
@rootconorg goon & CFP Reviewboard, @hacknotcrime advocate, contributed some msf code, F&AM #badgelife #carhacking #ADDVulcan
Philippines
Joined October 2011
- Tweets20.2K
- Following6.1K
- Followers5.7K
- Likes12.8K
Pinned Tweet
Two vulnerabilities in Advantech were found by our team during the SPIRITCYBER-24 IoT / OT Hackathon in Singapore: CVE-2025-48466 and CVE-2025-48470.
Our Poc for CVE-2025-48470: github.com/shipcod3/CVE-2025…
Advisory: csa.gov.sg/alerts-and-adviso…
Jay Turla retweeted
OpenWrt One WB receive-only SDR. MT7981 Wi-Fi radio taps raw 14-bit IQ @ 40 MSps, streams VITA 49 over 2.5GbE to a browser spectrum/waterfall. Flashable release + one-command setup. v0.1
feedback and critique welcome:
github.com/alphafox02/openwr…
Jay Turla retweeted
In a few minutes I will be giving a talk on deobfuscation at the Virus Bulletin conference in Seville. If you are hanging out at #VB2026, come watch it to learn some new things about IDA!
Jay Turla retweeted
W00t!! It took three attempts and lots of drama, but HaeJung Yang (@haehaeYang) of Out of Bounds (@oobs_io) successfully exploited Dynamo in the AI Infrastructure category. Once they regain their breath, they head off to the disclosure room to provide details. #Pwn2Own
Jay Turla retweeted
The full schedule for #Pwn2Own Ireland 2026 is now live! You can find it at zerodayinitiative.com/blog/2…. And check out pwn2own.zerodayinitiative.co… for live leaderboard updates throughout the day. #P2OIreland
Jay Turla retweeted
It seems that many Samsung Galaxy S26 & Pixel 10 bugs have been submitted to Pwn2Own this year. There are a lot of Koreans too. Good luck to all participants.
👀👀
Pixel 10 Remote : 3 exploits
Pixel 10 USB : 1 exploit
Samsung Galaxy S26 Remote : 7 exploits
zerodayinitiative.com/blog/2…
Jay Turla retweeted
And just like that, twenty is in the books.
For a few days, we filled Clark with hackers, ideas, experiments, questionable decisions, new friendships, old stories, blinking badges, packed rooms, and exactly the kind of chaos we’ve learned to love.
To everyone who came through the doors of ROOTCON 20—thank you.
Whether this was your twentieth ROOTCON or your first, you brought something to the con. You asked questions. You shared knowledge. You met people. You tried something new. You stayed curious. And somewhere between the talks, villages, contests, hallway conversations, parties, and late-night hacking, you became part of this chapter of ROOTCON.
To our Goons: you absolute legends.
Months of preparation became two very long days of moving, fixing, coordinating, improvising, and making sure the show kept going. Much of what you do happens where nobody sees it, and that’s exactly why everything works.
To our speakers, trainers, villages, contest crews, partners, sponsors, and everyone who helped us put this thing together—thank you for trusting us with your time, knowledge, and support.
Twenty editions is a hell of a milestone. But the number isn’t what matters most. It’s the community that somehow keeps finding its way back.
The gear is packed. The halls are quiet again. The con hangover is real.
ROOTCON 20 is over. The community isn’t.
Stay curious. Stay weird. Keep hacking.
We’ll see you on the next one.
ROOTCON ❤️ you!
Jay Turla retweeted
(4) Mysterious Starlink RF signal appears after a “deep cold start” — turn ON after several days OFF. sdr-x.github.io/deep-cold-st… . Lasts only ~8–10 min across subsequent cold starts, then disappears until another multi-day power-off. It sweeps around carrier, then suddenly vanishes.
Jay Turla retweeted
If biological brain models can learn through reinforcement learning with dopamine-like rewards, could hackers one day hijack those reward signals to manipulate robot behavior? 🤔
#PhysicalAI #NeuroAI #Drosophila #FruitFlyBrain
Jay Turla retweeted
With Satellites Blocked, the Starlink Terminal Keeps Searching and Reboots Periodically
sdr-x.github.io/starlink-dl-…
It scans 8 DL Ch, dwell 8.26s/Ch, until it rebooted after ~1834s. Then one time 8-channel UL scanning (discovered before), then DL scan again. A fixed firmware timeout?
Jay Turla retweeted
Tracking In-Flight Starlink Routers from the Ground by IPv6 sdr-x.github.io/find-in-flig…
Monitoring changes in PoP/MPLS paths while a target IPv6 address remains alive during hours, in-flight Starlink routers can be discovered (cross check ADS-B flight data). Will this be disabled?
Jay Turla retweeted
Welcome De La Salle-College of Saint Benilde (Benilde, DLS-CSB) as Silver Sponsor
Recognized for academic excellence and global innovation, the College continues to blaze new paths in education, empowering students to create, serve, and make a difference.
#ROOTCON20 #SilverSponsor #DLS-CSB
For over three years, @LennertWo and I have worked on improving fault injection attacks against STM32F2 and STM32F4 devices to make them more repeatable and reliable. It's been a roller coaster of late nights, bricked chips, and questioning our life choices, resulting in over 100 million total glitches, a new attack strategy, and flash memory recovery from dozens of locked targets with a 100% success rate. I'm super proud of what we've done and happy to officially share it with the world!
grandideastudio.com/portfoli…
github.com/joegrand/stm32-fa…
youtube.com/watch?v=4LahQG09…
Jay Turla retweeted
...for context: youtu.be/kNtxH3zjWbE
for real, 0x06 was *such* a banger...
Jay Turla retweeted
🔓 GEEKCON 2026
📍 Shanghai | Oct. 24
⏳ Submit by Sept. 15 geekcon.top/#cfp
Real targets. Live PWN.
🤖 2-Hour AI Live Hacking Challenge
DAF | 30+5 | Special Disclosure
AI vs. Hackers
Could this be the last hacker competition for humans?
👉 geekcon.top
#GEEKCON2026 #AISecurity #Cybersecurity #Hacker #SecurityResearch #IoT #AI
How to use Claude Code for Bug Bounty: find fast, validate manually
Blog: yeswehack.com/learn-bug-boun…
Author: @yeswehack

































