Oryan De Paz

Interested in infosec, especially in Windows Internals 💙 Reverse Engineering 💚 and CTFs ❤ (oh and did I mention Windows Internals already? 😉)

[Oryan De Paz @OryanDP]

Recently I fell in love with something new, and now it's time to share it with the world! 🌈
Here are 5 reasons why you should start doing CTFs! :)
https://t.co/k6K4LQeNdL

[NoOFFENSE @nooffense_il]

NoOffense is back on August 4th. Registration is now open (link below).

[Shift @Shiftreduce]

Following my previous post, I wrote another blog on a futex bug that was patched not long ago.

It allowed any attacker with an untrusted selinux context to elevate privileges given the right instruments.

[BlueHat IL @BlueHatIL]

Also joining BlueHatIL: @0xgalz & @ido__shani with ChainLeak: From AI Framework to Cloud Secrets - a fascinating behind-the-scenes look at the vulnerabilities they uncovered in Chainlit, and what we can learn from them. Don't miss. Register now: https://t.co/Rl8t6wHSOj

[Ophir Harpaz @OphirHarpaz]

begin-re is back 🎉
Lost the domain, kept the course, improved the looks. You can find it now at https://t.co/Q5NqntxI9M

[Shift @Shiftreduce]

We live in interesting times.

Last month Linux patched a core uaf in the epoll subsystem, we rarely see these kind of bugs.
As i like these kind of bugs, i wrote a few words about it here: https://t.co/XIiPU7LSSN

[Muqsit 𝕏 @mqst_]

🧪 iOS Pentesting: Step-by-step guide on "IPA Binary Analysis" using MobSF.

Guide: https://t.co/2aC9OK5IOo

Author: Inês Martins

#infosec #pentesting

[BlueHat IL @BlueHatIL]

The wait is over! Registration and the full agenda for BlueHatIL 2026 are now live. Register now before spots are gone!
Register here: https://t.co/zVl9dIyv4u
Full agenda: https://t.co/tumf4VWCVG

[Oryan De Paz @OryanDP]

It's been too long so… here’s my #NewProfilePic ;)

[Zafran Security @Zafran_io]

Zafran Labs identified 2 critical vulns in Chainlit, a widely used AI framework. The flaws allow attackers to leak cloud API keys and steal sensitive files, as well as perform SSRF against servers hosting AI applications. @0xgalz @ido__shani https://t.co/4lJ92HhKs5

[Gal Z @0xgalz]

My team just published our latest research uncovering vulnerabilities in Chainlit, an open source AI framework for building conversational AI applications. Great work by @ido__shani 👏

[BlueHat IL @BlueHatIL]

CFP for BlueHatIL 2026 is open! Submit your abstract - your time to shine starts now: https://t.co/aDfFYzxgcD

[Oryan De Paz @OryanDP]

@nitzanfarhi @hexacon_fr Thanks! :)

[Oryan De Paz @OryanDP]

Good morning @hexacon_fr! It's been a while ;)
Nitzan and I are thrilled to be here!
Stop by and say hi ;)

[Oryan De Paz @OryanDP]

Yay! I won @Cellebrite’s iPad challenge🥳🥳🥳
Had so much fun solving these puzzles!
What a great way to end this amazing conference 😄
@hexacon_fr

[Oryan De Paz @OryanDP]

Thank you @Blackhoodie_RE for another great training! It's been a pleasure, as always :)

[Mari0n @pinkflawd]

Huge thank you to @hexacon_fr for hosting BlackHoodie, to our trainers @pamoutaf, @naehrdine and Sonia, and much love to @Car0line_Le for pulling it all together ❤️❤️❤️ the trainings were a huge success, now have a fun conference everyone!

[Oryan De Paz @OryanDP]

In his great @hexacon_fr talk today, @benny_isaacs demonstrated us how he and Nir exploited a 0-click RCE in with only 2-bits reset! Very cool talk :)

[Oryan De Paz @OryanDP]

God I missed @hexacon_fr ! Everything sounds amazing 😍

See you there 😎

[Hexacon @hexacon_fr]

🚨 Time to reveal our first-class lineup for HEXACON 2025! ✨

A few training spots are still available if you want to join the party! 🎉
Unfortunately, trainings + conference packs are sold out

https://t.co/zy6FX3I57C

[Oryan De Paz @OryanDP]

Hey #Android researchers - what are your alternatives for #JEB? Any pro tips to clear these 30GB out of my RAM would be highly appreciated 🙏🏼

[Oryan De Paz @OryanDP]

@sapirxfed Good luck! :)

[RE//verse @REverseConf]

Working with the JVM or just curious how to dig deeper into it? Marc’s Dynamic Analysis of JVM Processes from RE//verse 2025 is a good one to queue up. Give it a look: https://t.co/EF5jT0xfE6