ふるかわ（furukawa）

Reverse Engineering, Malware Analysis, CTF(@TokyoWesterns, fuzzi3, scryptos)

[ふるかわ（furukawa） @_N4NU_]

rev challenges listはgithubに移行しました．
過去のCTFのrev問でwriteupが無かったり，日本語のwriteupがほしい場合にissueを立ててくれれば出来るだけ解いて日本語のwriteupを書いていこうと思います．
https://t.co/XTjm5CaUFL
https://t.co/tc2Uv8mtqi

[TrendAI Zero Day Initiative @thezdi]

Yaaaaasss! 👑 Kentaro Kawane of GMO Cybersecurity by Ierae was able to exploit Microsoft Windows 11! If confirmed, they win $30,000 and 3 Master of Pwn points. They're off to the disclosure room to drop the deets. #Pwn2Own #P2OBerlin

[bata @bata_24]

5/15～17で、車・IoT系のCTFを開催します。
簡単目に作っているので、初参加の人でも楽しめると思います。
腕に覚えのあるCTFerは、ぜひAI無し縛りで挑戦してみてください:)
#cartagaitai #CTF

[NDIAS, Ltd. @ndias_ltd]

「NDIAS Automotive/IoT CTF」を開催します🚗

自動車・IoT分野のセキュリティに興味のある方に向けたオンラインCTFです。
作問はNDIASのCTFチーム「cartagaitai」が担当します。

学生の方から実務経験者まで幅広くご参加頂けます。

🗓 5/15(金)18:00 ～ 5/17(日)18:00
💻 オンライン開催 / 参加無料

※申込は4/22（火）12:00より開始予定です。

#CTF #cartagaitai

[LeftenantZero @LeftenantZero]

I just released some free exploit development CTFs based on real world CVEs. They include hints, walkthroughs and working exploits if you get stuck.

https://t.co/e3AKxsi7H8

[sebsrt @s3bsrt]

I found an interesting RCE due to unsafe deserialization in qwik js framework. I'll post the writeup analysis
https://t.co/Oy45fcyeKT

[m411k @m411k_]

Here is my CVE-2025-10891 Chromium RCE PoC:
https://t.co/jqrevQ9Ca4

[ふるかわ（furukawa） @_N4NU_]

AIで解けないようにしたら人間も解けなくなってしまった回

[NiNi @terrynini38514]

I found a vulnerability in Oracle VirtualBox (CVE-2026-21957) back in September 2025. It can be turned into AAR/AAW, and then escaping the VM is pretty easy.

I originally planned to find a vulnerability for Pwn2Own, but since I found the vuln in September, sitting on a practical vuln for that long didn’t feel very ethical, so I eventually reported it to ZDI. But I still finished the exploitation + demo video as practice.

[ふるかわ（furukawa） @_N4NU_]

Collisionだけど成功した。Berlinも行きたいな

[TrendAI Zero Day Initiative @thezdi]

Collision! @N4NU of GMO Cybersecurity by Ierae targeted the Alpine iLX-F511, hitting a one-vulnerability collision with a previous attempt and earning $2,500 USD and 1 Master of Pwn point. #Pwn2Own #P2OAuto

[TrendAI Zero Day Initiative @thezdi]

Collision! @N4NU of GMO Cybersecurity by Ierae targeted the Alpine iLX-F511, hitting a one-vulnerability collision with a previous attempt and earning $2,500 USD and 1 Master of Pwn point. #Pwn2Own #P2OAuto

[ふるかわ（furukawa） @_N4NU_]

@KF_Lawless ありがとうございます！☺

[ふるかわ（furukawa） @_N4NU_]

今年は参加してます。明日のAlpineも上手くいくといいな

[TrendAI Zero Day Initiative @thezdi]

We have another collision! @_N4NU_ of GMO Cybersecurity chained three bugs against Kenwood - including an n‑day hard‑coded credential, incorrect permissions on a critical resource, and command injection - to earn $8,000 USD and 1.75 Master of Pwn points. #Pwn2Own #P2OAuto

[TrendAI Zero Day Initiative @thezdi]

We have another collision! @_N4NU_ of GMO Cybersecurity chained three bugs against Kenwood - including an n‑day hard‑coded credential, incorrect permissions on a critical resource, and command injection - to earn $8,000 USD and 1.75 Master of Pwn points. #Pwn2Own #P2OAuto

[GMOサイバーセキュリティ byイエラエ株式会社【公式】 @gmo_ierae]

#GMOイエラエ のホワイトハッカーが、
脆弱性発見コミュニティZero Day Initiativeが運営する脆弱性発見コンテスト【#Pwn2Own Ireland 2025】に出場🔥🔥

GMOイエラエ 所属の清水が、
Canon imageCLASS MF654Cdw のゼロデイ脆弱性を発見し、
バッファオーバーフロー攻撃に成功💪
報奨金10,000ドル獲得しました！

[しふくろ@有坂真白FC @shift_crops]

動画も撮った

[しふくろ@有坂真白FC @shift_crops]

Canonのプリンタ攻略しました👍
ユニークバグだったらしいので10,000USD獲得です💰️

[TrendAI Zero Day Initiative @thezdi]

🔥 Direct hit! @shift_crops just popped the @CanonUSA imageCLASS MF654Cdw at #Pwn2Own. They head off to the disclosure room to show how nyan cat magically appeared. #P2OIreland

[TrendAI Zero Day Initiative @thezdi]

📢 Confirmed: @shift_crops of GMO Cybersecurity used a stack based buffer overflow to exploit the @CanonUSA imageCLASS MF654Cdw. Their seconf round win earns them $10,000 and 2 Master of Pwn points. #Pwn2Own

[SuperFashi @SuperFashi1]

please join the server https://t.co/CaJF459BIZ to discuss further. At the same time, if you are an existing team planning to organize and looking for members and new ideas, I will be more than happy to join and exchange ideas. (FYI, I am not affliated with any team right now)

[SuperFashi @SuperFashi1]

both for the participants and spectators (and even people outside CTF community). I am now looking for like-minded players who also wanted to make changes to the current format and are willing to discuss/organize the DEF CON CTF for the upcoming years. If you are interested,