Sheon

[Ivan Velichko @iximiuz]

How Container Filesystem Works 🧐

Building a Docker-like container from scratch using only standard Linux commands (unshare, mount, pivot_root, etc.) is a great way to understand exactly what a container runtime like runc does under the hood to turn a container image into a fully-fledged rootfs.

Deep dive: https://t.co/PC7c9Zy1SJ

[Smukx.E @5mukx]

Everyone can use an llm. everyone can build things. But do you know the outcome of what you're building.

95% of people dont. thats what makes the difference when a technical and a non-technical person uses an llm. professionals know exactly what they want to build, why they're building it, and what outcome they want to achieve.

using an llm is easy. knowing exactly what to build (you have the whole flow running inside your thoughts) , how to build it (your way of design), and why it matters is what makes a lot of difference.

for example before 4 months i don't know too deep about compilers & stuffs. i started to refer llvm books, understand how things happens and done tried something in it ( and this is the coolest book ever ). i read books, a lot of books to understand stuffs, learn 1 or 2 different things to make things different. ( everyone cant post everything Problème de sécurité opérationnelle )

small story:- i have a friend of mine who works in xyz red team lead. his junior team mate got same model, same harness. Junior found nothing, while my friend found five 0 days in an month, reported himself, got a large sum amount and started a small startup.

[Suraj Malhotra @MrT4ntr4]

Hey, I just published a book for learning Windows Kernel Segment Heap Internals and exploitation techniques based on my own notes.
Read it here: https://t.co/Nf1Y0qzHVm
There's a lot to wrap your head around, so I started creating my own diagrams and explanations to make it easier to understand. Hope it helps! :)

[cts🌸 @gf_256]

whitepill: clankers finally solved this, ctfs are creative and fun again

[connect24h @connect24h]

DFIRを勉強したい人、これはブックマーク推奨。

「読む」より「事件を解く」ためのCTF/Labが大量にまとまってる。

・ランサムウェア
・Network Intrusion
・Endpoint Forensics
・Memory Forensics
・APT

The DFIR Report、CyberDefenders、Blue Team Labs、MemLabs、Digital Corporaなど、2008〜2025年の演習環境を一覧化。(DFIR Dominican)

SOC/CSIRTで「ログは見てるけど、インシデント調査の経験が足りない」という人にはかなり良い教材集。

DFIR Dominican — CTFs & Labs

https://t.co/Jk7xGi0wCw

[splitline 👁️🐈‍⬛ @_splitline_]

my pwn2own bug

i only just realized it's actually a new design lol
i was wondering why such an easy bug can exist without anyone finding it before

[Kirill Firsov @k_firsov]

Original write-up on the fastjson 1.2.83 gadget-free RCE.
Have fun reading, I hope you missed writeups without AI slop.
Comment here your opinion.
https://t.co/cbAKOAeY62

[Kirill Firsov @k_firsov]

We found a gadget-free RCE in Fastjson 1.2.83 - the final release of the 1.x line, and still one of the most widely-deployed Java JSON libraries in production today, even with 2.x around.
No classpath gadget. One payload-> RCE.

[sarang pics @rsrpics]

💌 plus chat update

#유사랑 #RYUSARANG

[𝐋𝐨𝐯𝐞𝐥𝐲. @Lovely_070418]

[260615]
#유사랑 #RYUSARANG #ユ・サラン
#izna #이즈나 #イズナ

[sarang pics @rsrpics]

not to be dramatic but she might be the prettiest girl alive

[Amorangel @Amor_0418]

260521

아...조명 진짜☹️
#이즈나 #izna
#유사랑 #RYUSARANG

[Orange Tsai 🍊 @orange_8361]

And this one is human insight w/ LLM-assisted research. Took about one week to finish everything. The AI really rescued me from a lot of tedious work

— excluding the part where it changed the Domain Admin password, locked me out, and claimed it got RCE 🤦

[网安知识分享 @cybersecuritysl]

Free. Open source.

[Muqsit 𝕏 @mqst_]

🌏 Browser Exploitation 101: A Series of Blog posts for anyone interested in Chrome Browser Exploitation.

Part 1: https://t.co/2MyvKCeU3k
Part 2: https://t.co/ouhLfrY74O
Part 3: https://t.co/hAsE5UIpDZ

#infosec

[the tiny corp @__tinygrad__]

tinygrad HK

[D4rk_Intel @d4rk_intel]

THE CHINESE DARK GHOST

Super excited to have completed this China OSINT CTF! It was one of those rare challenges that required me to think beyond just tools. Kudos to the team and @OSINT_Community for organizing such a great challenge! I learned a lot!

#UK_OSINT #Cybersecurity

[0xor0ne @0xor0ne]

Presentations about getting started with Linux kernel exploitation

"Linux Kernel Exploitation for Beginners" by Kevin Massey:
https://t.co/HNuwKGLTv1

"Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov
https://t.co/9HqgXvCpX4

#Linux #infosec

[Tianyin Xu @tianyin_xu]

Anyone has a job that needs strong OS/System research and engineering skills?

My postdoc Jongyul Kim is looking for a research oriented job. He does great work on Storage and Memory Systems. You can find his work at: https://t.co/VofPcAp3Al

His CV can be found at: https://t.co/BmyNymxwTg

[𝕎𝕠𝕝𝕗 𝕋𝕣𝕒𝕚𝕟𝕖𝕣 @WolfTrainer_101]

传统自动化红队测试依赖人工设计的攻击流程，存在效率低、探索空间有限的问题。AgenticRed 提出一种基于进化算法和LLM的自动优化框架，无需人工干预即可生成高效的红队测试系统。
#SelfEvolving #AgenticRed