@ju256_

re/pwn. Sometimes for @KITCTF @ju256@infosec.exchange

ju256.rip
Joined January 2018
  • Tweets28
  • Following469
  • Followers139
4Media
A little late but I finally finished the writeup for the intended solution of my v8 pwnable. You can find my writeup here: ju256.de/posts/kitctfctf22-d… tldr: v8 sandbox escape by utilizing the memory corruption API and without the usual JIT technique.

KITCTFCTF 2022 V8 Heap Sandbox Escape

Two weeks ago we organized our first ever CTF KITCTFCTF 2022. Even though it was a challenging and stressful task, I certainly had a blast preparing challenges and watching the playing teams progre...

ju256.de
ju256@ju256_10 Dec 2022
If you ever wanted to get into v8 exploitation, you still have ~9h to check out my v8 pwn challenge "Date" for KITCTFCTF (ctf.kitctf.me/challenges#Dat…). Get first blood now before it's too late 🔥
2
19
64
13,884
ju256 retweeted
KITCTF@KITCTF29 May 2024
GPN CTF starts in less than two days 😲 but don't worry, we made sure you will have a banger CTF experience ᯓ★🎧. Start Fri, 10am UTC!
5
1
10
1,616
paaaaain
2
4
370
very cool challenge though @NotDeGhost
1
309
Make sure to join if you don't want to miss some ⚙️🎱 / 🕷️🐒 exploitation fun
KITCTF@KITCTF5 Jun 2023
We are proud to announce GPN CTF! From easy challenges to hard challenges, GPN CTF covers it all. It starts on Friday already, so don't miss it 🍿 Date: Friday 09 June 2023, 10:00 UTC to Saturday 10 June 2023, 21:59:59 UTC. More information at ctf.kitctf.de
"09.06. - 10.06." In the foreground are two cranes - in front of the silhouettes of factories . A crane is putting a smaller flag with "CTF" on a bigger flag with "GPN" on it.

ALT "09.06. - 10.06." In the foreground are two cranes - in front of the silhouettes of factories . A crane is putting a smaller flag with "CTF" on a bigger flag with "GPN" on it.

1
410
ju256 retweeted
KITCTF@KITCTF25 Apr 2023
We are proud to announce our second CTF! Play on-site at @entropiagpn GPN21 or online! Date: Friday, 09 June 2023, 10:00 UTC — Saturday, 10 June 2023, 21:59 UTC Our Motto is "fl4gtory" so keep 🔄 until our CTF logo is built! Part 2/6 ☑️ More information at ctf.kitctf.de
"09.06. - 10.06." In the foreground are two cranes - in front of the silhouettes of factories - that build something.

ALT "09.06. - 10.06." In the foreground are two cranes - in front of the silhouettes of factories - that build something.

KITCTF@KITCTF23 Mar 2023
This evening we will talk about a yet unannounced CTF and also do walkthroughs of challenges we solved recently.
6
1
1
1,669
ju256 retweeted
KITCTF@KITCTF11 Dec 2022
Congratulations to the winners of this year's KITCTFCTF: 1️⃣ CubeMastery 2️⃣ @0tolerance_ctf 3️⃣ b0ng0s We hope everyone had fun with our challenges, and we'll see you all again next time 🚀
1
3
2
13
If you ever wanted to get into v8 exploitation, you still have ~9h to check out my v8 pwn challenge "Date" for KITCTFCTF (ctf.kitctf.me/challenges#Dat…). Get first blood now before it's too late 🔥
2
1
9
ju256 retweeted
KITCTF@KITCTF3 Dec 2022
We are proud to announce our first ever CTF! It starts on the next weekend already, so don't miss it 🍿 Date: Friday, 09 Dec. 2022, 18:00 UTC - Saturday, 10 Dec. 2022, 23:59 UTC More information at ctf.kitctf.me/
9
1
27
ju256 retweeted
KITCTF@KITCTF12 May 2022
After reversing last week, this week @ju256_ will do an intro(++) about binary exploitation. As usual at 7pm, but mind the ROOM CHANGE: We are in -120 in the CS building from now on.
1
1
French infosec addict looking for a vulnerability researcher/pentester remote position. RT appreciated ! DMs open ;)
1
91
63
😭
3
50
1
98
Any ideas for Masters/Bachelors thesis topics around malware analysis, reverse engineering, low-level security or other infosec topics? Please RT too - I get this question a lot and I always struggle to answer. So I hope to use our community's wisdom and send folks here :)
25
139
212
Python 2.7 will retire in 8 days
4
128
8
462
googleprojectzero.blogspot.c… thanks to @_clem1, @5aelo for their joint work on this. This has been a huge effort to pull apart and document almost every byte of a multi-year in-the-wild exploitation campaign, which used 14 different iOS exploits.

A very deep dive into iOS Exploit chains found in the wild

Posted by Ian Beer, Project ZeroProject Zero’s mission is to make 0-day hard. We often work...

projectzero.google
39
600
82
1,344
phrack.org/papers/jit_exploi… #phrack :)
14
275
8
624
My security friends, @Pink_P4nther is an OSCP & has created numerous vuln vms for the community to practice with. Yet he’s struggling to get a job cuz of experience & locale. Seems like a great opportunity to hire a smart, up and comer.
3
15
30
35c3ctf > sleep #35C3CTF #35c3
4
The wait is over! Pinky's Palace V4 has been released! This VM is shorter than most of my previous VMs but the difficulty has been cranked up a notch. Good Luck! Happy Hacking! pinkysplanet.net/pinkys-pala…
1
18
1
51
WHAT??? (remote) code execution when you convert a jpeg WHAT??? $ convert input.jpg output.gif #ImageMagick cc @Notfound404__ @Spriteware openwall.com/lists/oss-secur…
9
260
9
346
Load more