches that lock it back down.</description>
    </item>
    <item>
      <title>Detecting Windows persistence with Splunk</title>
      <link>https://pine.space/blog/splunk-persistence-detection</link>
      <guid>https://pine.space/blog/splunk-persistence-detection</guid>
      <pubDate>Sat, 20 Jul 2024 00:00:00 GMT</pubDate>
      <description>Two MITRE persistence techniques, the Sysmon events they leave behind, and the SPL to catch them.</description>
    </item>
  </channel>
</rss>
