cae

| afk pwn for @cor_ctf | Discord: c4e

[cae @c4ebt]

It's time. I'm so happy to finally publish my first security research post!

Bypassing GLIBC 2.32’s Safe-Linking Without Leaks into Code Execution: The House of Rust

Check it out at
https://t.co/DNltMI08Fp

[Crusaders of Rust @cor_ctf]

We have a🔥presentation ready for Hexacon. Come grab a beer with us afterwards!

See everyone in Paris🇫🇷🫡

[Crusaders of Rust @cor_ctf]

Registration for corCTF 2025 is up🚩

https://t.co/o2Js9mkyzv

Mark your calendars for August 30th to September 1st!

[Crusaders of Rust @cor_ctf]

💰corCTF 2025 PRIZES💰

1st:
- $3000
2nd:
- $2000
3rd:
- $1337
4th:
- $800
5th:
- $500

Top 5 teams:
Binja Personal License

Top 10 teams:
RET2 Wargame Token

Up to $1000 prize pool for bloods and writeups.

Get ready to pwn at 8/30 UTC midnight👀

[Crusaders of Rust @cor_ctf]

Exploit write-ups for our 🚨latest 0-day🚨and the tragedy that swept the red black tree family dropping soon 👀

Here is a tiktok style video for those of you with no attention span thanks to slop and social media. Turn on the audio!!!

[Crusaders of Rust @cor_ctf]

🚨🚨🚨We just broke everyone’s favorite CTF PoW🚨🚨🚨

Our teammate managed to achieve a 20x SPEEDUP on kctf pow through AVX512 on Zen 5. Full details here: https://t.co/aCIU220IBf

The Sloth VDF is dead😵

This is why kernelCTF no longer has PoW!

[Crusaders of Rust @cor_ctf]

Oops, we just pwned the kernelCTF mitigation instance with a 0day😳

Our fellow pwner syst3mfailure has picked up pigeon feeding as a hobby to help him cope with the insanity

[Crusaders of Rust @cor_ctf]

We are back😎 Say hello to our kernelCTF submission for CVE-2025-37752🩸

Who would have thought you could pwn a kernel with just a 0x0000 written 262636 bytes out of bounds?

Read the full writeup at: https://t.co/GkpCjamlaZ 👀

[Crusaders of Rust @cor_ctf]

Remember this 😉 ? The official paper finally came out and won best paper at the HASP workshop @ MICRO 2023!

Go give it a read at https://t.co/hXla1UVMzJ

[Crusaders of Rust @cor_ctf]

Check out FizzBuzz101's corCTF 2023 writeups!

Exploiting the Intel sysret hardware bug + a µarch side-channel for KASLR bypass on modern Linux kernel: https://t.co/E9xLK4RebC

Pwning ring -2 from ring 0 : https://t.co/L1gzMh4jgu

Cracking an AVX-512 VM : https://t.co/s5qiJfIDfY

[Crusaders of Rust @cor_ctf]

Introducing the world to our teammate's latest CVE: EntryBleed, a Linux bug that allows low privileged attackers to break KASLR under KPTI/KAISER for Intel based systems. https://t.co/jk549mKPbM

[kylebot @ky1ebot]

Finally, here is the blog documenting the crazy 7 days that I spent on CVE-2022-1786 to pwn kCTF (and won a lot of cash)! Let me know what you think of the blog! https://t.co/6OnnGK363y

[Crusaders of Rust @cor_ctf]

We'll be hosting corCTF 2022 from August 6-8! Categories will be pwn, rev, crypto, web, and we already have a prize pool worth about 20k USD! Come check us out at https://t.co/ffEvn6gQ1y and register at https://t.co/F2y1DwRgdU🚩

[cae @c4ebt]

@cor_ctf happened this weekend! Here are the solutions for the two heap challenges I wrote: Helpless (5 solves) and Rusty (1 solve). Thanks for playing :)

https://t.co/mnpwec0H79

[Crusaders of Rust @cor_ctf]

corCTF 2021 just ended! The final top 5 teams were:
1. @0rganizers
2. @zwnj_ctf
3. @SuperGuesser
4. @thehackerscrew1
5. @WreckTheLine
Congrats to the winners and special thanks to our sponsors @CheckPointSW, @hackthebox_eu, @trailofbits, @vector35, and @googlecloud!

[cae @c4ebt]

Come play corCTF this weekend! It's going to be 48h long starting on Aug 21st at 00:00 UTC. I wrote two hard pwn challenges for it. We also have over 5k USD worth in prizes! I'll see you around on Discord. Register at https://t.co/jqeafAC3Of

[Crusaders of Rust @cor_ctf]

corCTF 2021 is happening this weekend, from August 21-23 starting at 00:00 UTC! We'll have the classic categories of pwn, rev, web, and crypto, with challenge difficulty ranging from easy to insane. Come register at https://t.co/OTvm4N1rmW, the prize pool is worth over 5k USD!

[Crusaders of Rust @cor_ctf]

We'll be hosting corCTF 2021 (our very first CTF) from August 21-23! Categories will be pwn, rev, crypto, web, and we already have a prize pool worth about 5k USD! Come check us out at https://t.co/x2Ry8waZ9d and register at https://t.co/la9YKOAQAJ🚩

[cae @c4ebt]

Just finished making a "bypass" for this with a HoR variation (it's more of a workaround since the tcache key usage wasn't a vital part of the technique). It's still a good patch, it mitigates some other primitives that could really abuse that lack of entropy.

[Carlos O'Donell @CarlosODonell]

@EyalItkin tcahe hardening is in for glibc 2.34! Thank you for your patience, and sorry for the delay. @gnutools https://t.co/uNGyPFYgHg

[cae @c4ebt]

New pfp. Rest In Peace, master. You were the greatest of all time. #ThankYouMiura

[cae @c4ebt]

DiceCTF 2021 just ended. I worked on the pwn challenge
"Sice Sice Baby". Sadly, I wasn't able to solve it in time because I missed an important detail, but after hearing about it I managed to finish it right away. Here's my in-depth commented exploit: https://t.co/AxkPxsrVYQ