Octag0n

Vulnerability Researcher. 龙潭虎穴

[n30m1nd @n30nfluke]

I wrote something on the @ExodusIntel blog 🙂 https://t.co/zVtax5p8aP

[Octag0n @Octagon15326385]

@BlueHatIL Any particular reason why you didn’t upload @mdowd keynote @BlueHatIL ?

[BRDNS @brandon_shi]

CVE-2021-38001: A Brief Introduction to V8 Inline Cache and Exploitating Type Confusion https://t.co/Sj86gFr0gr

[Yarden Shafir @yarden_shafir]

Microsoft is preparing to kill many known KASLR bypasses in the next release.
Unless the calling process has debug privilege enabled, kernel addresses will be stripped from the output data for all leaking NtQuery APIs

[itewqq @lyq_sqsp]

vscode+clangd = best kernel code viewer/IDE

wayyyy much faster than cpptools... 🤩

[j j @mistymntncop]

My reproduction of the ITW CVE-2022-26485 exploit.
https://t.co/pu0IsLdEOq

[weiyiling @huangzhenyuan]

Release the Firefox wild 0day (CVE-2022-26485 && CVE-2022-26486) analysis : https://t.co/pIzXfIWiR2

[j j @mistymntncop]

https://t.co/2NDNgu5zVL
Thanks for the video @r3tr0spect2019 :). Did this 1 a while ago so pls take the comments with a grain of salt.

[avboy1337 @avboy1337]

https://t.co/AYz7eOHoKp
Using Leaking Sentinel Value to Bypass the Latest Chrome v8 HardenProtect

[Matteo Rizzo @_MatteoRizzo]

A bit late but here is the writeup for the Fourchain challenge series from HITCON 2022, where we chain exploits for Chrome, Linux and Virtualbox. Enjoy! https://t.co/vGP5W8OMPB

[Daejin Lee @dj_1592]

My first blog post about analyzing windows defender is out! Fuzzing the Shield: CVE-2022–24548 - https://t.co/l6tkgSNy9h

[Octag0n @Octagon15326385]

@HaboobSa @jack_halon Wow that was a disappointment. You should at least reference other blogs that have done a better job explaining the vulnerability…

[Jack Halon @jack_halon]

Today I am releasing part 2 of my 3-part browser exploitation series on Chrome!

In part 2, we take a deep dive into the V8 compiler pipeline by understanding what happens under the hood in Ignition, Sparkplug, and TurboFan!

Enjoy!

https://t.co/XAnbzdnjeQ

[Jack Halon @jack_halon]

Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field.

Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! https://t.co/bbFjOOzlOu

[j j @mistymntncop]

https://t.co/G1VGNTYKzU

[DEFION Research Labs @defionlabs]

The @defcon presentation “Process injection: breaking all macOS security layers with a single vulnerability” by @xnyhps is now available on YouTube. Enjoy!

https://t.co/8gwXUyLMRP

[Octag0n @Octagon15326385]

@jonathandata1 @iamnotyourbud @amysw_sec Do not forget about my dick over IP exploits

[Octag0n @Octagon15326385]

@javierprtd 没人在乎 (:

[Numen Cyber @numencyber]

An insight into a well-known documented Chrome vulnerability https://t.co/Nt7LJQZQOb
[From Leaking TheHole to Chrome Renderer RCE]

#Chrome #TechSecurity #Blockchain #InternetSecurity #Vulnerabilities #CyberSecurity

[avboy1337 @avboy1337]

exploit of CVE-2021-38003 and CVE-2022-1364 is public and use the same method https://t.co/ghSFwliqAu