Telecomm. Eng. Low level stuff, pwn, C programmer and Linux internals. When you get to heaven, look me up, I won't be there, but my code will!

Madrid, Spain
Joined September 2021
Four years, countless PCB revisions, and one custom FPGA controller later: a 60fps, 300ppi, open-source E Ink monitor is finally real. youtube.com/watch?v=nHbA2-_q…
5
10
7
118
25,853
Comenzamos con la charla "Grabación de llamadas en Android: Una perspectiva ofensiva" con Yago Gutiérrez, donde entenderemos el funcionamiento del sistema de audio en Android #MobileEnv #Malware #Reversing #ESCVIII @arget1313
2
10
364
No te puedes perder a nuestro siguiente ponente Yago Gutiérrez y su charla "Grabación de llamadas en Android: Una perspectiva ofensiva" en la próxima EuskalHack Security Congress VIII @arget1313 #ESCVIII securitycongress.euskalhack.…
2
5
277
one day this will be part of an elaborate exploit chain
47
620
46
9,559
406,885
just finished a new blogpost on how i exploited the V8 javascript engine at a CTF! it's a beginner friendly journey from a memory corruption to a browser pwn, and features lots of cool CSS to help you understand various concepts along the way. have fun!! lyra.horse/blog/2024/05/expl…
8
116
4
439
46,949
Pero este tío no tiene vergüenza?
1
1
598
don't think ive ever seen this
4
6
1
90
12,055
Arget retweeted
I've audited the Android kernel in late 2023, and reported 10+ kernel bugs to Google, along with 2 exploits. Today, I'm releasing the first exploit, targeting the Mali GPU on Pixel devices, accessible from an untrusted_app context. github.com/0x36/Pixel_GPU_Ex…
27
259
10
1,034
115,400
The urge to name and shame a company that ghosts you after 6 rounds of interviews is VERY STRONG!
53
13
2
623
111,672
Con compañeros así da gusto trabajar xD
4
571
Back at DEFCON 31 there was a great talk from @hacktricks_live and @arget1313 on hacking distroless containers. I wrote up a blog explaining what the attack is and what it means for users of distroless containers. chainguard.dev/unchained/und… youtu.be/poHirez8jk4?si=-cUa…
1
2
14
1,989
Web Security vs. Binary Exploitation
95
1,865
203
10,008
835,813
Just watched a really great talk on, essentially, file-less in-memory code execution in read-only noexec partitions of distroless/rootless containers from @hacktricks_live and @arget1313 from their @defcon 31 talk. Definitely give it a watch! youtu.be/poHirez8jk4
1
6
31
10,565
Got to hang with @hacktricks_live and @arget1313 to hear all about their DEFCON presentation & latest research -- "ddexec", tooling to run shellcode and binaries in memory and bypass read-only filesystem protections or distroless environments 😱 SUPER COOL youtu.be/7dc29U9DeIE
4
37
1
167
21,502
Awesome talk of @arget1313  at HackTricks Track in @rootedcon  2023 about stealthiness in Linux titled: Stealth intrusions with DDexec-ng & in-memory dlopen() Don't miss it: youtube.com/watch?v=VM_gjjiA… #hacktricks
7
20
3,375
Find a summary of the talk @arget1313 and Carlos gave at DEFCON in book.hacktricks.xyz/linux-ha… and slides in docs.google.com/presentation… Talk title: Exploring Linux Memory Manipulation for Stealth and Evasion Enjoy!
3
18
2,394
I'll be giving a talk with @arget1313 at #defcon tomorrow Sunday at 1pm in track 4 about abusing Linux memory to bypass file system based protections and distroless envs. The technique can also be used to execute anything in a very stealth way. Don't miss it if you are around!
5
22
3,158
So I needed to compile a program with -nostdlib but also needed some form of dynamic memory but also I wasn't going to implement the shittiest malloc() because nobody wants that, and that's why I ended up doing the hackiest thing I've ever done in C (and it works perfectly fine):
1
3
468
And I also took the liberty of creating this which, used correctly, will avoid the inherent memory leak that alloca() is -which is a problem in a function that never returns because is an infinite loop, remember that alloca() isn't magic
248
5AM, tras haber pasado todas las fases del duelo a lo largo de 10h seguidas, descubriendo que debo modificar cada vez más y más partes más y más íntimas y delicadas del código, por fin consigo hacer un commit con algo funcional
252