Crusaders of Rust

A European and American Security Research Group

[Jamie Hill-Daniel @clubby789]

My DEFCON talk from earlier this year was finally uploaded today!
https://t.co/SGOfL88mAY

[Crusaders of Rust @cor_ctf]

Come watch our talk at DEFCON Mainstage from this summer by @clubby789 @ryaagard and https://t.co/0NktUKF46V! Back in the days of artisanal hand-crafted Chrome exploits😇

https://t.co/s3JrC37CQE

[pepsipu @pepsipu]

i jailbroke the nintendo switch 2

so i modded cinnamoroll, peter griffin, hatsune miku, and more into Mario Kart World, a switch 2 exclusive

now watch my friends and i get cooked by bots

learn more and get the exploit https://t.co/ykjgyfrFRp

[Crusaders of Rust @cor_ctf]

Busy weekend for CoR members at @defcon!

Congrats to all our teammates who got 3rd at DEFCON CTF Finals under @SuperDiceCode and to @clubby789, @ryaagard, and https://t.co/PzcyCKjeK4 for their main stage talk on a Samsung Galaxy UXSS exploit (slides + video coming soon)🫡

[SuperDiceCodeLovers @SuperDiceCode]

SuperDiceCodeLovers finishes #3 in DEF CON CTF finals

[Jamie Hill-Daniel @clubby789]

I'll be giving a talk on a V8 exploit at DEFCON next month with @ryaagard and https://t.co/ExUzuPdKw8!

[Crusaders of Rust @cor_ctf]

What better place to talk about pwning mobile browsers than at DEFCON?

See ya'll at Vegas on August 7th 🫡

[Crusaders of Rust @cor_ctf]

Offensivecon 2026 talks are out! Check out the Minecraft 1-click RCE talk from our teammate @ryaagard at https://t.co/15gKKqwh5y😎

[Crusaders of Rust @cor_ctf]

We had a blast this weekend at @offensive_con 🔥- thank you to @Binary_Gecko for the awesome conference!

Congrats to our teammates @caueobici for his pwn2own success and @ryaagard for his talk on a 1-click Minecraft 0day😎

[Crusaders of Rust @cor_ctf]

The research is out now! Come find out how we had a live universal XSS on Samsung phones for the past 6 months😎

[OtterSec @osec_io]

https://t.co/skESD3MZM8

[Crusaders of Rust @cor_ctf]

We finally did something outside of kernel security research? Thank you to @osec_io for the collab🔥

Long live the patch gaps🫡

[OtterSec @osec_io]

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with @cor_ctf.

Full writeup coming next week.

[Crusaders of Rust @cor_ctf]

Awesome research from @ryaagard 👀

[OtterSec @osec_io]

We achieved a guest-to-host escape by exploiting a QEMU 0-day where the bytes written out of bounds were uncontrolled.

Full breakdown of the technique, glibc allocator behavior, and our heap spray/RIP-control primitive ↓

[kqx @kqx_io]

played DiceCTF quals and managed to blood the kernel pwn challenge and won the $150 bounty!

check out the writeup: https://t.co/Jnw80IyrJh

[chompie @chompie1337]

Watch XOR’s talk CUDA de Grâce: Owning AI Cloud Infrastructure with GPU exploits

Kernel + driver bugs aren’t just a LPE problem, they’re a cloud problem. With the explosion of AI in the cloud, NVIDIA’s GPU drivers have become a valuable attack surface

https://t.co/cIYKcYMb6L

[Pumpkin 🎃 @u1f383]

My HEXACON talk video is out! It covers a small race condition in the Linux kernel’s io_uring. I recommend watching it at 1.25× speed since I’m still not great at speaking 😅
https://t.co/lMuweA7PyU

Here is the slide!
https://t.co/9jPoKMzxwL

[Crusaders of Rust @cor_ctf]

Our @hexacon_fr talk is out on Youtube now😎

https://t.co/eN4vG4658d

Follow the slides at: https://t.co/UcfZIUHhsq

[Hexacon @hexacon_fr]

If you missed HEXACON 2025 or want to rewatch some of the talks, they’re now available on our YouTube channel 📽️

Enjoy the content, and see you in 2026!

https://t.co/KHHVAGY48M

[Crusaders of Rust @cor_ctf]

Congrats @ryaagard 👀

We will not be connecting to any Minecraft servers you host.

[OtterSec @osec_io]

Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.

[Crusaders of Rust @cor_ctf]

We at CoR (+ @u1f383) had a great experience at @hexacon_fr this weekend

Met many skilled VR people, the venue was amazing, and the speaker gifts were simply🔥

Best offensive security conference we have seen so far - thanks again to the organizers for the opportunity!

[Hexacon @hexacon_fr]

An RbTree Family Drama: Exploiting a Linux Kernel 0-day Through Red-Black Tree Transformations by William Liu and Savino Dicanosa