@VirtualPr0tect

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Joined July 2022
  • Tweets106
  • Following907
  • Followers320
5Media
Here at @hexacon_fr Orange Tsai just showed us how to pop calc from Edge with only logic bugs... and then how to pop Edge from calc ☠️ LMAO
4
50
3
483
20,275
Reported another windows kernel LPE
8
20
314
18,709
2 project, different bug class, yet claude spent hours of research and exploit dev around rabit holes or bugs that depends on sudo priv as a pre-req. Maybe we are not that much over.
1
516
It's over guys. I take my words back
383
Reported my first windows kernel LPE.
11
38
1
675
28,955
Replying to @april_ivyyy
If you're asking about Windows, this talk I gave last year could be relevant. The specific examples I give here have been fixed but there used to be others and new cases appear once in a while youtube.com/watch?v=Dk2rLO2L…

BlueHat IL 2025 - Yarden Shafir - Look, Ma—No Privileges! How Windows...

Look, Ma—No Privileges! How Windows Gives You Kernel Pointers (Even...

youtube.com
1
16
59
5,407
0pcod3 retweeted
cr3ghost
@cr3ghostJun 21
How PatchGuard detects hypervisor-based hooks. Written by two Riot Games Anti-Cheat Engineers. Some of the most underrated researchers in the Windows internals and kernel/hypervisor security space. Microsoft embedded multiple detection techniques inside PatchGuard to catch hypervisors hiding the real LSTAR MSR value. Trap flags, MOV SS tricks, ICEBP edge cases, LSTAR shadowing, and deliberately triggered page faults that expose the real syscall handler address. Part 2 includes a custom detection technique with a full working PoC. Part 1: revers.engineering/patchguar… Part 2: revers.engineering/patchguar… PoC: github.com/ajkhoury/Errata13… Authors: @nickeverdox @aidankhoury #WindowsInternals #ReverseEngineering #AntiCheat
cr3ghost
@cr3ghostJun 8
If you have ever wanted to learn reverse engineering but had no idea where to start, this is probably the best free series out there. Applied Reverse Engineering by @daaximus covers basic architecture, the stack, exceptions and interrupts, x64 assembly, control-flow tracing, and more still coming including hooking techniques, ROP, heuristic analysis, and C++ class reconstruction. Written for people who have opened a debugger a handful of times and got lost. Starts from zero and actually makes sense. revers.engineering/applied-r… #ReverseEngineering #WindowsInternals #InfoSec
4
67
466
33,231
StepStone: LLM-Based GPU Kernel Driver Fuzzing via User-Space Libraries Paper by @ETenal7 et. al about using LLMs for generating syzkaller descriptions for fuzzing GPU drivers via their userspace libraries APIs. cs.ucr.edu/%7Ezhiyunq/pub/oa…
2
31
2
122
10,287
All the defenses you must break to exploit Chrome
21
123
7
1,060
62,510
0pcod3 retweeted
nopnop
@__nopnopMay 22
That’s what you can achieve when you actually learn the target. Crazy good article and bugs.
skull
@brutecatMay 22
StubZero: $148,337 RCE in Google Cloud Production brutecat.com/articles/google…

StubZero: $148,337 RCE in Google Cloud Production

A chance Discord message, two missing pieces, and one hour before the window closed: From info leak to RCE on Google Cloud. Three months later, it happened again.

brutecat.com
3
45
9,675
the engineer who built Claude Code just dropped a 28-minute video on how to write prompts that actually work I've seen $300 courses that don't cover what he shows in the first 10 minutes CLAUDE.md files, memory shortcuts, parallel sessions, prompting patterns all in one video and completely free works whether you're a developer, a beginner, or someone who's been using Claude for months based on this, I put together 18 things you can copy and use in Claude today full guide in the article below
Anatoli Kopadze
@AnatoliKopadzeMay 13

How to Actually Use Claude. 18 steps that unlock 100% of its potential

Article · @AnatoliKopadze
223
4,104
74
24,031
6,347,275
Master oogway
Orange Tsai 🍊
@orange_8361May 14
That's my chain — a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all 😉
830
0pcod3 retweeted
stratan@5tratanMay 2
Introducing What The Claude: Browser Edition. A series where we pick apart browser bugs found/reported by Claude. First up: CVE-2026-2796, a SpiderMonkey Wasm import bug that leads to addrof/fakeobj/read-write. github.com/str8outtaheap/pub…
2
26
118
12,065
🤵 Keynote #2 at #FUZZING'26 is online Where the Fuzz Are We Going? by Sergej Dechand (@CI_Fuzz). youtube.com/watch?v=yp-AKW36…

NDSS 2026 - FUZZING 2026, Keynote 2 by Sergej Dechand

Fuzzing Workshop (FUZZING) 2026, co-located with the Network and Di...

youtube.com
2
19
52
9,194
0pcod3 retweeted
Mira@_miraarim_Apr 25
interestingly, kernel anti-cheats share many similarities to EDR. the conclusion is that the ultimate cheat is an vision based llm controlling the inputs, which is similar to web-scraping. thanks for the writeup and insights @s4dbrd! s4dbrd.github.io/posts/how-k…

How Kernel Anti-Cheats Work: A Deep Dive into Modern Game Protection

Modern kernel anti-cheat systems are, without exaggeration, among the most sophisticated pieces of software running on consumer Windows machines. They operate at the highest privilege level available...

s4dbrd.github.io
4
52
346
16,135
Finally, it is published 😁 Making Vulnerable Drivers Exploitable Without Hardware - my latest research on driver vulnerability hardware-gating, explaining the concept of hardware-dependent code and diving deep into creative deployment techniques - software-emulated phantom devices, driver restacking, and forced driver replacement — all explored through the lens of Bring Your Own Vulnerable Driver (BYOVD) attacks: atos.net/wp-content/uploads/…
5
90
5
418
97,605
I've been building libghidra: a typed SDK for automating Ghidra from C++, Python, and Rust (mainly for AI agents). Decompile, rename, comment, inspect symbols/types/xrefs, save, close, and reopen projects from code. Treat Ghidra like infrastructure, not just a GUI. Under the hood this is a typed API surface over a Ghidra host/extension. The same core workflows exist across C++, Python, and Rust, so you can use it for quick scripts, larger pipelines, or native tooling. 1/n
4
58
506
32,288
0pcod3 retweeted
Ananay
@ananayaroraApr 12
Marcus Hutchins, the guy famous for stopping the WannaCry Ransomware, probably has the best take on Mythos doing vulnerability research
103
533
88
4,226
513,366
🟥𝗟𝗟𝗠 𝗥𝗲𝗱 𝗧𝗲𝗮𝗺𝗶𝗻𝗴 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀 🔗 Red Teaming LLM Applications by DeepLearning :- deeplearning.ai/short-course… 🔗Planning red teaming for LLMs by Microsoft :- learn.microsoft.com/en-us/az… 🔗Red teaming LLMs by HuggingFace :- huggingface.co/blog/red-team… 🔗LLM Red Teaming by KLU :- klu.ai/glossary/red-teaming 🔗Red Teaming LLMs Nihad Hassan :- techtarget.com/searchenterpr… 🔗Red-Teaming to make LLMs robust and safer :- medium.com/@sasirekharameshk… 🔖#infosec #cybersecurity #hacking #pentesting #security
5
239
3
914
40,622
100+ Kernel Bugs in 30 Days - High-Scale Driver Vulnerability Research with Agent Swarms ydinkin.substack.com/p/200-k…
1
28
1
111
12,060
Load more