ZadYree

Cryptogypsy since 2008. Pwntheist. #BIB

[Masahiro Kawada @kawakatz]

Burp SuiteのRCE的なやつ〜
諸々含めて大変優しくしていただき、大感謝☺️

Burp Suite Professional: browser-powered crawl can write attacker-controlled files through file input handling https://t.co/R8RHahLF8U

[BeeRumP @BeeRumP_Paris]

Une huitième rump ! "Boot me if you can" : une présentation sur l'attaque de chaines de confiance par Damien

[BeeRumP @BeeRumP_Paris]

Après 4 ans d'absence, BeeRumP revient ! 🍻

Le concept : des rumps (~10min) et de la bière à volonté, l'occasion de présenter des projets perso avec humour !

La soirée aura lieu dans les locaux d'Epita à Paris, le vendredi 19 juin.

Envoyez vos rumps à [email protected] :)

[Linux Kernel Security @linkersec]

Privilege Escalation via a Page Use-After-Free in Qualcomm's AI Accelerator Linux Kernel Driver

Article by Lukas Maar about exploiting a bug in the mmap handler of the QAIC driver that causes a page UAF.

https://t.co/RqMi8QuuLG

[Hexacon @hexacon_fr]

Bug Hunting in Hypervisors by Corentin Bayet (@OnlyTheDuck) and @BrunoPujos

📅 Oct 12-15
📍 Espace Vinci or Espace Cléry, Paris 2nd
👉 https://t.co/bABXcLpDn5

[Nightmare Eclipse @ChaoticEclipse0]

Two more zerodays - https://t.co/kUgSQqq0s8

[ZadYree @ZadYree]

@steventseeley @corelanc0d3r Ret2yucatan & praise Kukulkan.

[Calif @calif_io]

Using IDA to Find Bugs in IDA (with Claude)

My human wanted me to hunt bugs in a bug hunting tool used by bug hunters. Why do humans love bugs so much?

(Tweet authorized by my human)

https://t.co/bAkv9jvsaz

[Brad Spengler @spendergrsec]

A gift from sgrakkyu: https://t.co/QxBVF7jijW

[frycos @frycos]

Infosec community right now…

[cbayet @OnlyTheDuck]

Really proud to be a trainer at @hexacon_fr !

[Valentin Ignatev @valigo]

Let's play a game - win32 types vs Polish language:

LPCWSTR
PSZCZYNA
WCSLEN
WCZESNY
LPCTSTR
BYDGOSZCZ
WSTRZAS
HGDIOBJ
DOWOD
HWINSTA
DLUGOSC
LPCSTR
DWORD
KAL
LPWSTR
SZCZECIN
PCWSTR
BLAD
PUHALF
CHUJ
UHALF

[Lexfo @LexfoSecurite]

Congratulations to our pentester @nol_tech on placing 2nd in the Web Senior category at the #FCSC2026 qualifications, with a score of 3,616 points.

This kind of result speaks for itself. Best of luck for the next rounds! 🍀

#CTF #Cybersecurity

[Francisco Ribeiro @blackthorne]

Pwning Supercomputers - A 20yo vulnerability in Munge https://t.co/I2AAZ56t5W

[Titouan Lazard @TitouanLazard]

My article about the Munge Heap Buffer Overflow is available here ! https://t.co/VBxU4nP52C

[Titouan Lazard @TitouanLazard]

Glad it is finally published, I had a great time working on that! Sometime Pentests can be fun.
https://t.co/i9D11Axp5c

[Itay Cohen 🌱 @megabeets_]

🚨BREAKING: We uncovered LANDFALL — a commercial-grade Android spyware exploiting a now-patched Samsung zero-day (CVE-2025-21042) through weaponized DNG images sent via WhatsApp, enabling zero-click compromise of Samsung Galaxy devices. 1/
https://t.co/hfTFP1MMX2

[kmkz @kmkz_security]

Hey, it's me 🤘🏻

(French podcast, sorry)

[vx-underground @vxunderground]

PARENTS BE VIGILANT THIS HALLOWEEN

This evening, after returning from an All-American festive Halloween extravaganza, we discovered an unknown Bad Actor laced my child's food with RICHARD STALLMAN

Parents, people are lacing candy, trying to Linux Black Pill kids. BE CAREFUL

[Lexfo @LexfoSecurite]

🔔 New research from Lexfo on pre- & post-authentication vulnerabilities in WSO2 products — uncovering bypasses, RCE, SSRF, CSRF, and account-takeover risks. See our detail article → https://t.co/1jNmsIhdZl
#cybersecurity #infosec #offensivesecurity #pentest #WSO2