Adrien Stoffel

0daysober CTF team

[Chai Yichen @Hacker_Chai]

Going to share about my work with @SachaKozma on the Samsung Galaxy S25 at Bugscale in March at Insomni'Hack! We managed to get a one-click RCE with some limitations; further details will be disclosed during the talk as the bugs are still in the process of patching.

[Bugscale @bugscale]

Check out our first blog post about V8 CVE-2024-12695: https://t.co/Y7e3aU4igb

[Phrack Zine @phrack]

The time has come, and with it your reading material for the week.

Phrack #71 is officially released ONLINE! Let us know what you think!

https://t.co/BRnK9lnGjI

[simo @_simo36]

I've audited the Android kernel in late 2023, and reported 10+ kernel bugs to Google, along with 2 exploits. Today, I'm releasing the first exploit, targeting the Mali GPU on Pixel devices, accessible from an untrusted_app context.
https://t.co/r7wXj7TvwH

[Bugscale @bugscale]

We're #hiring !
You can check out the job desc on our website: https://t.co/SMFtGTzFUZ
or you can also apply on LinkedIn: https://t.co/EV303Fnh0m

[Bill Demirkapi @BillDemirkapi]

New research 👉 Exception Oriented Programming, Part 2: Weaponizing Fundamental Weaknesses in Exception Unwinding to Gain Code Execution https://t.co/4jZJM8u3Ir

[Hexacon @hexacon_fr]

🔥 We are thrilled to announce our first sponsor!

🙏 Thank you @bugscale for helping us make this highly technical conference possible

🐞 To find out more about Bugscale:
➡️ https://t.co/TQZxoVczfc

https://t.co/6LIYKjETkn

#HEXACON2022

[grsecurity @grsecurity]

Tetragone: A Lesson in Security Fundamentals
https://t.co/ZFljwZn4HV

[pepsipu @pepsipu]

One byte write to a full ROP chain??? No way! Check out the nightmare challenge that was hosted during diceCTF! https://t.co/ab5Vz8TaQx

[Mastho @masthoon]

Logical sandbox escape in AppJailLauncher (fix in AppJailLauncher plus Microsoft CVE-2021-41346), thanks @thalium_team for the blog post that led to the discovery of the bugs !
https://t.co/ukRwPogStZ

[Rolf Rolles @RolfRolles]

New blog entry: Automation in Reverse Engineering C++ STL/Template Code

https://t.co/mCEeJFNXXI

[grsecurity @grsecurity]

Lots of nice techniques demonstrated here, defeating basically everything upstream mitigation-wise as well as the not-yet-merged FG-KASLR: https://t.co/tVqQI1XO01

[☠ Román Medina-Heigl Hernández @roman_soft]

Interesting writeup about all the work involved in preparing for a pwn2own's target, in this case: Zoom RCE. https://t.co/wUhlUy0teU

[Matteo Rizzo @_MatteoRizzo]

I played corCTF with @0rganizers this weekend and I made a writeup for Outfoxed, a Firefox pwn challenge. Enjoy! https://t.co/68VC6uyRLH

[Moxie Marlinspike @moxie]

A few months ago Cellebrite announced that they would begin parsing data from Signal in their extraction tools. It seems they're not doing that very carefully.

Exploiting vulnerabilities in Cellebrite's software, from an app's perspective: https://t.co/9ar6ypnPe2

[RET2 Systems @ret2systems]

Tenet is an #IDAPro plugin for exploring execution traces. The goal of this plugin is to provide more natural, human controls for navigating execution traces against a given binary.

Check it out: https://t.co/pbkOfLnMqw

#reverseengineering #idapython

[Adrien Stoffel @__awe]

@iagox86 I haven't updated it in a long time but https://t.co/Ii9b65XNtN is still up with 32-bit and a few more architectures :)

[Ian Beer @i41nbeer]

Excited to finally publish my lockdown project from earlier this year: an iOS zero-click radio proximity exploit odyssey.
https://t.co/UXQvemH0hG

[L4ys @_L4ys]

Slides of my HITCON talk are public now
From LNK to (actually not) RCE: Finding bugs in Windows Shell Link Parser

https://t.co/FmM7BCpq1T

[Gengming Liu @dmxcsnsbh]

At last i finish my writeup of TCTF Chrome challenge and my first blog, it was really a long time😂 In addition, I give the forth challenge - Chromium Fullchain++ at the end of the writeup. Give it a try and i'll mail some gifts for the first 3 winners😜 https://t.co/lYaIZiAXGN