Security and systems engineer | breaking things @0xud2
127.0.0.1
Joined August 2023
- Tweets432
- Following352
- Followers384
- Likes1.5K
Icarus retweeted
I hate this is actually true
Linux is only better because it's open source and inherits the cool UNIX design
NT as I have learnt is elegant as HELL, it's just that the programs still rely on the fucked up DOS system that it became shit again
Found a full guest to host escape in QEMU (TOCTOU in the NVMe software controller). Writeup: icarus.codes/blog/qemu-escap…
1
4
145
Icarus retweeted
How to find ALL PHP bugs:
1. Compile code (e.g. to RISC-V, x86, LLVM IR)
2. Vibe prove ASAN and non-ASAN versions have same behavior across all inputs. Hard, but Claude can do it!
3. Find a LOT of bugs
Super proud of our work. A big step towards finding ALL memory safety bugs
New on our Frontier Red Team blog: using Claude to formally verify software at large scale.
Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).
With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.
Read our research in full here: anthropic.com/research/forma…
Oh well, here’s a fully detailed blog on a complete LPE chain on Linux adapted to the hardened kernelCTF Google COS-based kernel: icarus.codes/blog/kernel-ctf
1
168
North Korean APTs trying to get me to install a backdoor on my machine was not on my 2026 bingo card. Wtf man
2
101
Icarus retweeted
Movement: Where Money Lives
As Movement reorients for our next chapter, we felt a makeover was appropriate.
Tomorrow it becomes official and we are chomping at the bit to share everything we have been working on.
Gmove to the believers.
I’ve seen “doesn’t meet the bar for servicing” from Microsoft more than I’ve seen the sun. Time to just start publishing zero days
58
Icarus retweeted
bruh orange tsai is a freakin monster lmao chained three zero days for rce as SYSTEM on exchange at pwn2own berlin 2026?? $200k plus 20 mop points on top of that edge sandbox escape he did day 1 for another 175k. dude just banked 375k in a day and a half. devcore out here eating
exchange aint no joke tho, its the kinda shit every big company has running, internet facing, ancient code everywhere. full system remote? and he chained three bugs perfect like it was nothing, probably entry + priv esc + exec. masterclass fr hes been cooking exchange for years and still pulling fresh chains in 2026. shows how much attack surface is still left even after all the patches, zdi paying out heavy too, over 900k after two days already. this is why u hafta patch fast or just ditch on-prem for cloud before someone uses it
Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
Icarus retweeted
[1] Our exp works on every system we have in hand and it works with a almost 100% success rate, we didn’t test it on the mbp m5 bare metal that pwn2own use because of a chain of real life exploit in which our exp was pwned.
Unfortunately, Tao Yan & Edouard Bochin of Palo Alto Networks could not get their exploit of Apple Safari – Renderer Only working within the time allotted. #Pwn2Own #P2OBerlin