warlock_rootx retweeted
CVE-2025-38352 exploit is finished!π Definitely my most complex exploit to date! π©
I'll release the exploit with part 3 of the blog post very soon! It targets vulnerable kernels 5.10.xx, no specific devices.
Finally, demo time! Don't fall asleep while watching it! π€£
warlock_rootx retweeted
Blog post is out! Come learn about how I analyzed the latest kernelCTF 1-day submission.
This was a vulnerability in the Kernel TLS subsystem. I didn't write a full exploit yet, but @u1f383 already gave me some ideas that I will try to implement soonπ
faith2dxy.xyz/2025-10-02/kCTβ¦
warlock_rootx retweeted
We are happy to share our slides for TyphoonCon 2024 and the exploit code for v8ctf. We hope this will be helpful for those who study browser exploits :)
github.com/kaist-hacking/CVEβ¦
kaist-hacking.github.io/pubsβ¦
warlock_rootx retweeted
I also uploaded the challenge files + my exploit (in the `exploit/` directory) here for anyone that wants to try it out:
github.com/farazsth98/CTF/trβ¦
Here's a short write-up for SafeBridge from the 6th Real World CTF.
The bug is in the L1 bridge contract. Can you spot it in the code below?
The writeup + both bridge contracts + the exploit are included in the gist below.
gist.github.com/farazsth98/4β¦
warlock_rootx retweeted
Time-based SQLi :
1. User-Agent: "XOR(if(now()=sysdate(),sleep(5),0))XOR"
2. X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z
#bugbountytips #cybersecurity #hacker #infosecurity #infosec #BugBounty
warlock_rootx retweeted
Started to keep track of CTF challenges I've made in a public repo. Hope to continue adding more each year :)
github.com/josephsurin/my-ctβ¦
warlock_rootx retweeted
Moved over to a new blog (built using gatsby.js) for easier maintenance. I moved over the web3 related blog posts for now: faith2dxy.xyz
Old blog will still stay up for a long time to come though!
warlock_rootx retweeted
Reminder that DiceCTF @ HOPE begins tomorrow! Anyone can play this beginner-friendly CTF competition, and in-person @hopeconf attendees can even win US$2,000 in prizes. Find us at D'Angelo 311, and join the Discord: discord.gg/YwbsXyaRGr
warlock_rootx retweeted
Get ready for Electrovoltβ‘
I'm extremely excited to announce that myself, @S1r1u5_ ,@TheGrandPew & @wcbowling will present our talk "ElectroVolt: Pwning popular desktop apps while uncovering new attack surface on Electron" @ Black Hat USA 2022
blackhat.com/us-22/briefingsβ¦
#BHUSA
warlock_rootx retweeted
What do you get if you combine a bunch of dragons with elite @p4_team and friends?
Yup, 1st place at @hack_a_sat qualifiers π°οΈπ°οΈπ°οΈproving once again that π΅π± Can Into Space ππ!
#HackASat3
πππππππ
ππππ°οΈπππ
πππππππ
β¬οΈβ¬οΈβ¬οΈβ¬οΈβ¬οΈβ¬οΈβ¬οΈ
πππ‘π²πππ
Winner winner chicken dinner π¦Poland stronk π΅π± πͺ Once again we won @hack_a_sat quals π together with @DragonSectorCTF and friends! #HackASat3 π°οΈ
warlock_rootx retweeted
New blog post! (a simple one)
SageMath script for AES-GCM challenges rbtree.blog/posts/2022-03-27β¦
warlock_rootx retweeted
Codegate 2022 Qual Write up vuln.live/blog/18
warlock_rootx retweeted
Played Codegate 2022 prequal as Cykor in university section and got 1st place!! Solved all web challenges and will share the write-up after submitting period.
Maybe but we can't be that "anyone" cause the event registration is closed π€ @InCTF
As a very eventful day comes to a thrilling end, Team AlooFry crests on top the scoreboard with a total of 11034 points with Team IITBreachers behind them by just 3 points!
Another day remains at @inCTF.
Still, it's anyone's game!
CTF is already started but we are getting VPN access denied issue and we don't get any organizers supportπ₯². Indian Army Cyber Security Hackathon! π@isacindia @RakshaUni @adgpi #SainyaRanakshetramHackathon
We are recruiting pwn players. If you are interested in our team, plz mail to [email protected] or DM. We will review and mail back!! Thank you.
























