warlock_rootx retweeted
CVE-2025-38352 exploit is finished!π Definitely my most complex exploit to date! π©
I'll release the exploit with part 3 of the blog post very soon! It targets vulnerable kernels 5.10.xx, no specific devices.
Finally, demo time! Don't fall asleep while watching it! π€£
warlock_rootx retweeted
Blog post is out! Come learn about how I analyzed the latest kernelCTF 1-day submission.
This was a vulnerability in the Kernel TLS subsystem. I didn't write a full exploit yet, but @u1f383 already gave me some ideas that I will try to implement soonπ
faith2dxy.xyz/2025-10-02/kCTβ¦
warlock_rootx retweeted
We are happy to share our slides for TyphoonCon 2024 and the exploit code for v8ctf. We hope this will be helpful for those who study browser exploits :)
github.com/kaist-hacking/CVEβ¦
kaist-hacking.github.io/pubsβ¦
warlock_rootx retweeted
I also uploaded the challenge files + my exploit (in the `exploit/` directory) here for anyone that wants to try it out:
github.com/farazsth98/CTF/trβ¦
Here's a short write-up for SafeBridge from the 6th Real World CTF.
The bug is in the L1 bridge contract. Can you spot it in the code below?
The writeup + both bridge contracts + the exploit are included in the gist below.
gist.github.com/farazsth98/4β¦
warlock_rootx retweeted
Time-based SQLi :
1. User-Agent: "XOR(if(now()=sysdate(),sleep(5),0))XOR"
2. X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z
#bugbountytips #cybersecurity #hacker #infosecurity #infosec #BugBounty
warlock_rootx retweeted
Started to keep track of CTF challenges I've made in a public repo. Hope to continue adding more each year :)
github.com/josephsurin/my-ctβ¦
warlock_rootx retweeted
Moved over to a new blog (built using gatsby.js) for easier maintenance. I moved over the web3 related blog posts for now: faith2dxy.xyz
Old blog will still stay up for a long time to come though!
warlock_rootx retweeted
Reminder that DiceCTF @ HOPE begins tomorrow! Anyone can play this beginner-friendly CTF competition, and in-person @hopeconf attendees can even win US$2,000 in prizes. Find us at D'Angelo 311, and join the Discord: discord.gg/YwbsXyaRGr
warlock_rootx retweeted
Get ready for Electrovoltβ‘
I'm extremely excited to announce that myself, @S1r1u5_ ,@TheGrandPew & @wcbowling will present our talk "ElectroVolt: Pwning popular desktop apps while uncovering new attack surface on Electron" @ Black Hat USA 2022
blackhat.com/us-22/briefingsβ¦
#BHUSA
warlock_rootx retweeted
What do you get if you combine a bunch of dragons with elite @p4_team and friends?
Yup, 1st place at @hack_a_sat qualifiers π°οΈπ°οΈπ°οΈproving once again that π΅π± Can Into Space ππ!
#HackASat3
πππππππ
ππππ°οΈπππ
πππππππ
β¬οΈβ¬οΈβ¬οΈβ¬οΈβ¬οΈβ¬οΈβ¬οΈ
πππ‘π²πππ
Winner winner chicken dinner π¦Poland stronk π΅π± πͺ Once again we won @hack_a_sat quals π together with @DragonSectorCTF and friends! #HackASat3 π°οΈ
warlock_rootx retweeted
New blog post! (a simple one)
SageMath script for AES-GCM challenges rbtree.blog/posts/2022-03-27β¦
warlock_rootx retweeted
Codegate 2022 Qual Write up vuln.live/blog/18
warlock_rootx retweeted
Played Codegate 2022 prequal as Cykor in university section and got 1st place!! Solved all web challenges and will share the write-up after submitting period.
warlock_rootx retweeted
Balsn CTF 2021 will be on next week!
Registration is now opened!
balsnctf.com/
GIF credit: @g1n04h
warlock_rootx retweeted
And it's over! (Well it has been for 90 minutes now, we're just catching up)
The winners are:
1st) @SekteGadeng
2nd) @warlockrootx
3rd) @ripp3rsCTF
So glad to have had 1118 players across 719 teams compete in our #CTF, it ended up being unbelievably close until the end!


























