fr3y

[xvonfers @xvonfers]

😅
(CVE-2024-10487)[375123371][$35000][Critical][Dawn][tint]GPU buffer access caused by @align is now open with PoC

Reported by Apple Security Engineering and Architecture

[sakura @eternalsakura13]

Zhenghang(@Kipreyyy) and I will be presenting our research at BlackHat USA 2023 :)

Additionally, I would like to express my gratitude to Wenxiang Qian(@qian_wenxiang) and Yiqi Wang(@at_fr3y) for their assistance during the CFP submission process.

[Mr. Anthony 安東尼 @darkfloyd1014]

Impressive and detailed talk about WebSQL vulnerability by @eternalsakura13 and his teammates #bhasia 2023. Highly recommended.

[fr3y @at_fr3y]

Blackhat Asia 2023 is sooooo cool~😎

[Hexacon @hexacon_fr]

#HEXACON2023's call for paper is now open!

📅 7 April - 31 May

https://t.co/CSOyxPWb0F

Huge thanks to our committee members for renewing their trust in Hexacon. Their advices were very appreciated by last year's participants!

[sakura @eternalsakura13]

Our topic "New Wine in an Old Bottle: Attacking Chrome WebSQL" has been accepted by blackhat asia.

We will share sqlite fuzz and interesting vulnerabilities. : )

#BHASIA @BlackHatEvents

[Bruce Chen @bruce30262]

Me and Billy ( @st424204 ) created a series of pwn challenges called Fourchain for this year's HITCON CTF. Here are the posts about the Browser & Hypervisor part of the challenge:
Browser : https://t.co/8S1jAc5ADo
Hypervisor: https://t.co/u5JI8Riilv

Enjoy ! #HITCONCTF2022

[sakura @eternalsakura13]

My intern, Ziling Chen, is looking for full-time employment and is currently only considering base or remote in China.
During his internship he discovered multiple Chrome WebSQL UAF/OOB vulnerabilities.
Please contact him, here is his email:
[email protected]
or DM me :)

[reverseame @reverseame]

Guest Blog Post - Memory corruption vulnerabilities in Edge https://t.co/KblzdF2P2M

[pseudoyu @pseudo_yu]

之前计划的学习路径体系一直偷懒没整理，但总是会收到很多博客读者关于学习路径的一些问题，现在都是直接把 @polebug 的视频和整理的入门资料链接推过去，这里也推荐一下！

区块链入门指南：https://t.co/i8mmATEiCr
web3入门计划（By polebug）：https://t.co/Zl1hl8kR5d
https://t.co/WrnXCEUFS3

[meowbooks @meowbooksj]

What was on the notebook he was looking for? Wrong answers only.

[Thierry @Th1errry]

Slides of my talk at @hexacon_fr about my journey of fuzzing Nvidia graphic driver are now available: https://t.co/IwPTv2cgc4

[KALOS @kalos_security]

Here's our write-up on the Electric-sheep from @paradigm_ctf 2022.

🧵 (1/16)

[Abdulrahman Alqabandi @Qab]

Blog on utilizing extension API to fuzz the browser
https://t.co/6lJ3YT4wLv

[Alex Plaskett @alexjplaskett]

🔥 1/ In the last 6 months working on Linux kernel bug hunting/exploitation there has been a number of key resources which have been super useful (coming from a macOS/Windows background) to understand the state of things in 2022 🚀.

Here's a short🧵 to recognise this + thoughts:

[FuzzingLabs @FuzzingLabs]

My talk at @offensive_con about #ethereum consensus clients fuzzing and vulnerability research is now public!

https://t.co/3XFdXmHB4j

[Hex-Rays SA @HexRaysSA]

Today is IDA's birthday!
Read about our history: https://t.co/RW5KkgKnBd

[fr3y @at_fr3y]

@gf_256 I want link of that dress.😍

[fr3y @at_fr3y]

🐱☕️

[hk @harsh_khuha]

Opening some of my v8 / chromium “CTF” exploits :),

Google CTF -
https://t.co/zYwjXcFrXc
Cor CTF -
https://t.co/NsiInbZsRe
UIU CTF -
https://t.co/4FRczoSE8K
0CTF 2020 with CFI -
https://t.co/yY61Ci8Ggp
RedPwn -
https://t.co/B0Ff3O8U2B