BitFriends

ctf with r3kapig/ARESx/FMC | pwn and vr 🇩🇪

[BitFriends @bitfriends_]

I just wrote my first exploit for a real-world kernel vulnerability. It is about CVE-2022-24122. I did some cross-cache UAF attack to corrupt modprobe_path. You need to know the kernel base to prevent an oops during the exploit process. Reliability isn't great 😅 maybe like 5%

[Leo @leo_s0mething]

I recently played GreyCTF Finals with @ARESxCTF. Me and @bitfriends_ managed to blood a kpwn challenge by finding some new triggers for modprobe_path.
You can find the blogpost + writeup here:
https://t.co/kQM0IVcly3

Thanks @NUSGreyhats for hosting a great no-LLM CTF!

[ARESx @ARESxCTF]

With a slight delay, our team is proud to share that ARESx has won first place on m0leCon 2026 finals 🏆🇮🇹

thanks to @pwnthem0le for the great event and hope to see everyone next year! 🥳

[ARESx @ARESxCTF]

With a slight delay we are proud to announce ARESx won Securinets finals 2025 in Tunisia 🎖️🎖️

Thank you @SecuriNets for hosting the ctf, here are some pics from the trip!!

[ARESx @ARESxCTF]

For the weekend ARESx had the honor of attending mimic ctf 2025
Big thank you to @XCTF_League for organizing the event 🎖🎖
Hope to see you all next year!

[ARESx @ARESxCTF]

We are proud to announce, ARESx placed 3rd on m0leCon CTF!!! 🏆🇮🇹

Thank you for hosting! @pwnthem0le

Looking forward to see everyone in Turin!!
#pwnthem0le

[ARESx @ARESxCTF]

We are happy to announce that ARESx as part of @malta_ctf placed 8th in the #DEFCON CTF finals!

It was very nice meeting everyone and competing against some of the best teams in the world!

Huge thanks to @plainshift for the support given to the team!

Photo dump:

[Friendly Maltese Citizens @malta_ctf]

We got 8th place in defcon!

Working together onsite was great as always, also really enjoyed meeting our friends in the other teams 😁.

Thanks @Nautilus_CTF for hosting <3

[BitFriends @bitfriends_]

@TheTurdoligist @PhantomThorns @InternetH0F 8/10 ragebait

[Maher Azzouzi @maherazz2]

ZDI-CAN-27262 is a Linux kernel 0-day I reported recently that allows unprivileged users to escalate privileges to root.
The vulnerability is a race condition leading to a UAF in the kmalloc-196 cache. It was introduced in v4.2-rc1 and has been present in the kernel for 10 years.

[ARESx @ARESxCTF]

ARESx is actively recruiting for experienced CTF players!

Join a DEFCON qualifying team in future competitions: https://t.co/5g7Hrv0G0x

[pwnthem0le @pwnthem0le]

... and the podium for m0leCon Finals CTF! Congratulations! 🚩

[BitFriends @bitfriends_]

A bit late for a 2024 recap, but who cares. Had an amazing year and went to my first onsite finals 😋

[r3kapig @r3kapig]

5th world rank of ctftime in 2024

First time reached 1k ctftime weight point

Hope we could do better in 2025!

[Friendly Maltese Citizens @malta_ctf]

Happy new year! Our 2024 Recap is here:
- 6 CTFs won, including 2 DEFCON Prequalifiers
- 1st meetup of ~80 members @ DEFCON
- 19.5k mvms sent on Discord
- Rank #2 global on CTFtime

We're incredibly proud of all of our members and look forward to seeing everyone again next year!

[Friendly Maltese Citizens @malta_ctf]

1st place at HITCON CTF 2024 Finals!

Many thanks to HIT for hosting an amazing event, and we’re all very excited to see everyone again at DEF CON CTF next year!

[BitFriends @bitfriends_]

#justCTF24 in Poland was amazing 🤍❤️

[BitFriends @bitfriends_]

finally had some spare time to publish the exploit code and a short explanation. you can see it here: https://t.co/UI5hsaLSYI

[BitFriends @bitfriends_]

I just wrote my first exploit for a real-world kernel vulnerability. It is about CVE-2022-24122. I did some cross-cache UAF attack to corrupt modprobe_path. You need to know the kernel base to prevent an oops during the exploit process. Reliability isn't great 😅 maybe like 5%

[Eduardo Vela @sirdarckcat]

https://t.co/TckFD7Y7pA

[BitFriends @bitfriends_]

@PitigoiD @ice___titan @freelyspeechy @emusworld84 @DelusionPosting Obviously, I was just mocking the replies above. A single example does not prove a theorem

[BitFriends @bitfriends_]

@Hewhoishere @ice___titan @freelyspeechy @emusworld84 @DelusionPosting Yeah, but the video doesn't prove that. Only shows an example. The point of a full proof is to show that the theorem works for any measurements.