<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
  <channel>
    <title>Pine Space</title>
    <link>https://pinespace.dev</link>
    <description>Software Engineer</description>
    <item>
      <title>Frog</title>
      <link>https://pinespace.dev/blog/flare-on-11-frog</link>
      <guid>https://pinespace.dev/blog/flare-on-11-frog</guid>
      <pubDate>Sun, 20 Oct 2024 00:00:00 GMT</pubDate>
      <description>When a maze has no solution, read the source and call the function that generates the answer.</description>
    </item>
    <item>
      <title>Huntress CTF 2024: warmup write-ups</title>
      <link>https://pinespace.dev/blog/huntress-ctf-2024</link>
      <guid>https://pinespace.dev/blog/huntress-ctf-2024</guid>
      <pubDate>Mon, 14 Oct 2024 00:00:00 GMT</pubDate>
      <description>Nested QR codes, a cattle-themed esolang, a shop with no input validation, and an SGID find binary.</description>
    </item>
    <item>
      <title>How C2 frameworks work</title>
      <link>https://pinespace.dev/blog/intro-to-c2</link>
      <guid>https://pinespace.dev/blog/intro-to-c2</guid>
      <pubDate>Tue, 10 Sep 2024 00:00:00 GMT</pubDate>
      <description>The main parts of command and control, how they communicate, and how frameworks vary the timing.</description>
    </item>
    <item>
      <title>Container security: escapes and hardening</title>
      <link>https://pinespace.dev/blog/container-escapes</link>
      <guid>https://pinespace.dev/blog/container-escapes</guid>
      <pubDate>Thu, 15 Aug 2024 00:00:00 GMT</pubDate>
      <description>Common container escape paths, the conditions they need, and practical ways to reduce the risk.</description>
    </item>
    <item>
      <title>Detecting Windows persistence with Splunk</title>
      <link>https://pinespace.dev/blog/splunk-persistence-detection</link>
      <guid>https://pinespace.dev/blog/splunk-persistence-detection</guid>
      <pubDate>Sat, 20 Jul 2024 00:00:00 GMT</pubDate>
      <description>Two MITRE persistence techniques, the Sysmon events they leave behind, and the SPL to catch them.</description>
    </item>
  </channel>
</rss>
