I like the smell of segfault in the early morning 🏴 peace was never a feature. How the fuck enthusiast
Joined January 2013
- Tweets12.2K
- Following754
- Followers1.3K
- Likes10.8K
switch retweeted
Pen testers will soon lose their job
GPT-6 Astra test 4/n
Prompt: "Implement pen spinning with a dexterous hand. Use Isaac Lab for RL training, use the Sharpa hand, and create the pen mesh yourself. Give me a trained RL policy and a visualization video. You are free to search the web and download papers or anything else you need."
After running autonomously for a day and a half (including training the policy), this is what we got:
Credit: my student Chengyang Li
switch retweeted
I'm glad to announce the release of my VS Code Extension: Multi-Search 🔍
If you find it useful, don't hesitate to share it with your colleagues or friends 🙏
- github.com/Ghizmoo/multi-sea…
- marketplace.visualstudio.com…
switch retweeted
thanks to everyone who attended my #TheSAS2025 talk "Typographic hit job: when fonts pull the trigger". 🙏
I've written an accompanying blogpost that goes over all the details: haxx.in/posts/2025-09-23-can…
switch retweeted
La team @acceis @besecuregroup gagne des bons d'achats 🍖, des médailles d'argent gravées Barbhack, des bières édition limitée, un module #flipperzero Messenger, une édition du magazine #phrack édition limitée en provenance de la @defcon
switch retweeted
📣 Gagnants hashtag#CTF BarbHack 2025 !
🥇 Team @Synacktiv
🥈 Team @acceis @besecuregroup
🥉 Team @FlatNetworkOrg tfns.fr/
Suivis de EternalBlue CTF Team & heartbleed
Félicitations à tous, rdv en 2026 !
barbhack.fr ▶️
switch retweeted
hashcat v7.0.0 released!
After nearly 3 years of development and over 900,000 lines of code changed, this is easily the largest release we have ever had.
Detailed writeup is available here: hashcat.net/forum/thread-133…
« Adversaries could potentially exploit pizza delivery patterns to seed confusion or create false signals, turning this intelligence tool into a weapon of information warfare »
journee-mondiale.com/en/pent…
switch retweeted
Microsoft just released the patch for CVE-2025-33073, a critical vulnerability allowing a standard user to remotely compromise any machine with SMB signing not enforced! Checkout the details in the blogpost by @yaumn_ and @wil_fri3d.
synacktiv.com/publications/n…
switch retweeted
First userland ropchain exploit on the Switch 2
Source: bsky.app/profile/retr0.id/po…
switch retweeted
Took @akamai_research's script for BadSuccessor and improved it a bit.
- runs from non domain joined systems
- works in forests
- prints the rights each entity has on a OU
- pre-flight check if 2025 DCs are present
- code changes here and there
github.com/LuemmelSec/Pentes…
switch retweeted
IngressNightmare: 9.8 Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX - @wiz_io
wiz.io/blog/ingress-nginx-ku…
switch retweeted
#ACCESSGRANTED - On vous en dévoile un peu plus sur le programme ! L'appel confs & rumps est ouvert, contactez-nous : [email protected]
Billetterie de l'event : my.weezevent.com/access-gran…
switch retweeted
Hello twitter, made an IDA script/plugin to comment your decompiled Rust code with... Rust source code !
It fetches panic information and reads fetch the associated source code to print it to you in the form of a comment.
github.com/N0fix/IDA_rust_me…
switch retweeted
Shoutout to the homies at "IObit Malware Fighter".
Their IMFForceDelete driver is so wildly vulnerable, and poorly written, you can have their driver arbitrarily delete any file on the machine with 0 privileges and literally 1 line of code
Thanks @_mmpte_software for sharing
switch retweeted
Here's my research about Python dirty Arbitrary File Write to RCE via overwriting shared object files or overwriting bytecode files. Enjoy!
siunam321.github.io/research…
#Research #WebAppSec
switch retweeted
No shortage of kernel bugs... :)
Kernel 6.6.87 got pwned by 6 unique 0days within 25 seconds of going live on kCTF, lol: docs.google.com/spreadsheets…