@Rotcee_

0x13 / Just a freak

rotcee.github.io
Joined April 2026
  • Tweets14
  • Following232
  • Followers128
1Media
Some of the stuff I've been working on lately
1
3
132
This problem that appeared yesterday seems to have been fixed. Yesterday it wouldn't let me do anything, but today it's working as usual again.
Migel Tissera
@migtisseraOct 8
What the hell man? Current state of Western "Frontier" AI. Daybreak Blue, using a 3 generations older model. I even have the HackerOne submission open on the in-app browser. Codex can even read (and have read) the submission. I can't even get help to submit a (CRITICAL!) vulnerability.
2
5
1,105
🍎🐛 I got Claude making this, maybe it's useful for others as well. Every Apple security advisory since 2002 - parsed, indexed, charted. With links to writeups, POCs and presentations. apple-cve.com/

APPLE·CVE — every Apple security advisory, indexed

Search, filter and chart every CVE in Apple's security release notes since 2002.

apple-cve.com
13
54
5
295
25,514
Rotce retweeted
0xedh@0xedhAug 7
You don't need a USB. You need to look like one. Emulate the device, Windows fetches a signed package off Windows Update and runs vendor code as SYSTEM. Arbitrary code execution, LPE, standard user or empty logon screen. DEF CON 34 talk w/ @Qm9yamFN. Link at the first comment.
17
267
14
1,268
144,452
Hi everyone! I’ve just updated the first post on my blog with the writeup for CVE-2026-12495: "Hardware Hacking: From zero to a Pre-Auth Stack Buffer Overflow on Amazon's best-selling router." Go check it out! rotcee.github.io/posts/analy…

Hardware Hacking: From zero to a Pre-Auth Stack Buffer Overflow on Amazon’s best-selling router

This will be a blog series where we’ll do a deep dive into the Mercusys MB115-4G router, which, as of today (02/17/2026), is the best-selling router on Amazon Spain. In this first post, we’ll cover...

rotcee.github.io
17
1
100
7,064
Hi everyone! CVE-2026-50458, a Windows kernel 0-day I discovered a few months ago has been patched by Microsoft in this month's Patch Tuesday. You can read the in-depth analysis here: rotcee.github.io/posts/CVE-2…

CVE-2026-50458: Finding a UAF in the Windows Brokering File System

On Tuesday, July 14, Microsoft released the largest Patch Tuesday update in its history, fixing more than 600 vulnerabilities. A bug I reported to Microsoft on May 17 was patched as CVE-2026-50458 in...

rotcee.github.io
3
50
202
9,045
Rotce retweeted
ö@r0kebJul 22
Hope you guys enjoy this read!
Calif
@calif_ioJul 22
Dark Elevator: Windows Install Service Local Privilege Escalation (CVE-2026-50343) A pure-logic, 100% reliable path from a normal user to SYSTEM on Windows 11. Full write-up: open.substack.com/pub/calif/…
1
9
1,442
CVE-2026-42980, a Windows kernel WMI integer-underflow vulnerability that can be exploited for local privilege escalation to NT AUTHORITY\SYSTEM on vulnerable lab builds. github.com/G4sp4rCS/CVE-2026…

GitHub - G4sp4rCS/CVE-2026-42980-POC: CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH

CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH. Contribute to G4sp4rCS/CVE-2026-42980-POC development by creating an account on GitHub.

github.com
48
194
10,883
Rotce retweeted
Calif
@calif_ioJul 16
In case you missed it, the recording is up: youtube.com/watch?v=maWnIKH3… @5aelo Thank you so much! We'll name one of our chains after you.

Meet the Hackers: Samuel Groß | State of Browser/JavaScript Engine Exploitation

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

youtube.com
1
32
2
117
22,287
Hi everyone! I've published a new post: "Achieving SYSTEM with WNF, I/O Rings and ALPC from a Paged Pool Overflow. Does it ring a bell?", where I explain various techniques and objects used in modern Windows kernel exploitation. Hope you enjoy the read! rotcee.github.io/posts/archi…

Exploit Development: Achieving SYSTEM with WNF, I/O Rings and ALPC from a Paged Pool Overflow. Does...

Introduction In this blog I am going to explain several objects and exploitation techniques that are pretty well known when exploiting the Windows kernel paged pool. For the bug itself I will use one...

rotcee.github.io
2
273
Rotce retweeted
Calif
@calif_ioJun 1
RedSun: Exploiting Windows Defender's Remediation Workflow for Local Privilege Escalation Just showing some appreciation for @ChaoticEclipse0's excellent work. Hopefully this won't get us banned! open.substack.com/pub/calif/…

RedSun: Exploiting Windows Defender's Remediation Workflow for Local Privilege Escalation

Just showing some appreciation for Nightmare-Eclipse's excellent work. Hopefully this won't get us banned!

blog.calif.io
1
46
3
164
19,197
Hi everyone! I've published a new post: root cause analysis of CVE-2025-62454, a heap buffer overflow in the Windows Cloud Minifilter Driver. Hope you enjoy the read! rotcee.github.io/posts/n-day…

N-Day Research: CVE-2025-62454 Root Cause Analysis. Understanding a Heap Buffer Overflow in the...

Introduction

rotcee.github.io
3
189
Load more