45tr00

A cyber security enthusiast, CTF player @p3rf3ctr00t.

[Kyros @IamKyros69]

MIT Engineer Builds Tongue-Controlled Device For Paralyzed Users

[p3rf3ctr00t @p3rf3ctr00t]

💥Presenting the champions of p3rf3ctr00t CTF 2025! 🔥

🥇 1st Place — 0xfun
🥈 2nd Place — Al_Qabilah
🥉 3rd Place — Escadron

Congratulations to these outstanding teams for an incredible performance!

Thanks to all our sponsors and creators👏👏

[p3rf3ctr00t @p3rf3ctr00t]

💯💯P3rf3ctr00t CTF 2025 has officially come to an end🎉🎉. It was a great success. GG to everyone that participated and congrats to the winners.🎉🎉

UNTIL NEXT TIME👏👏

Also kudos to the support for 48 hrs of consistency😁😁

[45tr00 @45tr00]

@tryhackme @konfushon has to be sticker chaos 😂😂

[p3rf3ctr00t @p3rf3ctr00t]

🗣️🗣️The wait is almost over! P3rf3ctr00t CTF 2025 is around the corner — bigger, tougher, and more thrilling than ever.🎉
Gear up to test your skills, push your limits, and prove your dominance in the cybersecurity arena.🔥🔥
💥 Coming soon…

Thanks to all our partners🙏🙏

[p3rf3ctr00t @p3rf3ctr00t]

Congrats again!!!🎉🎉, to the team @p3rf3ctr00t for bringing another one home . Led by @alvin_kidwiz we won the @SafaricomPLC PwnZone ctf. We are really umatched at this level😂😂. GG to all those legends who participated👍🏾👍🏾.

[p3rf3ctr00t @p3rf3ctr00t]

Another win for the team🔥🔥, participating in @AfricaCERT @CTF_Room @AfNOGWorkshops Cyber Drill. Congrats to the team led by @L0rd5ud0 🎉🎉. GG💯

[45tr00 @45tr00]

@0xeliashezron I wouldn't have put it any other way 💯

[45tr00 @45tr00]

@veggie_eric You can pick up a thing or two. The more you practice, the more you learn.

[45tr00 @45tr00]

@cd_slash_x @vxunderground Uhm, gemini works just fine on my end.

[45tr00 @45tr00]

@TheQuillBot For how long should we wait? It's been hours 🥲

[sysxplore @sysxplore]

LINUX USERS ARE NOT HACKERS!
LINUX USERS ARE NOT HACKERS!
LINUX USERS ARE NOT HACKERS!
LINUX USERS ARE NOT HACKERS!
LINUX USERS ARE NOT HACKERS!
LINUX USERS ARE NOT HACKERS!
LINUX USERS ARE NOT HACKERS!
LINUX USERS ARE NOT HACKERS!

[Norah @0xnorah23]

🚀 Kicking Off My Web3 Learning Journey Series!

I've received many questions about how I transitioned into Web3 Security. So, I’ve decided to share my exact learning journey, step by step.

This isn’t meant to be the ultimate guide. There are plenty of great resources out there (many probably better). But this is what genuinely worked for me, and I hope it’ll help in your own journey.

[Security Trybe @SecurityTrybe]

do you agree?

[Hacktron AI @HacktronAI]

💣Pre-auth RCE in under 10 minutes. This vuln survived years of audits because it looked innocuous: forgotten service, commented code, and an obscure serializer. Humans skim past that, but AI doesn’t blink. 🤖

[Hacktron AI @HacktronAI]

Plot twist: the FlexNetOperationsService was commented out in the config. Was this another dead end?🤔Well... the .svc file was still deployed. In IIS, that means the service was still live! Hacktron built a quick SOAP payload, fired it, and got a Windows directory listing back.

[Hacktron AI @HacktronAI]

⚠️Then it landed on one weird serializer: NetDataContractSerializer. It turns out that this serializer embeds .NET metadata. Translation? It lets attackers sneak in full .NET objects if you’re not careful! The serializer lived inside a WCF service called FlexNetOperationsService.

[Hacktron AI @HacktronAI]

Enter Hacktron — our AI security engineer. We gave it the decompiled .NET code and said: "Find pre-auth deserialization flaws". It tore through thousands of files in minutes. First stop: every .Deserialize() call it could see. Most were boring JSON converters with safe defaults.

[Hacktron AI @HacktronAI]

Apple once ran this software. Multiple security firms poked at it. No one spotted the bug.

Here's a thread of how we found CVE-2025-5086 in Delmia Apriso... 👇🧵