st4rk

the try harder / Goku art by the amazing @_Gabrielfer

[Ryan M @Grimdoomer]

New blog post on reverse engineering and modifying HDD firmware. In this part I cover obtaining, analyzing, and modifying firmware, using backdoor commands to hot patch code in RAM, and using JTAG to debug a live HDD https://t.co/9vVt26JHxO

[fail0verflow @fail0verflow]

want to play with the fbsd umtx exploit? check out https://t.co/AARWy9HR4c

[lander @landaire]

Exploiting the NT Kernel in 24H2: New Bugs in Old Code & Side Channels Against KASLR by @gabe_k https://t.co/E7PhfD8TbR

[Ryan M @Grimdoomer]

The Halo 2 HD blog post is out! This covers everything I did to get the game rendering in HD resolutions from patching the rendering engine and memory allocators, to hot patching the Xbox OS, and overclocking the GPU and getting perf measurements https://t.co/A1CptPuHOu

[TrendAI Zero Day Initiative @thezdi]

Nice! gabe_k of https://t.co/IjGBsh5oMp takes full advantage of first #Pwn2Own by demonstrating an LPE on #Windows 11. He's off to the disclosure room to provide all the details. #P2OVancouver

[st4rk @St4rkDev]

@cajuinaoverflow Se voce tem w^x/dep/nx ou sei la, praticamente a stack nao é RWX voce vai precisar fazer um ROP/JOP ou algo do tipo pra code exec, mas tbm depende do que vc ta mexendo (assumindo q vc n tem stack canaries pra lidar tbm)

[Renan Rios @hyhy_100]

Ohoo! Very happy to have received my first browser CVE.

CVE-2024-0741: Out of bounds write in ANGLE.

I found it via manual code review.

[st4rk @St4rkDev]

@HiveHivemind Link 🙏 ta mto lindinho

[Jun Kokatsu @shhnjk]

Here is my "Prompt Injection" on Bing Chat 😀
#shibuyaxss

[st4rk @St4rkDev]

@shhnjk 🙏🙏🙏🙏🙏🙏🙏🙏

[st4rk @St4rkDev]

@ShinyQuagsire Damn, you're already in 2024

[st4rk @St4rkDev]

@days_danilo Doom 3 and John Carmack sao inspiracoes pra mim e pra game engine que to escrevendo, é incrivel como esse jogo ainda continua lindo!!

[st4rk @St4rkDev]

@days_danilo Me lembrou um pouco front mission 3! Ta bem legal

[Shiny Quagsire @ShinyQuagsire]

de_Fuse, the One True Pwn
https://t.co/YzpcBe99oB

[st4rk @St4rkDev]

@SebAaltonen @SunlessSolaire It does remind me of the examples from learnopengl in the PBR->Light section. Cool stuff anyway

[st4rk @St4rkDev]

@kd_tech_ @SpecterDev Gg @bkth_

[Axel Souchet @0vercl0k]

I added support for ARM64 / branches in gadgets (JOP) for rp++ v2.1's Christmas release 🎅🏽❄️🎄

Go check it out 🔥🔥

https://t.co/8P7IjWIG1H

[stephen @_tsuro]

Breaking the Chrome Sandbox with Mojo - the recording of my black hat talk is out:
https://t.co/5oY98dHm8t

(I'm painfully aware of the red shift :) )

[st4rk @St4rkDev]

@gabe_k Always happy to follow your content, 10/10

[Filippo Bigarella @FilippoBiga]

Towards the next generation of XNU memory safety: kalloc_type https://t.co/cJepkb3tzq

I’m so happy that the team finally gets to share the details of this huge effort. And I’m so proud I had the chance to work on it in the past couple of years. :)