Computer science student @ Unimi. Professional n00b. He/Him
VTL 1
Joined July 2021
- Tweets673
- Following599
- Followers532
- Likes11.3K
LukeGix retweeted
Here's the recording of our talk at REcon 2026, check it out!
The recording of "Deobfuscation in the Age of Agentic Reverse Engineering" is now public:
youtube.com/watch?v=3-gJ6EUF…
We (CC @nicolodev) show how to use agents to break protections found in anti-cheats, DRM systems & commercial protectors.
Slides: synthesis.to/presentations/r…
LukeGix retweeted
The final boss in the 2000 Spider-Man game is Monster Ock, and this chase used to spike my anxiety as a kid.
LukeGix retweeted
1day.dev/posts/linux-kernel-…
I was working with some 0-days lately, and one of them was for the pwn2own. Although the registration process did not go as expected, the bug remains particularly interesting from an exploitation perspective. [1/2]
Excited to share this! Zombie COTables: Resurrecting Freed Memory to Escape VirtualBox. This blog post describes the exploitation process of a use-after-free vulnerability in the SVGA subsystem to achieve code execution on the Linux host machine. Enjoy!
blog.exodusintel.com/2026/06…
LukeGix retweeted
If you want to see how one incorrectly placed exclamation mark in the Linux kernel's nftables subsystem can lead to a local privilege escalation, have a look at my blog post. It covers a technical analysis of the bug I found and how it can be exploited
blog.exodusintel.com/2026/06…
LukeGix retweeted
We’re opening the Exodus research vault.
Over the coming weeks, we’ll publish technical writeups highlighting vulnerability research, exploit development, and deep reverse engineering from our team.
First up: Michele Campa’s Adobe Acrobat Reader Escript.api use-after-free RCE.
blog.exodusintel.com/2026/06…
#VulnerabilityResearch #ExploitDevelopment #ReverseEngineering #OffensiveSecurity #CyberSecurity
LukeGix retweeted
Half satisfied because a zero day I found in February 2025 has unluckily been patched in April 2026 😢, it was a tricky use-after-free in Adobe Acrobat Reader's Escript.api 😄. Here is my write-up, with a video PoC popping calc as a bonus: blog.exodusintel.com/2026/06…
LukeGix retweeted
It’s me!
Pedal to the Metal: Accelerating to the Host via VirtualBox VMSVGA by @terrynini38514 and @xiaobye_tw
LukeGix retweeted
Mind blown alert 🤯! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG (@starlabs_sg) used a Memory Corruption bug to exploit VMware ESXi with the Cross-tenant Code Execution add-on, earning a sweeeeeet $200,000 and 20 Master of Pwn points. Full win let's go! #Pwn2Own #P2OBerlin
LukeGix retweeted
MASSIVE AURA POINTS! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG was able to exploit VMware ESXi! If confirmed, they win $200,000 and 20 Master of Pwn points. They're off to the disclosure room to explain how they did it and seal the deal. #Pwn2Own #P2OBerlin
LukeGix retweeted
REcon is right around the corner. Early-bird training pricing has been extended, and conference tickets remain at March rates until May 11.
Conference: June 19 to 21 2026
Training: June 15 to 18 2026
Location: Montreal, Canada
Heads up: hotel booking cutoff is next week too.
If you live in IDA, Ghidra, or a debugger, this is your conference. recon.cx/2026/en/index.html #REcon #RE #reverseengineering #InfoSec
LukeGix retweeted
A zero day I found last year has been patched on October (CVE-2025-55680) :(, it was a nice and easy patch bypass. Here the write-up blog.exodusintel.com/2025/10…
LukeGix retweeted
We dissect a DFG compiler bug we discovered in Safari/WebKit. This post covers root cause, impact, and technical analysis:
blog.exodusintel.com/2025/08…
#WebKit #VulnerabilityResearch #ExploitDev #Safari #CyberSecurity #ExodusIntel
