3psln retweeted
I've finally published the write up on my Pwn2Own exploit!!!
github.com/newbe3e/Pwn2Own-A…
(image unrelated)
3psln retweeted
🚨 $15,000/MONTH — WE’RE HIRING AN ANDROID SECURITY RESEARCHER
At ZeroZenx, we don’t care about diplomas. We care about what you can actually do.
🎓 No degree required.
📜 No baccalaureate required.
💻 Experience and proven skills matter more than academic qualifications.
We’re looking for an experienced Android security researcher with a proven track record of impactful security discoveries.
What your CV must include:
- 🔬 Public technical write-ups of your research.
- 🩹 Patch diffs from vulnerabilities you discovered or helped fix.
- 📱 Demonstrable Android security research experience.
- 🛠️ Technical projects and documented achievements.
💰 Compensation: $15,000 per month.
We value real-world expertise, original research, and results — not certificates or academic titles.
Think you have what it takes?
📩 Send your CV and research portfolio to: [email protected]
#ZeroZenx #Hiring #AndroidSecurity #SecurityResearch #Cybersecurity #jobs
3psln retweeted
Here's some of the research I've done into AI and LLMs over the past year:
blog.zsec.uk/bullyingllms/ - Building MCPs
blog.zsec.uk/harnessing-harn… - What makes up a harness
blog.zsec.uk/ai-assisted-dev… - Building tooling
#infosec #llm #vulnerabilityresearch #MCP #harness
3psln retweeted
Just $5k #bugbounty for a vulnerability that exposed 17 Trillion Microsoft records :( 🤯
blog.faav.net/how-i-couldve-…
Great find by @efaav, a talented 15 y.o. researcher!
3psln retweeted
CSIRT関係者各位。AI自律ペンテストの ARTEX（Autumn-27/ARTEX）が本家ごと削除されましたが、AGPL-3.0なので実質復元可能な状態が残ってました。取り損ねた人はちゃんと取得しておきましょう。敵の手段知るの超重要。
・Hinln/ARTEX が v0.3.15時点のコミット履歴とライセンスを保持したバックアップを公開
・Software Heritage が削除前(10/7)に status:full でスナップショット取得済み
・韓国語版/英語UI版など upstream明記のforkも生存確認済
AGPLのコピーレフトは「消す自由」まで保証しない、という実例ですね。消える前に手元にcloneしておくかどうかは、ライセンスより運用の問題です。
github.com/Hinln/ARTEX
3psln retweeted
New CloudPEASS release! K8s-PEAS is the new Red Team k8s script from github.com/peass-ng/CloudPEA…. Use it to find the permissions of a compromised principal in a kubernetes cluster during a Red Team.
If you want to learn kubernetes Red Teaming check: hacktricks-training.com/cour…
3psln retweeted
We just received a $250,000 Chrome Full Chain bonus! 🎉
We've claimed the second Full Chain bonus of 2026. Only two remain!
Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched.
Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research.
P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!
3psln retweeted
Interesting
beaksec.github.io/posts/tele…
3psln retweeted
Puzzle is a set of PoCs and utilities that make it possible to abuse functionality provided by several Windows minifilters when executing malware in monitored environments.
Github:- github.com/Kudaes/Puzzle.git
3psln retweeted
A Havoc C2 plugin that creates an invisible alternate Windows desktop, streams it to a browser-based viewer, and supports full mouse/keyboard interaction like RDP, but invisible to the target user. Created by dagowda.
Github:- github.com/dagowda/notRDP.gi…
3psln retweeted
A quick article showing how the Jev OPSEC ranker works, and looking at how Jev can be used for identifying potentially sensitive file paths and content at speed.
3psln retweeted
Guess what... @fortraofficial / @_ZeroPointSec are looking for a new content developer to join our ranks.
fortra.wd12.myworkdayjobs.co…
3psln retweeted
Hello, Little People Living Inside My Computer,
I have made a YouTube account to discuss malware reverse engineering and development. It will primarily target noobs. It will be lighthearted, poorly produced, and spontaneous.
youtube.com/@MalwareForFun
