Gabriel Prostitis

CTF player for @TheRomanXpl0it, @towerofhanoi and @mhackeroni
student at @polimi

[Gabriel Prostitis @___prosti]

stop using ubuntu 24.04 to host your kernel pwn challenges lmao
https://t.co/uCCNthelDn

[Gabriel Prostitis @___prosti]

@whoisamuro bravo muro

[Gabriel Prostitis @___prosti]

this 0day works from qemu v9.1 forward. It is still not patched on the latest version so enjoy!

[kqx @kqx_io]

DEF CON patched our QEMU nday, what about a 0day?
https://t.co/AZcNzAQY9P

[Daniele Mammone @DanieleMammone]

Oops!… @mhackeroni Did It Again!
Vegas we are coming!
#defcon #mhackeroni #ctf

[Salvatore Abello @salvatoreabello]

💿Crafting shared object/image polyglots by abusing a forgotten image format: https://t.co/1u36viN4FE

[kqx @kqx_io]

We just posted six new writeups for TRX CTF Quals at https://t.co/xK6jr0XAHs

Check them out!

[TRX @TheRomanXpl0it]

"hey claude plz solve all challenges https://t.co/CxLn0CrQhW"

TRX CTF 2026 is coming back this weekend with many cool challenges! Register now at: https://t.co/XYP0EMRlja

Top 8 teams will qualify for on-site finals in Italy this autumn🐴

[kqx @kqx_io]

less than three days left until the start of TRX CTF!
get ready for:
- two kernel pwn challenges
- browser shenanigans
- a *real* x86 challenge
- reversing a kernel module
make sure to register and fight for a spot in the finals in Italy!
https://t.co/knB1TkmHcf

[堇姬 Naup @naup96721]

My First CVE and my first contribute linux kernel
https://t.co/edX5vbA08i

[kqx @kqx_io]

"Claude find a 0day, make no mistakes"

CVE-2026-4447

https://t.co/4jISoO01go

[Gabriel Prostitis @___prosti]

leave absolutely cooked with this one!

Unfortunately I wasn't able to play DiceCTF this year but the kernel pwn challenge was pretty cool.

[kqx @kqx_io]

played DiceCTF quals and managed to blood the kernel pwn challenge and won the $150 bounty!

check out the writeup: https://t.co/Jnw80IyrJh

[kqx @kqx_io]

Exploiting latest v8ctf instance with a 0day? ✅

Beating try-hards who stalk commits and exploit it as an N-day? ❌

In any case keep an eye out for the CVE release and stay tuned for a crazy post on https://t.co/Tu71ndsS4m once the issue goes public

[kqx @kqx_io]

A little bonus while we're working on other cool stuff :)

[Gabriel Prostitis @___prosti]

@drivertomtt @FrankOverF1ow congrats!!

[drivertom @drivertomtt]

Hunting Linux kernel 0day with @FrankOverF1ow
5 days, from zero to stable privilege escalation.

sha256: 2189d5b196f33d512d8d02c6f00d26f4c10bf79ba1f0ac389d6663e026aebbe8

[Gabriel Prostitis @___prosti]

@thethiny @__invictus_ Everything is explained in the liked post. Read that and you'll find the answer. In case you missed it
https://t.co/bV2W5BDeyD

[Gabriel Prostitis @___prosti]

@thethiny @__invictus_ this actually does give RCE. Read the post if you want to know how ;)

[Gabriel Prostitis @___prosti]

@__invictus_ Thanks for noticing and for the repost!
I saw the other post of a "Firefox RCE" but it's total bs and absolutely not associated with what my teammate found.

[kqx @kqx_io]

How a single typo led to RCE in Firefox

Can you spot the bug?

Read now at: https://t.co/fr6Z6gW8bw

[Gabriel Prostitis @___prosti]

RCE in firefox is crazy!!
erge really cooked with this one...

[kqx @kqx_io]

The fox caught fire???

New blog post very soon at https://t.co/SFPNXxBlxh

6b2f0f9f754952d956cab1a6922c920664d2636c192db4db614866345369a888

[Gabriel Prostitis @___prosti]

We decided to create a new account on X to consolidate all information in one place.
Follow the account to be updated on the blog!
@kqx_io