bio(tofu, pwn){ return love(tofu, pwn);}
Chile
Joined December 2008
- Tweets25.2K
- Following423
- Followers1.1K
- Likes2.8K
Pinned Tweet
If you enjoy electronic music and CTF pwn challenges 👾, you may like my walkthrough of the “Refreshments” challenge from StackSmashCTF youtu.be/sRRdfrinj_M?si=WsHY…
dplastico (pwn) retweeted
Worked on improving Sargon7 last week! Also managed to add his move list now that was missing in the last playtest build 😅 #fgc #indiegamedev
If you enjoy pwn, check out this room I created :) You will have some (pwn) fun!
NEW CHALLENGE: TryPwnMe Two 🔥
🔗 tryhackme.com/r/room/trypwnm…
In this second part of the TryPwnMe saga, test yourself with our Exploit Development challenges and practice the foundational techniques of binary exploitation!
dplastico (pwn) retweeted
A living thread of my top twetes. Doomscrolling!🧵
1/ xitter.cf/gf_256/status/14784494…
dplastico (pwn) retweeted
Se acaban de publicar 5 de los CVEs de las vulnerabilidades en routers Draytek que encontramos con @ogianatiempo en el equipo de @faradaysec y presentamos en @defcon !!
Vienen más en camino... 🔥
CVE-2024-[41334, 41335, 41336, 41339, 41340]
youtu.be/BiBMsw0N_mQ
dplastico (pwn) retweeted
One of the best feelings as a game dev is seeing people enjoy the results of years of hard work.
This moment will stay with me forever.
(Thanks @beatemhub !) 🥲
dplastico (pwn) retweeted
Introducing a fun class of security bug I call “Mishandled Hardware Specification”. It may arise only at the hardware-software boundary due to software developer’s misunderstanding of a documented hardware behavior. I see instances in hypervisor core code (VMM attack surface / Guest OS attack vector), and hypothesize that kernels and firmwares may be affected more by it quantitatively but to a lesser security degree
dplastico (pwn) retweeted
I'm incredibly happy to announce, my article "Calling All Hackers" has been accepted and published in Phrack 71!
This is a lifelong dream of mine. I can't express how grateful I am to the staff for making this real, and how excited I am that it's finally out!
The full text of the article will be published digitally online after the conference.
In the meantime, I'll be autographing some copies at DEF CON this year, catch me around. :D
o/ We are excited to announce that we are bringing some professionally printed copies of Phrack 71 to give out at @defcon! We will share where to get them when the time comes.
ALT Cover of Phrack 71
Hello! I wanted to share that, as a result of the investigation we did with my friend @s1kr10s , we've been granted CVE-2024-24910 for a vuln disclosure. cve.mitre.org/cgi-bin/cvenam…
I finally had the time to go through the "Hypervisor Vulnerability Research" course from @zerodaytraining, which is impressive. What makes the course great is the insane knowledge from @alisaesage on the subject and the HQ exercises. IMO a great way to start with hypervisor vulns
dplastico (pwn) retweeted
It took 3 years but finally I feel ready to release my Pwn2Own 2021 exploit code. 💖 Video talk covers my full research workflow, from attack surface modeling and reverse engineering, to vulnerability discovery and systematic exploit engineering, enjoy! #Pwn2Own
Release: VM Escape Exploit for Parallels Desktop Hypervisor (Pwn2Own 2021) zerodayengineering.com/resea…
A virtual machine escape exploit will typically require kernel privileges in the guest OS. In this exploit I chose to offload the reverse-engineered toolgate protocol implementation to a Python module, while keeping my low-level kernel code minimal, just enough to implement the attack interface - a nod to the principle of least privilege in systematic software engineering, which we miss a lot in non-trivial exploit development. -- @alisaesage
There's a new version of this post
dplastico (pwn) retweeted
Here, I am sharing a new article in which my friend @dplastico 🤜 🤛 and I conducted research on specific antivirus binaries. As a result of our investigation, we successfully secured the assignment of CVE-2024-23940 from @TrendMicro.
#cve #research
medium.com/@s1kr10s/av-when-…
