@Bonfee1

Security researcher | CTF @aboutblankets

 EL3
Joined December 2020
  • Tweets28
  • Following261
  • Followers788
9Media
Pwners in Paris
1
9
1,080
Hi @discord! We are hosting @ecsc2024 right now and we have our IP banned, we opened a ticket without answers, can you please write us? DM or [email protected] ⚠️
2
26
7
81
17,069
New faces + old faces, playing DEF CON CTF and @hack_a_sat in parallel. Proud of us. 🍝
2
34
5
198
24,857
Cool kernel pwn challenge from corCTF 2023, CVE-2023-0461 + kCFI + limited set of available syscalls
1
11
155
17,036
Qualified for DEFCON Finals with @aboutblankets and @mhackeroni
7
3
76
12,114
🚩
Marco Bonelli@mebeim29 May 2023
O boi this year we have to play 2 events at the same time :O see you in Vegas! @mhackeroni (🚫🍍)
9
1,630
Lets go 🔥 awesome sleep deprivation weekend 😂
Marco Bonelli@mebeim2 Apr 2023
GG WP! 2nd place at @hack_a_sat 4 w/ @mhackeroni and @aboutblankets ❤️🇮🇹🛰️ now onto hacking a real satellite I guess :')
20
2,141
The challenge was awesome, especially the Hyper-V VM escape part See you in Paris 😄
Hexacon@hexacon_fr3 Oct 2022
Since we are on the home stretch, we will close the challenge on the 7/10/2022 at 20:00 GMT so you'd better hurry😊 We also have our first winner in the student category: @Bonfee1! A big shout out to him, he won fair and square his entry to Hexacon and hotel stay! #HEXACON2022
20
The bug was assigned CVE-2022-0995. Here is the exploit: github.com/Bonfee/CVE-2022-0…. 1 bit oob write is all it takes :)

GitHub - Bonfee/CVE-2022-0995: CVE-2022-0995 exploit

CVE-2022-0995 exploit. Contribute to Bonfee/CVE-2022-0995 development by creating an account on GitHub.

github.com
5
134
10
429
Another Ubuntu 21.10 LPE :) This bug doesn't even have a CVE yet. To pwn it I used the same technique described here: google.github.io/security-re…. I'll clean the code just a bit, before releasing it
15
241
5
741
( Just to be clear, this is not a 0 day, i only saw the commit fixing the bug and developed the exploit for it. )
1
31
CVE-2022-25636 exploit - LPE on Ubuntu 21.10, using the FUSE technique ( which i first saw from @cor_ctf ). I also developed an exploit which is not using FUSE, but for now: github.com/Bonfee/CVE-2022-2…. I'll soon publish a writeup with the exploitation details.
1
12
1
38
It finally arrived :)
21
#nohat @nohatcon
1
20
Really excited to be at @BlackHatEvents #bheu
1
1
18
🇮🇹 #TeamItaly 💻live from #Prague is ready for the @ecsc2021 by @enisa_eu 🇪🇺. Tomorrow the first day of #competition🚩 Good luck to our #team! @CyberChallengIT - @CyberSecNatLab #CyberSecurity #CyberTeamItaly #CyberDefender #ECSC2021
2
14
55
📰Scelta la formazione di @CyberTeamItaly, la squadra dei giovani hacker etici che parteciperanno all'@ecsc2021 di @enisa_eu, la gara per decretare la miglior squadra di hacker in Europa! wired.it/attualita/tech/2021… #CyberSecurity #ECSC2021 @CyberChallengIT @CyberSecNatLab

Scelti i 10 giovani hacker etici del team italiano di cybersecurity

Il Team Italy parteciperà alla European cybersecurity challenge, le gare per decretare la miglior squadra di hacker in Europa, a Praga dal 28 settembre all'1 ottobre

wired.it
1
14
1
43
Il dicastero include i percorsi di formazione in sicurezza informatica del Laboratorio nazionale di cybersecurity tra le competizioni di eccellenza. La decisione mentre si sceglie la rosa del nuovo TeamItaly. wired.it/attualita/scuola/20…

Il ministero dell'Istruzione riconosce borse di studio ai giovani hacker più talentuosi

Il dicastero include i percorsi di formazione in sicurezza informatica del Laboratorio nazionale di cybersecurity tra le competizioni di eccellenza. La decisione mentre si sceglie la rosa del nuovo...

wired.it
14
2
32
CSAW Quals 2021 - Krypto kernel pwn challenge short writeup bonfee.me/2021-09-13-csaw-qu…

CSAW Quals 2021 - Krypto - Bonfee

bonfee.me
6
First "serious" kernel pwn ^^ Learnt lots of new stuff hackthebox.eu/achievement/ch… #hackthebox #htb #cybersecurity
5
Load more