@rootack
 POC conference, Zer0Con, Mosec
pocsec.com
Joined July 2008
  • Tweets300
  • Following162
  • Followers122
7Media
RIP ๐Ÿชฆ Craziest bug I have ever seen in my 10 years of being in the iOS scene. I really wish Apple would stop being so anti consumer. Everyone who knew about this had an SRD suddenly overnight and nothing bad happened.
johnny
@0xjohnnyOct 9
As others noted, Apple patched the not-so-secret server side bug. It enabled root access and jailbreaking even on iOS 27.2b3 (18 Pro Max). A public release would've meant an instant patch, so it stayed private. Despite efforts to preserve it, it's cooked. RIP ๐Ÿชฆ๐Ÿ˜ญ
22
91
5
1,275
198,594
๋‹จ์‹œ๊ฐ„์— 29.9k ์Šคํƒ€ ์ฐ๊ณ  ์ „ ์„ธ๊ณ„ ๊ฐœ๋ฐœ์ž๋“ค์ด ํ™˜ํ˜ธํ•˜๋Š” ์˜คํ”ˆ์†Œ์Šค๊ฐ€ ๋“ฑ์žฅํ•จ. ๋‹ค๋ฅธ ์ƒ์šฉ ์•ฑ ์“ฐ๋‹ค๊ฐ€ "์™€ ์ด ๊ธฐ๋Šฅ ์ง„์งœ ํƒ๋‚˜๋Š”๋ฐ ์†Œ์Šค์ฝ”๋“œ ์—†์ด ์–ด๋–ป๊ฒŒ ๋งŒ๋“ค์—ˆ๋Š”์ง€ ์•Œ๊ณ  ์‹ถ๋‹ค" ํ–ˆ๋˜ ์  ์žˆ๋‹ค๋ฉด ํ•„๋…. ๊ธฐ์กด์—๋Š” ๋ฐ”์ด๋„ˆ๋ฆฌ๋‚˜ ํ”„๋กœ๊ทธ๋žจ์„ ๋œฏ์–ด๋ณด๋ ค๋ฉด ๊ธฐ๋“œ๋ผ(Ghidra)๋‚˜ IDA ์ผœ๋†“๊ณ  ์–ด์…ˆ๋ธ”๋ฆฌ์–ด์™€ ์”จ๋ฆ„ํ•˜๋˜ ์ดˆ๊ณ ์ˆ˜ ํ•ด์ปค๋“ค์˜ ์˜์—ญ์ด์—ˆ๋Š”๋ฐ, ์ด๊ฑธ AI ์—์ด์ „ํŠธ(Cursor, Claude Code ๋“ฑ)ํ•œํ…Œ MCP๋กœ ํ†ต์งธ๋กœ ์ฅ์—ฌ์ฃผ๋Š” ๋„๊ตฌ 'REA(Reverse Engineer Anything)'์ž„. โ€ข ์†Œ์Šค์ฝ”๋“œ ์—†๋Š” ๋„ค์ดํ‹ฐ๋ธŒ ๋ฐ”์ด๋„ˆ๋ฆฌ โžก๏ธ C/์˜์‚ฌ์ฝ”๋“œ ์ž๋™ ์—ญ๊ณตํ•™ โ€ข ๋…ธ์…˜, ์Šฌ๋ž™ ๊ฐ™์€ ์ผ๋ ‰ํŠธ๋ก /JS ์•ฑ์˜ ๋‚ด๋ถ€ IPC ๋ฐ API ๋กœ์ง ์ถ”์  โ€ข ๊ธฐ๋“œ๋ผ(Ghidra), ํ˜ธํผ(Hopper), IDA๋ฅผ MCP ํˆด๋กœ ์ง์ ‘ ์—ฐ๋™ โ€ข .NET ์–ด์…ˆ๋ธ”๋ฆฌ, ํŽŒ์›จ์–ด, ๋Ÿฐํƒ€์ž„ ์ž…์ถœ๋ ฅ ํ”„๋กœ์„ธ์Šค ์‹ค์‹œ๊ฐ„ ๋ถ„์„ โ€ข ๋ถ„์„ํ•œ ์ฆ๊ฑฐ(Evidence) ๊ธฐ๋ฐ˜์œผ๋กœ ๋‚ด ํ”„๋กœ์ ํŠธ์— ์ฝ”๋“œ ์žฌ๊ตฌํ˜„ "๋‚จ์˜ ์•ฑ ๊ธฐ๋Šฅ ๋ณด๊ณ  ์—์ด์ „ํŠธํ•œํ…Œ ๋งŒ๋“ค์–ด๋‹ฌ๋ผ"๊ณ  ํ•˜๋Š” ์‹œ๋Œ€์˜ ์ž‘๋™ ์›๋ฆฌ ์ •๋ฆฌ ๐Ÿ‘‡ (ํƒ€๋ž˜)
22
131
2
553
44,308
JINWOOK retweeted
POC_Crew
@POC_CrewSep 23
#POC2026 ๐Ÿ‘๏ธ Mathilde Venault(@MathildeVenault) - โ€œOff the Path: the Treasure Hunt for New Process Injection Techniquesโ€
6
1
27
3,094
JINWOOK retweeted
NOPcon@NOPconAug 10
Weโ€™re proud to announce that POC - Power of Community is a Gold Sponsor of NOPcon 2026! ๐Ÿš€ @POC_Crew
3
8
1,170
JINWOOK retweeted
qwerty@_qwerty_poJul 20
Introducing the Frag Gap (CVE-2026-53362/CVE-2026-53366)! A bug in ipv4/ipv6 that I found together with @physicube, and it (used to) let you freely get root. This could affect Android too, but we don't have a device so... Full details are written up in both EN and KO at blog.qwerty.or.kr/en/posts/cโ€ฆ If you're curious about the code, just checking out github.com/qwerty-po/securitโ€ฆ is enough. We've got a few more fun bugs, and we'll post them as we find the time. This is just the Hitchhiker's Guide to the Linux Kernel. Don't Kernel Panic!
11
126
5
621
33,559
Last chance to secure budget-friendly rates and attractive terms โ€” donโ€™t miss out! โžก๏ธ offensivecon.jp/venue.html
4
8
2,777
JINWOOK retweeted
0xor0ne
@0xor0neJun 13
Windows unprivileged arbitrary 12-byte kernel write to escape the browser sandbox voidsec.com/cve-2026-40369-bโ€ฆ #infosec

CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox - VoidSec

Technical analysis of CVE-2026-40369, a 12-byte Windows kernel write reachable from browser sandboxes via NtQuerySystemInformation, leading to SYSTEM.

voidsec.com
1
22
96
5,684
๐Ÿšจ Anthropic just showed a 27-minute workshop on how to actually do prompts for Claude. Taught by the people who built it. Free. No registration. No paywall. I've seen $300 courses that don't cover what they teach in the first 8 minutes. Watch it and bookmark it now.
15
73
1
430
107,561
JINWOOK retweeted
thaidn
@XorNinjaMar 26
Someone fed our Linux kernel exploitation blog post into Claude, and it casually coughed up another vulnerability. On one hand, this is the beauty of open research and sharing. On the other hand, Claude scares me. Send help! linkedin.com/posts/yochai-eiโ€ฆ git.kernel.org/pub/scm/linuxโ€ฆ

A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets | Yochai Eisenrich

About two weeks ago, I read this excellent piece by Calif: https://lnkd.in/dz_jq3GR It's a really good post, explaining in detail both the bug, root cause analysis and the exploitation strategy...

linkedin.com
2
58
5
319
25,814
A POC for CVE-2025-55182 gist.github.com/maple3142/48โ€ฆ
32
422
60
1,953
553,094
Our team had an amazing time at POC2025 in Seoul last week! A big shoutout to the @POC_Crew for hosting us as sponsors๐Ÿ™Œ It was a great opportunity to connect with the cybersecurity community and explore innovative ideas! ๐Ÿš€ #POC2025
5
22
2,474
#POC2025 was awesome, and a great venue to give a talk on exploiting Trigon on all Apple arm64(e) chipsets. Shoutout @POC_Crew and everyone else involved for all the amazing work that went into putting an event like that together. ๐Ÿ’ช
2
3
100
12,759
JINWOOK retweeted
AJ@justandrijana13 Nov 2025
We are here! Once again proudly sponsoring #POC2025 for its 20th anniversary. Find us and say hi, itโ€™s all about community. @POC_Crew @SAFATeamApS
3
20
1,326
JINWOOK retweeted
POC_Crew
@POC_Crew4 Sep 2025
[POC2025] SPEAKER UPDATE 2โƒฃ ๐Ÿ‘ฅ Xuangan Xiao(@xgxiao66) & Zikai Xu(@N7utbN) โ€“ "The Biometric AuthToken Heist: Cracking PINs and Bypassing CE via a Long Ignored Attack Surface" #POC2025
5
21
4,101
JINWOOK retweeted
POC_Crew
@POC_Crew4 Sep 2025
[POC2025] SPEAKER UPDATE 3โƒฃ ๐Ÿ‘ค Mikhail Evdokimov(@konatabrk) - "PerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry - Mercedes-Benz, Volkswagen, Skoda and Others" #POC2025
6
44
4,093
JINWOOK retweeted
POC_Crew
@POC_Crew4 Sep 2025
[POC2025] SPEAKER UPDATE 4โƒฃ ๐Ÿ‘ค Alfie CG(@alfiecg_dev) โ€“ "Trigon: Developing a deterministic iOS Kernel Exploit" #POC2025
19
108
12,208
JINWOOK retweeted
POC_Crew
@POC_Crew4 Sep 2025
[POC2025] KEYNOTE SPEAKER UPDATE ๐Ÿ‘ค Brian Gorenc(@MaliciousInput) โ€“ "From Buffer Overflows to Breaking AI: Two Decades of ZDI Vulnerability Research" ZDI(@thezdi) also stands with their 20 years! Now AI finds 0daysโ€” but the bugs? still the same old mess. #POC2025
1
14
92
8,890
JINWOOK retweeted
POC_Crew
@POC_Crew5 Jun 2025
[#POC2025 NOTICE] 20 Years. Reborn. The brand evolved - The mission remains. Welcome to a new era of POC. โฐ Date: November 13โ€“14, 2025 ๐Ÿ“ Venue: Four Seasons Hotel, Seoul, South Korea ๐Ÿ‡ฐ๐Ÿ‡ท ๐ŸŽค CFP: June 5 โ€“ September 30 ๐Ÿง‘โ€๐Ÿ’ป Training: June 5 โ€“ September 30 ๐ŸŽŸ๏ธ Registration: September 1 โ€“ October 31 More info ๐Ÿ‘‰ powerofcommunity.net
5
17
1
90
15,456
Off to Berlin! Very excited to be part of the community and sponsor @offensive_con! If you are there, ping us up for long night drinks ๐Ÿซ ๐Ÿ˜
1
5
49
4,074
JINWOOK retweeted
POC_Crew
@POC_Crew2 Nov 2023
[POC2023] has just started! Starting off with Jinwookโ€™s opening remarks #POC2023
4
2
24
7,723
Load more