@intrigus_

I create and break stuff. GitHub ⭐. @KITCTF. #Java, #CodeQL and #V8. Github: https://xitter.cf/t.co/2eJKNdhQaV Security stuff: https://xitter.cf/t.co/eg564HmccR

 Deutschland
intrigus.org
Joined November 2015
  • Tweets478
  • Following185
  • Followers273
34Media
I‘m now on Mastodon as well, you can add me at @intrigus@infosec.exchange
1
I gave a talk about what changed in attacking and defending GitHub actions and whether everything is safe now a while ago. If you're interested in slides, they can now be found here: kitctf.de/learning/attacking…
KITCTF@KITCTFJul 2
Replying to @github
@github Actions, can make your dev life easier, but they can also get you pwned in no time, if you are not careful! There haven been some recent changes so @intrigus_ will cover the past and future of attacking and defending GitHub Actions on Thursday, 7pm, CS building room -120.
1
2
277
intrigus retweeted
KITCTF@KITCTFJun 5
GPN CTF 2026 at @entropiagpn is now served and the buffet is open for 36 hours! Come taste our freshly cooked challenges. ==> gpn24.ctf.kitctf.de <== If you're on-site, pull up a chair! (The set table in front of the merch desk with a KITCTF flag on it)
GPNCTF Logo

ALT GPNCTF Logo

1
3
169
Learn what to do when your CodeQL database doesn't contain what you expect and how to use cvise to easily create a minimal reproducer in my newest blog post 🎉 intrigus.org/research/2025/1…

What to Do When Creating Your CodeQL Database Fails – and How to Report the Perfect Reproducer...

How to debug CodeQL database creation failures, identify the root cause from build-tracer logs, and create minimal reproducers using cvise.

intrigus.org
1
1
120
intrigus retweeted
KITCTF@KITCTF2 Oct 2025
We arrived in Mexico City for @GoogleVRP's #hackceler8 finals together with @fluxfingers 🥳
Flag-squirrel with cat ears and a KITCTF vest on the left. On the right, RGB cat ears.

ALT Flag-squirrel with cat ears and a KITCTF vest on the left. On the right, RGB cat ears.

2
6
1,044
Had a lot of fun in Stockholm at @SEC_T_org talking about attacking and defending GitHub Actions. Full slides: github.com/intrigus-lgtm/sli…

slides/2025/sec-t-github-actions.pdf at master · intrigus-lgtm/slides

Contribute to intrigus-lgtm/slides development by creating an account on GitHub.

github.com
asymmetric research
@asymmetric_re24 Sep 2025
GitHub Actions are a powerful automation tool, but also a prime target for supply-chain attacks. During @SEC_T_org, Security Researcher Simon Gerst (@intrigus_) broke down real vulnerabilities, defenses that work, and how to limit damage if an exploit occurs. Full talk below ↓
3
457
Excited to talk about some of the research I've been doing during my masters :)
NULLCON@nullcon12 Aug 2025
➗🚗💨 V8 runs your #JavaScript like a race car tearing down the track—and @intrigus_ decided to lift the hood at #NullconBerlin2025. Using formal bug-hunting tools, he found a hidden math problem in its division that could throw it off course. 👉 nullcon.net/berlin-2025/spea… #V8
1
1
25
1,807
intrigus retweeted
KITCTF@KITCTF30 Jul 2025
This Thursday, we're excited to have @mawalu talk about Android system services and how to use @fridadotre for efficient and scalable IPC request interception. As always, 7pm -120, 50.34
1
2
340
Really enjoyed this year's Google CTF together with @fluxfingers. Especially the pwn "Unicornel TrustZone" challenge was nice. Writeup soonish 😀
KITCTF@KITCTF29 Jun 2025
We had a lot off fun playing this year's Google CTF in a spontaneous merger with @fluxfingers Somehow we qualified for the finals 🎉. Thank you for such a great CTF @GoogleVRP GG to all teams and see you in Mexico!
The scoreboard of google ctf. FluxKITtens :3 is placed 6th. Place Name Flags Captured Score 1 Friendly Maltese Citizens 30 7659 2 Kalmarunionen 28 6903 3 SLICES 28 6520 4 Zer0RocketWrecks 27 6509 5 DiceGang 26 6256 6 FluxKITtens :3 25 5968 7 Maple Mallard Magistrates 25 5879 8 Stockholm Syndrome 25 5793 9 kijitora 24 5539 10 pasten 23 5426 11 C4T BuT S4D 24 5345 12 GMO Ierae 23 5183 13 Blue Water 22 4883 14 justCatTheFish 21 4803 15 r3kapig 21 4538 16 MEPhI CTF 20 4284

ALT The scoreboard of google ctf. FluxKITtens :3 is placed 6th. Place Name Flags Captured Score 1 Friendly Maltese Citizens 30 7659 2 Kalmarunionen 28 6903 3 SLICES 28 6520 4 Zer0RocketWrecks 27 6509 5 DiceGang 26 6256 6 FluxKITtens :3 25 5968 7 Maple Mallard Magistrates 25 5879 8 Stockholm Syndrome 25 5793 9 kijitora 24 5539 10 pasten 23 5426 11 C4T BuT S4D 24 5345 12 GMO Ierae 23 5183 13 Blue Water 22 4883 14 justCatTheFish 21 4803 15 r3kapig 21 4538 16 MEPhI CTF 20 4284

16
1,303
intrigus retweeted
KITCTF@KITCTF1 Jun 2025
Hey, GPN CTF is back! Can you break the CTF monopoly? The only property worth owning is the top spot on our CTF leaderboard. 'Go to jail' is just a chroot jail away, play online or on-site at @entropiagpn Friday, 20th of June 2025 10:00 UTC! More info: gpn23.ctf.kitctf.de
A monopoly board with common CTF categories instead of streets. "Collect all the flags in GPN CTF 2025" "Hosted by KITCTF"

ALT A monopoly board with common CTF categories instead of streets. "Collect all the flags in GPN CTF 2025" "Hosted by KITCTF"

3
7
925
Last year I played Realworld CTF and solved "Protected by JavaSE" together with I-Al-Istannen. We exploited XXE in @github's CodeQL using the unintended CVE-2024-25129. I wrote about the (un)intended solution and how to use CodeQL to find bugs in CodeQL 😂 intrigus.org/research/2025/0…

RealworldCTF 2024 – Protected-by-Java-SE – Writeup

How to find XXE in CodeQL using CodeQL – unintended CTF challenge solution.

intrigus.org
11
41
1,611
When you look at a CVE's patch for more than a few seconds and get a new CVE for free :sigh:
1
159
(1/3) Stack probing (to protect against stack clash attacks) in binaries leads to not so pretty decompilation in @NSAGov's Ghidra and @vector35's Binary Ninja, but there is an easy fix 🥳
1
140
(2/3) I was playing DEFCON CTF Quals last week and the `loader` binary of the `callmerust` challenge had some not so pretty decompilation so I chose to investigate and fix it.
1
150
(3/3) In the end, all you have to do is to change a single stack pointer move and `nop` a loop and go from the right image to the far better left image 🎉 I've also written about this in a bit more detail: intrigus.org/research/2025/0…
undefined8 main(void) { undefined1 *puVar1; undefined1 *puVar2; ulong uVar3; undefined1 local_6008 [4064]; undefined4 local_5028; undefined4 local_5024; undefined8 local_5020; uint local_10; undefined4 local_c; puVar1 = &stack0xfffffffffffffff8; do { puVar2 = puVar1; *(undefined8 *)(puVar2 + -0x1000) = *(undefined8 *)(puVar2 + -0x1000); puVar1 = puVar2 + -0x1000; } while (puVar2 + -0x1000 != local_6008); *(undefined8 *)(puVar2 + -0x1040) = *(undefined8 *)(puVar2 + -0x1040); local_c = 0x16; local_5028 = 1; local_5024 = 0x17; local_5020 = 4; local_10 = 0x2d; *(undefined8 *)(puVar2 + -0x28) = 0x1011b9; puts("Hello"); uVar3 = (ulong)local_10; *(undefined8 *)(puVar2 + -0x28) = 0x1011d2; printf("z3: %d",uVar3); return 0; }

ALT undefined8 main(void) { undefined1 *puVar1; undefined1 *puVar2; ulong uVar3; undefined1 local_6008 [4064]; undefined4 local_5028; undefined4 local_5024; undefined8 local_5020; uint local_10; undefined4 local_c; puVar1 = &stack0xfffffffffffffff8; do { puVar2 = puVar1; *(undefined8 *)(puVar2 + -0x1000) = *(undefined8 *)(puVar2 + -0x1000); puVar1 = puVar2 + -0x1000; } while (puVar2 + -0x1000 != local_6008); *(undefined8 *)(puVar2 + -0x1040) = *(undefined8 *)(puVar2 + -0x1040); local_c = 0x16; local_5028 = 1; local_5024 = 0x17; local_5020 = 4; local_10 = 0x2d; *(undefined8 *)(puVar2 + -0x28) = 0x1011b9; puts("Hello"); uVar3 = (ulong)local_10; *(undefined8 *)(puVar2 + -0x28) = 0x1011d2; printf("z3: %d",uVar3); return 0; }

1
104
GitHub's award that recognizes my contributions to open source security through my various workshops and my tireless help with people learning CodeQL or just answering their questions (plus some very nice swag) has arrived 🥳
A picture frame that contains the following award text: " GitHub Awards Certificate of Recognition Congratulations to you! GitHub recognizes... Simon Gerst intrigus Award Supply Chain Sentinel Award UNIVERSE 24 " Below from left to right: normal Mona, Realworld CTF figurine, golden award Mona

ALT A picture frame that contains the following award text: " GitHub Awards Certificate of Recognition Congratulations to you! GitHub recognizes... Simon Gerst intrigus Award Supply Chain Sentinel Award UNIVERSE 24 " Below from left to right: normal Mona, Realworld CTF figurine, golden award Mona

intrigus@intrigus_31 Oct 2024
Woah, I totally didn't expect this 😯 I wouldn't be where I'm now without the help of @HauwaOtori, @XCorail and @nicowaisman to name just three. Thank you for bringing me to GitHub+SF, encouraging me to do my first conference talk and letting a random run queries on ALL of lgtm.
1
8
373
intrigus retweeted
KITCTF@KITCTF19 Feb 2025
This Thursday, @intrigus_ will present the results of his master's thesis on bounded verification of the range analysis in v8's Turboshaft engine. As always, 7pm -120, 50.34
1
8
365
Really excited for this one!
KITCTF@KITCTF10 Feb 2025
This Thursday, we're excited to have @momo5502 give us a deep dive into Windows user-space emulation. As always, 7pm -120, 50.34
Emulator architecture overview x86/x64 CPU Emulation Layer depends on OS Awareness Layer depends on PE Loader Memory Syscalls Exceptions Threads Debugger State Manager

ALT Emulator architecture overview x86/x64 CPU Emulation Layer depends on OS Awareness Layer depends on PE Loader Memory Syscalls Exceptions Threads Debugger State Manager

148
Woah, I totally didn't expect this 😯 I wouldn't be where I'm now without the help of @HauwaOtori, @XCorail and @nicowaisman to name just three. Thank you for bringing me to GitHub+SF, encouraging me to do my first conference talk and letting a random run queries on ALL of lgtm.
GitHub Security Lab
@GHSecurityLab31 Oct 2024
Congratulations to Simon Gerst (@intrigus_) for winning the 2024 Supply Chain Sentinel award! 🎉 Your dedication to securing the open-source ecosystem is truly inspiring. Thank you for all your hard work and contributions! #GitHubAwards2024 #OSSecurity github.blog/news-insights/co…

Celebrating the GitHub Awards 2024 recipients 🎉

The GitHub Awards celebrates the outstanding contributions and achievements in the developer community by honoring individuals, projects, and organizations for creating an outsized positive impact on...

github.blog
2
1
2
11
1,112
intrigus retweeted
KITCTF@KITCTF3 Jul 2024
Join us this Thursday, when @ju256_ will talk about how to escape V8's new heap sandbox. As always: 7pm -120, 50.34
1
10
1,753
intrigus retweeted
KITCTF@KITCTF29 May 2024
GPN CTF starts in less than two days 😲 but don't worry, we made sure you will have a banger CTF experience ᯓ★🎧. Start Fri, 10am UTC!
5
1
10
1,616
Load more