@numbrs

doing cool things such as opening files with nano

numb3rs.re
Joined April 2021
  • Tweets42
  • Following538
  • Followers401
3Media
Pinned Tweet
Numb3rs@numbrsOct 5
I've never worked on WhatsApp before, so I thought it'd be interesting to poke it with a stick! I wrote an article about my attempt to uncover WhatsApp's CVE-2026-23866: numb3rs.re/posts/cve-2026-23… This is my first article on mobile VR, let me know what you think!

CVE-2026-23866: Finding a Whatsapp NDay · Numb3rs' blog

Watch me trying to find a Whatsapp nDay, thanks to Meta and inline compiling it's not that easy !

numb3rs.re
3
54
2
254
19,782
Numb3rs retweeted
Numb3rs@numbrsOct 5
I've never worked on WhatsApp before, so I thought it'd be interesting to poke it with a stick! I wrote an article about my attempt to uncover WhatsApp's CVE-2026-23866: numb3rs.re/posts/cve-2026-23… This is my first article on mobile VR, let me know what you think!

CVE-2026-23866: Finding a Whatsapp NDay · Numb3rs' blog

Watch me trying to find a Whatsapp nDay, thanks to Meta and inline compiling it's not that easy !

numb3rs.re
3
54
2
254
19,782
The hardest problems in computer science rn: - Solving Millennium Prize problems - Memory safety in the Linux kernel - Pasting images reliably over ssh
Justin Schroeder
@jpschroederAug 21
We're open-sourcing ssh-clipboard. Finally, copy and paste between machines from a shared clipboard. - Copy/paste text, images, and even files. - macOS, X11, Wayland - Uses native clipboard - End-to-end encrypted (peer-to-peer over ssh) - Tailscale detection - MIT license
2
27
2
470
25,776
Numb3rs retweeted
def1ant
@0xdef1antApr 30
"we had a good thing, you stupid son of a bitch! we had Lows. we had Mediums. we had renderer RCE bonuses, and it all ran like clockwork! you could have shut your mouth, let your fuzzers run, and made as much money as you ever needed! it was perfect! but no, you just HAD to go and flood the team with your AI-hallucinated slop reports"
Google VRP (Google Bug Hunters)
@GoogleVRPApr 30
📣📢 Calling all Android and Chrome bug hunters 🧑‍💻🔎! We're updating our Android & Chrome VRP programs to ensure we can continue to reward the most challenging and impactful vulnerabilities researchers find in our products. For details, 👇 bughunters.google.com/blog/e…

Blog: Evolving the Android & Chrome VRPs for the AI Era

We are announcing changes to the Chrome & Android Vulnerability Reward Programs (VRP) which take effect immediately and are focused on adjusting our reward amounts and bonuses to reflect the types of...

bughunters.google.com
5
23
177
13,911
🎄 New Root-Xmas Challenge 🎄 ✨Today, heap your skills and parse your way through Santa’s picture-perfect surprises! 📌Submitted by : Numb3rs 🔗Details & participation here: ctf.xmas.root-me.org Good luck to you all !🎅
1
3
771
You just got a black box target and zero context. Where do you even begin? Here’s my take after two years in vuln research - what actually matters, and what’s just noise 👇 numb3rs.re/posts/approaching…
16
91
8,035
Squirrel Sandbox Escape: I'm publishing my VR journal for a 1day I was curious about for years now. I have around six days of raw footage: from initial analysis all the way to PC takeover, so there should be more episodes coming soon :^) Link: youtube.com/watch?v=h__rwIZU…
3
20
1
82
12,615
hi, just wrote my first post on the exploitation of a random github VM, let me know what you think :) numb3rs.re/posts/popping_she…
3
16
73
6,108
Ravi de partager ma qualification pour l'équipe de France !
ANSSI
@ANSSI_FR5 Jun 2024
📢Découvrez la sélection de la #TeamFrance2024 ! 🇫🇷 Les joueurs défendront nos couleurs lors de la prochaine édition de l'#ECSC2024 à Turin, en Italie. 🔔Rendez-vous du 7 au 11 octobre 2024.
17
1,066
To conclude the tale of CVE-2023-2163 here is the exploit github.com/google/security-r… Thanks again @chompie1337 for her amazing RCA and her other ebpf research @meadori For his amazing engineering feedback and also amazing help with RCA @scannell_simon For his original research!
5
46
132
34,194
Congratulations to all participating teams for the PwnMe finals. @redrocket_ctf congrats you were great! The fight was incredible, until the last minute between Polyflag and @WreckTheLine. It was great spending time IRL with the best 🇪🇺 teams. Let's do it again next year!
1
12
1
34
5,219
Je suis très heureux d'être de la partie cette année 👍
ANSSI
@ANSSI_FR7 Jun 2023
[#ECSC] La Team France est au complet ! 👏 Découvrez la sélection des joueurs qui défendront les couleurs de la 🇫🇷 du 24 au 27 octobre 2023 à Hamar, en Norvège ! @Cybersec_EU @enisa_eu #UE #CTF #ECSC #ECSC2023 #TeamFR
Team France ECSC 2023

ALT Team France ECSC 2023

3
38
1,986
Le #FCSC2023 a pris fin hier soir et j'ai fini 2 ème dans la catégorie Pwn Junior et 10 ème dans le classement général junior. Merci beaucoup aux organisateurs du CTF, qui comme tous les ans ont fait un CTF de qualité supérieur. Mes writeups: numb3rs.re/writeup/
3
2
17
1,546
*supérieure
289
Windows kernel dump C++ parser. github.com/0vercl0k/kdmp-par… #Hack #315 (2020)

GitHub - 0vercl0k/kdmp-parser: A Windows kernel dump C++ parser library with Python 3 bindings.

A Windows kernel dump C++ parser library with Python 3 bindings. - 0vercl0k/kdmp-parser

github.com
26
49
9,750
Let's read my first post and give me your opinion !! trikkss.github.io/posts/hidi…

Malware - Windows API hashing 1

Windows API Hashing is a technique often used by malware developers to hide their calls to the windows API.

trikkss.github.io
9
57
2
195
27,074
big up à nous
NoBrackets@NoBracketsCTF27 Nov 2022
Bravo à toutes et tous !! 🥳 #nobracketsctf #nobrackets #ctf #gcc #ensibs
3
3
Merci beaucoup à l’orga je suis grave content d’avoir gagné le premier prix
CSAWEurope@CsawEurope11 Nov 2022
🥉🥈🥇 CSAW'22 Europe : Bravo aux gagnants de l'épreuve Lycéens Red Team Competition !!! 👏👏👏 1er prix : Tourist 2ème prix : LAMHack 3ème prix : St Barth's goin2 Valence Merci aux organisateurs de l'épreuve : Quentin GIORGI, avec @krhacken et @rootme_org #CSAW
3
3
12
Load more