@hexamine22

ctfs with @ARESxCTF, @ProjectSEKAIctf, @malta_ctf. sec @v12sec @zellic_io

Joined May 2022
  • Tweets100
  • Following616
  • Followers193
4Media
a bit late, but I finished 11th this year in flareon :p #flareon12
5
1
1
53
3,809
hexamine retweeted
aaron@arinerronOct 18
saw this goated license plate today
1
4
1
37
1,199
hexamine retweeted
James@jwm_fishinggodOct 15
I think it is important for people to acknowledge that posting complete slop like this is doing more harm than good for AI narrative. Yes, AI is very useful, but this is embarrassing for @HexRaysSA xitter.cf/in19h/status/211075966…
unavailable
5
5
76
7,000
hexamine retweeted
OtterSec
@osec_ioOct 15
In 2026, no program is closed source. We decompiled a propAMM into Rust that recompiles to the exact on-chain binary, then used it to find a critical bug that put $6.1M at risk.
22
72
16
540
31,334
hexamine retweeted
ripatel ✠
@fd_ripatelOct 14
I love you @intel. 16x Intel Gaudi2 HL-225 bedroom setup. Totaling 1.5TB HBM2e with 38.4TB/s memory bandwidth. Perfect for GLM and Qwen. 38.4Tbps bisection bandwidth on UBB, 2.4Tbps QSFP-DD scaleout. Total cost less than 2x RTX PRO 6000.
5
8
3
87
3,295
hexamine retweeted
zoverin@z0v3r1nSep 24
👀
4
5
14
852
hexamine retweeted
MRKHF@mirkhoffSep 16
took me some time to finish this post: "Breaking SSA Phi destruction in SYSyVM", could this be a #0day?! ඞ mirkhoff.com/post/breaking-s…

Breaking SSA deoptimization in SYSyVM compiler | @mirkhoff's blog

Read Breaking SSA deoptimization in SYSyVM compiler on mirkhoff.com.

mirkhoff.com
4
9
20
638
hexamine retweeted
wolfie
@wolfie_Sep 18
theo's right - there are two types of people in this world: those who want to tinker with their harness all day, and those who actually get shit done
Theo - t3.gg
@theoSep 18
Replying to @greg_horvay @davis7
Ben agrees with me that OMP is slop. Liking pi almost inherently requires that you hate OMP
10
2
2
118
11,478
hexamine retweeted
아논@anon17194039318Sep 18
Replying to @theo @CollinWilkins7
theo는 상당히 정치를 잘하는 사람이다 OMP를 먼저 공격하고 OMP측이 반격하자 자신이 공격을 당하는 피해자로 규정을 하였다 상당한 정치술이다 비유를 하자면 히틀러와 비슷하다 theo는 히틀러와 마찬가지로 상당히 정치적인 술수가 뛰어난 사람이다 존경스럽다
15
16
9
382
23,868
hexamine retweeted
V4bel
@v4belSep 16
Another month, another KVM escape. Patch if you're affected. openwall.com/lists/oss-secur…
3
21
2
115
9,835
hexamine retweeted
V12
@v12secSep 8
Stored XSS in Forgejo, leading to full control over a victim's account:
1
10
42
4,771
I got the latest iOS and macOS 27 booting in Qemu (with SPTM!) - Virtual iPhone 17, 16, 15, 14, 13, 12 and every M1-M5 Mac supported - Debug, patch, or modify everything: kernel, SPTM, TXM, launchd, dyld, user programs all modifiable/ GDB-able - Boots directly to root shell in seconds - Run your own programs as root in iOS/ macOS, no jailbreak / kernel patches required - SPTM, TXM, MTE/MIE, genter/ gexit, GXF/SPRR/GL0-2, AMCC, AIC v1-3, Apple timer, many sysregs - Automated setup; get running in just a few minutes - Runs anywhere qemu runs... no ARM CPU required 😉 Try it here: github.com/jprx/darwin-vm

GitHub - jprx/darwin-vm: Run iOS/ macOS in Qemu. Virtual iPhone 17, 16, 15, 14, 13, 12 and M5-M1...

Run iOS/ macOS in Qemu. Virtual iPhone 17, 16, 15, 14, 13, 12 and M5-M1 Apple Si Macs supported. - jprx/darwin-vm

github.com
41
388
31
2,684
291,150
hexamine retweeted
V12
@v12secAug 26
Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵
17
152
42
731
140,197
hexamine retweeted
Zhuo Zhang
@i2huerAug 14
Something to share: we built a benchmark for evaluating agentic reverse engineering. - instead of grading intermediate outputs, e.g., recovered types/names - we evaluate agents e2e on deterministic goals, e.g., JTAG a firmware to enable its debug mode. vals.ai/benchmarks/reverse_e…

SRE Bench Leaderboard and Methodology | Vals AI

SRE Bench tests AI agents on software reverse engineering without source code. Compare binary-analysis results, evaluation costs and task difficulty.

vals.ai
8
12
2
55
30,892
hexamine retweeted
Can Bölük
@_can1357Aug 6
well this was a waste of tokens. presented without commentary:
Prime Intellect
@PrimeIntellectAug 5
Replying to @PrimeIntellect
Prime Agent is a general-purpose coding harness On ARC-AGI-3, it scores 95.5%, surpassing the human-expert baseline, but the gain is not benchmark-specific. We see major improvements across models when compared to their proprietary harnesses:
78
78
55
1,890
622,389
Static Devirtualization of Tencent VM. There are many others with similar results to ours, we have had the VM devirtualized for several months now. Others are posting full devirt bins, so we feel it is ok to release our research now. back.engineering/blog/31/07/…
3
94
1
508
27,747
hexamine retweeted
Jazzy
@ret2jazzyJul 31
V12
@v12secJul 31
here's a mariadb RCE, what should we look at next?
1
65
8,068
hexamine retweeted
V12
@v12secJul 30

How to raise a $10M Seed Round

Article · @v12sec
85
148
99
1,022
545,051
hexamine retweeted
Robert Chen
@NotDeGhostJul 7
We're launching a $100,000 fund to save CTFs.
17
104
17
647
65,919
hexamine retweeted
hexens
@hexensJul 6
1/ we found a bug in the Aptos Move VM that put up to $70B at systemic risk. type confusion at the execution layer. a ~90% success rate across hundreds of simulated runs on a 30+ validator cluster. cost to build the attack infrastructure: $3,000. Conducted by @kemmio , to our knowledge this is the first public research that showcases how to land a sophisticated multi-block attack in real-world environments. It includes mempool feng shui, block production specifics and about a dozen of other primitives and tricks chained to get to near-perfect exploitation results. Nonetheless, Aptos called it "extremely low exploitability." [hexens.io/research/aptos-hij…]

Arbitrary Struct Hijack in Aptos Move VM

A stale type-tag cache in the Aptos Move VM enables storage-level type confusion, letting an attacker hijack and overwrite arbitrary on-chain structs — disclosed by Hexens.

hexens.io
11
47
25
326
85,652
hexamine retweeted
V12
@v12secJun 22
AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch
29
236
9
1,613
157,714
Load more