Maher

Security Researcher.
Linux security.
Student at @1337FIL
CTFs with @Water_Paddler

[Maher @azz_maher]

@stdnoerr Thank you!

[Maher @azz_maher]

I will disclose three Local Privilege Escalations (two of those are targeting a specific user, the third one is LPE from any user to root which is considered a critical vuln) and one Information Disclosure bug (Non-root user can know if a directory exist or no anywhere in the fs)

[Maher @azz_maher]

@Son_ofpeace Thank you! 😃

[Maher @azz_maher]

@ABELLAISMAIL4 Khassna zitoune

[raptor @0xdea]

Excellent primer for VMware offensive security research by @iamnion and @esizkur ✊

https://t.co/bKQD431e9U

[Maher @azz_maher]

@h0mbre_ Use pahole

[Maher @azz_maher]

@voydstack Merci 😀

[Maher @azz_maher]

@0samaTweets My guy 💪

[Maher @azz_maher]

@hakivvi Thank you!

[Maher @azz_maher]

@tjkr0wn 💪👌

[Maher @azz_maher]

@tjkr0wn Ghidra gang stronger than ever, from where you got the hoodie?

[Maher @azz_maher]

Will disclose those when they all get patched.

[HackGit @hack_git]

Fuzzable
Framework for Automating Fuzzable Target Discovery with Static Analysis

https://t.co/Bnf2zHOtim

https://t.co/9ddmq18rNx

[Maher @azz_maher]

@TaylorOgan No Tesla is smart enough to recognize that it's a decoy and not a real child xD

[ptr-yudai @ptrYudai]

I've released a beta version of #pawnyable, a website to learn advanced binary exploitation🐺🐱🐰🐼
Currently only the Linux Kernel chapter is about 90% complete😖
Other chapters and multilingual support are TODO😇
https://t.co/1sDUcc3DlZ

[Andrew Gallant @burntsushi5]

"Using unwrap() in Rust is Okay"

First blog post in over two years. Finally.

https://t.co/u9iZEFTiuC

[DawnSecurityLab @dawnseclab]

New blog post on our recent discovered vulnerability: Linux kernel io_uring module privilege escalation exploit https://t.co/v6zeW43adz

[Maher @azz_maher]

b34e97b5c6714fe4e40441caecde7c40

[Maher @azz_maher]

@alifertah42 100%

[Maher @azz_maher]

@1337FIL @Soukain89078442 Be prepared to fail 1000 times to win 1 time.