muffinx

Security Researcher @_setuid0_

[Jannis Kirschner @xorkiwi]

A *massive* thanks to our trainer @_muffinx and our coach Miro (no Twitter) for all your support before and during the competition and making it happen! ❤

[muffinx @_muffinx]

Just testing something @SHC_Challenge #GenshinImpact

[Jannis Kirschner @xorkiwi]

I'm happy to present...D-LINKGATE - A Preauth RCE to Root Chain on D-Link DAP-2020 devices found by @_muffinx and me. Patch your devices ASAP (https://t.co/l9gas5eGBC) #CyberSecurity #VulnResearch

[/r/netsec @_r_netsec]

D-LINKGATE - A Preauth RCE to Root Chain on D-Link DAP-2020. Patch your devices ASAP https://t.co/9V8ZLTMrgG

[Hacktory @HacktoryAI]

Meet our first-place winner!
@_muffinx receives one-month premium access to Hacktory, merch, and a ticket to the Hacktivity conference

[muffinx @_muffinx]

@HacktoryAI Thank you very much! :)
This was a great CTF, learned a lot about GraphQL! :D

[Hacktory @HacktoryAI]

Our #CTF begins... now! Go: https://t.co/g85qqTf6It

🏆Prizes
𝟭𝘀𝘁 𝗽𝗹𝗮𝗰𝗲 - one-month premium access to Hacktory, merch (T-shirt, pin), a ticket to @hacktivityconf
𝗣𝗹𝗮𝗰𝗲𝘀 𝟮-𝟯 - premium access to Hacktory, merch
𝗣𝗹𝗮𝗰𝗲𝘀 𝟰-𝟭𝟬 - premium access to Hacktory

[Daniel Cuthbert @dcuthbert]

This just blows my mind. From a chip encased in silicon, stripping each layer away until you see the ROM and then using 50x magnification you can see the binary 0 and 1s.

@akacastor this is nerd pr0n and a half

[muffinx @_muffinx]

Zeek Community CTF by @Zeekurity was really fun!
A splunk instance, CTFd and some nice IR challs, loved it :)

Zeek is a great help with CTF .pcap's #ctf #zeek

[muffinx @_muffinx]

@RuCTFE Oh yeah and congrats to Bushwhackers to win my CTF during #RuCTFe xDDDDDD

[muffinx @_muffinx]

I accidentally got an exposed docker service (CTFd) running during #RuCTFe,
I had a good laugh when I saw a few minutes ago someone registered as "Bushwhackers" on my CTFd (maybe the real Bushwhackers?) @RuCTFe Loved the CTF :)

[muffinx @_muffinx]

@Tops3cretC Yeah that's normal behavior for the Web-App, can't give you any hints sorry, for questions contact @____SHC____ :)

Keep it up, the beginning of CTF is hard. ^^'

[TEAM SUID @_setuid0_]

We just published Release #2 featuring the officialy approved X-Forwarded-For HTTP Header Injection and a #pit starter guide for new participants. Get it on https://t.co/R0FrtUhdlL #Evoting #Cybersecurity #Bugbounty

[TEAM SUID @_setuid0_]

You can now download our #security reports of the swiss evoting system, including a code injection #vulnerability from our website https://t.co/R0FrtUhdlL #EVoting #Cybersecurity #BugBounty

[TEAM SUID @_setuid0_]

#EVoting

https://t.co/2sUoQTkKv8

[ens @the_ens]

So bounties for solutions to the Birch and Swinnerton-Dyer conjecture, Hodge conjecture, Navier–Stokes existence and smoothness, P versus NP problem, Poincaré conjecture, Riemann hypothesis, and Yang–Mills existence and mass gap are now worth less than an iOS RCE 0day. Yikes.

[muffinx @_muffinx]

@evandrix @xorkiwi Thank you very much, I informed the responsible for this service... :D

[muffinx @_muffinx]

@evandrix @xorkiwi Thank you very much, restarted it. :D

[muffinx @_muffinx]

muffinCTF: Congratulations to our winners!
🥇Mrmaxmeier: 1'021'715 points
🥈explo1t: 896'065 points
🥉sunscan: 877'896 points
Good job guys, you played strategically.
My colleague xorkiwi will contact you for a small prize! :D
And for everyone else, also good job!!! =)

[muffinx @_muffinx]

muffinCTF: At 14:00 the winners of muffinCTF will be announced! :D