Your Kernel is ass. Privilege escalated. Security researcher / Exploit developer / CTF Player (Pwn) '25 Codegate Junior, '25 Midnight Flag 🥉, '25 TSG Finalist

East Asia
Joined May 2024
Pinned Tweet
I exploited this bug with 5 days in January and reported it. In that period, I was much better at leak-less heap exploitation than LLMs, but now, as u can imagine...
GG, enjoyable memory corruption on Qt:) RCE on KDAB/Hotspot
2
13
1,115
ヒカルとコムドットヤマトが同一人物だと思ってたけど違うらしい
58
tsune retweeted
I have successfully recreated & lab/field tested CVE-2026-109618 / CVE-2026-109619 > Two heap use-after-free primitives in PHP's `session.upload_progress` handler (`php_session_rfc1867_callback`, ext/session/session.c)... #CyberSecurity #infosec #php #C4b1NKr3W #php2shell
155
276
226
2,429
1,738,539
おお
4
173
🛡️ Real-world defense builds real cyber resilience! The HITCON Cyber Range 2026 results are in! Taiwan's annual enterprise-grade cyber defense competition, the HITCON Cyber Range 2026 International Online Competition, successfully concluded on October 2! This year, more than 40 elite teams from Taiwan, South Korea, Japan, Mongolia, Vietnam, Hong Kong, and beyond went head-to-head in two divisions: the Cybersecurity Industry Division and the Non-Cybersecurity Industry Division ✨ Teams in the Non-Cybersecurity Industry Division represented 10 key sectors, including information technology, finance and insurance, transportation, manufacturing and construction, semiconductors, and government, underscoring how seriously organizations across industries now take cyber defense. Over 7 hours of nonstop, high-intensity competition, every team demonstrated solid defensive skills and strong teamwork under pressure. Thank you to all participants for your passion and dedication. Let's give a big round of applause to the competitors for their outstanding performance 👏👏 🏆 Final Results 🔹 Non-Cybersecurity Industry Division 🥇 1st Place: HD Hyundai(HD Korea Shipbuilding & Offshore Engineering Co., Ltd.) 🥈 2nd Place: 隊名叫做什麼 XDXD (Moxa) 🥉 3rd Place: 街友 (JKOPAY) 🔹 Cybersecurity Industry Division 🥇 1st Place: GMO Ierae (GMO Cybersecurity by Ierae) 🥈 2nd Place: *an*啊 (CoreCloud Tech) 🥉 3rd Place: 安全守護,永不當機 (National Institute of Cyber Security) Through this enterprise blue team competition, Hackers In Taiwan (HIT) aims to develop more cybersecurity talent with a holistic defensive perspective, help enterprises and public-sector organizations continuously strengthen their incident response, cyber exercises, and security governance, and deepen exchange and collaboration across the international blue team community. ✨ Special thanks to the Administration for Digital Industries of the Ministry of Digital Affairs (moda), TRAPA Security, and the Industrial Technology Research Institute (ITRI) for their generous support in building a premier stage for real-world cyber defense! 🔗 Official website: hitcon.org/2026/CyberRangexC… #HITCON #CyberRange #HITCONCyberRange2026
3
6
578
tsune retweeted
Demos we presented at Hexacon in Paris today. Everything will be released in due time. 1/ Signal 1-click
156
537
110
4,595
597,579
来ちゃうかも
1
3
199
tsune retweeted
Team Calif is hitting the stage in four cities before the end of October: Zurich, Paris, Tokyo, and San Francisco. * @YouTube Security Summit in Zurich: @XorNinja will share what's new in mobile security. * @hexacon_fr in Paris: @brucedang and @XorNinja will deliver the opening keynote, while Lukas Maar will show how to root Samsung phones. * @offensive_con in Tokyo: Quang L will demonstrate a Chromium sandbox escape, and @blacktop__ will present an escape from Apple's Virtualization framework—the second public MTE bypass. * [un]prompted in San Francisco: @brucedang and @pwnlambda will discuss zero-click remote exploits. Come say hi if you're there!
3
19
147
25,898
いつもi☆Risを応援いただき、 誠にありがとうございます。 i☆Risより皆様へ 大切なお知らせがございます。 下記よりご確認をお願いいたします。 【大切なお知らせ】 iris.dive2ent.com/news/detai… #i_Ris
369
34,010
11,167
61,196
10,935,410
tsune retweeted
82eeab7f03c75ece988ea5c7e3bf8434a022f973f977315527e13857fe487235
4
10
2
133
42,617
GG, enjoyable memory corruption on Qt:) RCE on KDAB/Hotspot
2
2
1
30
2,771
Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon
137
221
86
2,821
572,340
We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization. 2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon
107
151
46
2,072
252,307
IERAE CTF 2026 — FINAL for Humans #1 One Web challenge. A vanilla AI agent couldn't solve it in testing. AI is welcome. October 10 · 09:00 JST alpacahack.com/ctfs/ierae-fi…
31
8
110
25,091