CyCraft/Cycarrier Researcher. CTF Player. Founder of BambooFox Reviewbord of HITCON Tweets are mine own
Joined February 2012
- Tweets982
- Following896
- Followers684
- Likes4.3K
bletchley13(CK) retweeted
📣【2026 Hack the Tainan 全民參與・共築資安韌性】啟航記者會邀請
臺南市政府將於 4 月 15 日舉辦「Hack the Tainan」啟航記者會，攜手美國在臺協會高雄分處及國內外資安專家，共同展現資安韌性城市發展願景。
活動中也將正式宣布第二屆紅藍軍攻防資安競賽啟動，並透過專題演講與座談交流，分享國際資安趨勢及實務經驗，展現臺南持續深化資安防護、強化城市韌性的行動力。
誠摯邀請各界先進蒞臨參與，一同關注資安發展新里程 🔐
👉 報名網址
reurl.cc/7EML8l
#HackTheTainan
bletchley13(CK) retweeted
📢 The FLARE team has launched the FLARE Learning Hub - a free resource to hone your malware analysis and reverse engineering skills!
🛠️ github.com/mandiant/flare-le…
The initial launch brings with it:
- An in-depth introduction to time-travel debugging (TTD)
- A comprehensive Go language reference
- An assembly crash course
bletchley13(CK) retweeted
For a deeper look into this zero-day vulnerability, including the full root-cause analysis, proof of concept, exploitation, and patch analysis, check out our newly published blog post: zellic.io/blog/pwning-v8ctf
bletchley13(CK) retweeted
And another finding for AI Pentest! This time on Astro (57.1k stars)
Host header injection → HTTP redirect → full-read SSRF, writeup by the GOAT @J0R1AN
CVE-2026-25545
advisory: github.com/withastro/astro/s…
blog post: aikido.dev/blog/astro-full-r…
More to come 😉
bletchley13(CK) retweeted
Malware Development course update 21 released!
maldevacademy.com/maldev-cou…
- Introduction To Windows Persistence
- Persistence Via The Windows Registry
- Persistence Via The File System
- Persistence Via Windows Services
- Persistence Via Windows Tasks
- Persistence Via WMI Abuse
- Persistence Via COM Object Hijacking
- Persistence Via Electron Applications
bletchley13(CK) retweeted
The State of AI Security
- learn-cloudsecurity.cisco.co…
AI security report provides a comprehensive analysis of the latest developments across AI threat intelligence, global policy, standards, research, and more.
bletchley13(CK) retweeted
Want to run your compiled Mach-O payloads directly from memory without worrying if they'll be detected or captured? 😈
🔥 New blog post:
"Reflective Code Loading on macOS (Part II)"
objective-see.org/blog/blog_…
macOS 26? ✔️
Objective-C payloads? ✔️
Detection ideas (limited)? ✔️
bletchley13(CK) retweeted
From Hours to Seconds: Meet the Grok-Powered Automated IR Playbook Generator github.com/rod-trent/JunkDra…
#AI #ResponsibleAI
bletchley13(CK) retweeted
参加しようと思って頭から抜けていたので資料だけ読ませて勉強させてもらってる
Active Directory 勉強会 第 6 回目 Active Directory セキュリティについて学ぶ回
speakerdeck.com/eurekaberry/…
bletchley13(CK) retweeted
#ESETresearch discovered unique toolset, we named QuietEnvelope, targeting the MailGates email protection system of Taiwanese company OpenFind. The toolset was uploaded in anarchive, named spam_log.7z, to VirusTotal from Taiwan 🇹🇼. It contains Perl scripts, three stealthy passive backdoors, an argument runner, and miscellaneous files. 1/7
bletchley13(CK) retweeted
I’ll be at CODE BLUE tomorrow. Check out our Cyber Range Exercise if you’re interested, and feel free to come say hi if you want to chat
codeblue.jp/en/program/conte…
bletchley13(CK) retweeted
🔥技術精英同場競技！HITCON CTF 2025 精英交流賽熱血落幕 🎉
HITCON CTF 是由台灣駭客協會主辦的資安攻防競賽，被譽為「駭客們的武道大會」，今年集結台灣最頂尖的資安高手，展開為期兩天、48 小時的不眠對決。比賽採線上 Jeopardy 形式進行，題目橫跨 Web、Crypto、Reverse、Pwn、Misc 等多元領域，全面考驗參賽者的破解實力與臨場反應——這不只是駭客間的龍爭虎鬥，更是出題團隊與選手間的頂尖對決。
\\ 今年賽事首度導入 Belluminar × eSport 混合賽制 //
🎮 Belluminar 戰隊不只解題，還得親手出題互相挑戰，讓比賽更具策略性與互動火花。
🕹️ eSport 以電競式直播呈現紅隊攻防現場，讓全場觀眾零距離感受極限對決。
題目橫跨逆向工程、AI 模擬、密碼學、漏洞利用等領域，最終考驗的，是團隊默契與思考極限！
參賽隊伍由台灣新舊世代戰隊組成，包含學生戰隊與業界好手，幾乎涵蓋台灣現役的資安競賽精英。他們不僅活躍於國際 CTF 舞台，也積極參與 HITCON 年會、AIS3 教學課程與資安推廣活動，持續推動資安技術向外擴散、向下扎根。
🏆2025 HITCON CTF 精英交流賽結果出爐～
🥇第一名獎牌: 竹狐 — 技術與創意兼具的冠軍戰隊，來自新竹，已是新世代資安界代表勢力。
🥈第二名獎牌: 10F — 曾於 AIS3 EOF 並肩作戰，默契深厚、表現穩健。
🥉第三名獎牌: ICEDTEA — 起源於高中社團的學生戰隊，持續壯大並活躍於國際舞台。
HITCON 期盼透過 CTF 這個舞台，讓更多具潛力的年輕駭客能在健康、安全的環境中茁壯成長，也讓台灣的資安技術在國際舞台上持續發光發熱。
#HITCON #CTF #HITCONCTF2025
bletchley13(CK) retweeted
Boom! YingMuo (@YingMuo), HexRabbit (@h3xr4bb1t), LJP (@ljp_tw) from DEVCORE Research Team and nella17 (@nella17tw) from the DEVCORE Intern Program needed little time to exploit the QNAP TS-453E NAS device. They head off to the disclosure room to provide details. #Pwn2Own
bletchley13(CK) retweeted
A great write-up of a VMware Workstation guest-to-host escape (CVE-2023-20870/CVE-2023-34044 and CVE-2023-
20869) exploit by Alex Zaviyalov has just been published!
bletchley13(CK) retweeted
Cisco Talos researcher Joey Chen discloses details of UAT-8099, a Chinese-speaking cybercrime group mainly involved in search engine optimization (SEO) fraud and theft of high-value credentials, configuration files, and certificate data. blog.talosintelligence.com/u…
ALT Attack chain diagram
bletchley13(CK) retweeted
🚀 Today, we're excited to release #TeamAtlanta’s technical report on **ATLANTIS**!
Check out how ATLANTIS won 1st place at #DARPA AI Cyber Challenge (#AIxCC) at #DEFCON 33!
🌐 team-atlanta.github.io/artif…
#AICyberChallenge #Cybersecurity #LLM #GenAI #Agent #Fuzzing
bletchley13(CK) retweeted
マルチクラウドセキュリティの教科書を購入したので残りの連休で読みたいと思いますまる(パラパラとめくった所感ですが情報の密度が濃すぎて3日では無理そうです)
bletchley13(CK) retweeted
Checkout the Post-Mortem of our system ARTIPHISHELL (by @degrigis and I)! We look at a few issues that kept @shellphish from a top-3 spot in @DARPA’s AIxCC:
support.shellphish.net/blog/…
Keep your eyes out for more ARTIPHISHELL content in the future!