Handcrating bit flipping machines
Joined February 2021
- Tweets569
- Following22
- Followers1.8K
- Likes12.4K
Today releasing a little reverse engineering wiki/knowledge base: reng.wiki/
A bit empty at the moment, but work in progress. It's open source, feel free to contribute
I found 10 memory-safety bugs in GPAC !
• 7 use-after-free (6 write, 1 read)
• 3 heap buffer overflows
Affecting AV1, AC-3, H.264/H.265, ISOBMFF, scene loading, filtering & HTTP input.
All reported upstream and fixed by the GPAC team. CVEs pending via MITRE.
Root causes, PoCs & patches: 2ourc3.com/
This is what I want to do when I grow up
New exploit: “xor dword [0xf80c2094], 1<<22”
Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.
github.com/xoreaxeaxeax/skit…
For the past few weeks I've been building a fuzzer from scratch in Rust. Today I'm releasing Astra along with a complete write-up that covers the full implementation, check it!
- Repo: github.com/20urc3/Astra
- Article: 2ourc3.com/posts/astra/
Read my latest article: Introduction to root-cause analysis on Linux: 2ourc3.com/posts/post_0x04.h…
Hey fuzzer folks! Want to learn how to use LibAFL ? Check this super exercices made by @addisoncrump_vr
github.com/addisoncrump/park…
Releasing this fun tool Golem based on @0xdea, LLVM, LLM and @semgrep
Golem automates C/C++ vulnerability discovery by combining Semgrep rule scans, LLVM call-graph & CFG slicing, and AI-driven context analysis.
Tool: github.com/20urc3/golem
Article: bushido-sec.com/index.php/20…
Just launched Code Auditor CTF — auditor.codes
A web platform to practice finding real-world C/C++ vulnerabilities
• 8000+ challenges
• Progress tracking + leaderboard
• Beginner-friendly
• Fully open source (beta): github.com/20urc3/auditor.co…
Note: It's a BETA, it's vibe coded A LOT, it doesnt handle any sensitive info, please report bugs if you find some (you will) thanks kiss kiss
Write-up of my v8 bug: Critical type confusion in V8's Turboshaft compiler allowed stale pointers to bypass GC, leading to exploitable memory corruption.
Full details + PoC: bushido-sec.com/index.php/20…
I wrote a comprehensive guide on harnessing libraries for effective fuzzing with AFL++ !
Have a look => github.com/20urc3/Publicatio…
🥳CVE-2024-53589: I discovered a heap buffer-overflow vulnerability in objdump affecting version 2.43, during a fuzzing campaign with
@aflplusplus
More details: bushido-sec.com/index.php/20…
Following 7zip 24.08 release, @thezdi disclosed yesterday my vulnerability in 7zip 24.07: CopyCoder Infinite Loop Denial-of-Service Vulnerability - CVE-2024-11612
I found this vulnerability last summer during a fuzzing campaign with @aflplusplus
bit.ly/4fZUnfz
My talk at lehack! Hacking satellites from SDR to RCE
🇫🇷 Hacking Satellites: From SDR to RCE - Salim LARGO - 2ourc3
youtu.be/AhtTHXyMz9c
