vient retweeted
Yandex School of Information Security is back: academy.yandex.ru/schools/sh…
vient retweeted
Seems like I have finally started a blog!
Hunting for bugs in VirtualBox (First Take)
blog.paulch.ru/2020-07-26-hu…
vient retweeted
Memory corruption vulnerabilities in VNC protocol implementations, research by @__paulch: ics-cert.kaspersky.com/repor…
xitter.cf/__paulch/status/119460…
Today at @ZeroNights I presented research about memory corruption vulnerabilities in VNC. Full report in English will be available at ics-cert.kaspersky.com on the 22-th of November.
vient retweeted
Hey, I made a gallery of the things I've made while breaking Firefox's rendering code! Check it out! gankra.github.io/glitch/
vient retweeted
Kaspersky ICS CERT invites you to join the IoT Vulnerability Research and Exploitation Training at Security Analyst Summit 2020, April 6-9, Barcelona, Spain.
Book your early-bird ticket now: thesascon.com/training or just ping me in DM!
vient retweeted
Just published my writeup for CPU Adventure at DSCTF, wherein me, @zwad3, @thebluepichu and @jay_f0xtr0t reverse engineered a program written for a completely unknown, custom CPU with no access to the CPU, emulator or any documentation: robertxiao.ca/hacking/dsctf-…
vient retweeted
I have just published a blog post about solving "Master of PHP challenge" from Read World CTF 2019. This solution doesn't care about a bug implanted into PHP. We exploit curl 1-day instead! blog.bushwhackers.ru/pwning-…
vient retweeted
Our CTF team just published a couple of write ups for FAUST CTF 2018. In our blog @_vient_ and me write about fun service we were only ones to solve. Check this out: blog.bushwhackers.ru/faust20…
vient retweeted
blog.bushwhackers.ru/slot-ma… Check out our write-up for the hardware challenge from Google CTF finals! #googlectf
vient retweeted
Игровая система соревнований Moscow CTF School 2017 теперь открыта для свободной регистрации: 2017.ctf.cs.msu.ru/scoreboar…
После регистрации доступны таски, можете использовать для тренировки к следующим играм! #moscowctfschool
vient retweeted
CVE-2016-10191 - @__paulch shows us another exploit for FFmpeg. The vulnerability is located in the RTMP protocol.
youtube.com/watch?v=hRei9xXR…
vient retweeted
Bushwhackers' CTF team blog is now open! We will occasionally post some interesting CTF write-ups, and there's already one waiting for you.
How to pwn over network when you need read syscall to return 50 KB at once? Our first blog post has the answer!
blog.bushwhackers.ru/2manypk…
vient retweeted
Designing a computer isn't easy. Read about all the work that Lightning put into cLEMENCy for @defcon CTF 2017: blog.legitbs.net/2017/10/cle…
vient retweeted
#Bushwhackers won #ictf2017 !
The game was awesome! Special cheers to organizators and other teams (especially to LC/BC).





















