Simone Di Maria

breaking web2 & web3 for fun.
CTF player @TheRomanXpl0it / @mhackeroni / @cyb3rm0nk3ys

[Robert Chen @NotDeGhost]

We're launching a $100,000 fund to save CTFs.

[Simone Di Maria @dimariasimone]

defi degen masterclass by @marspiterr 👽

[OtterSec @osec_io]

When Hyperliquid has to clear bad debt, who covers it?

We reverse-engineered the closed-source risk engine, verified some core properties & compared it to other perps. It's not neutral: the more leveraged and profitable your position, the sooner it's closed.

Full breakdown ↓

[Renwa @RenwaX23]

"Dad, what was it like playing CTFs before AI?"

[Simone Di Maria @dimariasimone]

zzz just woke up after some sleepless clanker wars and birdwatching in Milan🕊️ can't wait to hear your pineapple pizza dad jokes at Vegas again!
@mhackeroni

[Simone Di Maria @dimariasimone]

one team just RCE-ed geckodriver at TRX CTF 2026🩸🔥
meanwhile you're go-golfing, I've just released an XS-Leak and a @SuiNetwork challenge!
curious how this turns out :)

[TRX @TheRomanXpl0it]

TRX CTF 2026 has officially started!🔥

v8, winpwn, kpwn, bootloader, krev, xsleak, webdriver, pyjails, golfing, quantum, web3 and what else?👀

https://t.co/owVPthQfsr
sponsored by: @osec_io, @zellic_io, @Google

[Simone Di Maria @dimariasimone]

wrote a couple of webs, some blockchains and even a golfing chall for this weekend :)
see yall here in Italy! 🐴🇮🇹

[TRX @TheRomanXpl0it]

"hey claude plz solve all challenges https://t.co/CxLn0CrQhW"

TRX CTF 2026 is coming back this weekend with many cool challenges! Register now at: https://t.co/XYP0EMRlja

Top 8 teams will qualify for on-site finals in Italy this autumn🐴

[kqx @kqx_io]

less than three days left until the start of TRX CTF!
get ready for:
- two kernel pwn challenges
- browser shenanigans
- a *real* x86 challenge
- reversing a kernel module
make sure to register and fight for a spot in the finals in Italy!
https://t.co/knB1TkmHcf

[Simone Di Maria @dimariasimone]

@rebane2001 https://t.co/0s3JdFjkob
;)

[Simone Di Maria @dimariasimone]

EOY JS trivia: what do these lines evaluate to? :/

[Simone Di Maria @dimariasimone]

you can find all my authored challenge sources and solutions here btw: https://t.co/HbmbYJDpia

[Simone Di Maria @dimariasimone]

just pushed 20+ writeups on my blog, most of which are web3 challs i've authored over the years.
hope someone can find something useful :)
--> https://t.co/ThOumcvBw2

[Simone Di Maria @dimariasimone]

sometimes things just look like backdoors😭

[kqx @kqx_io]

How a single typo led to RCE in Firefox

Can you spot the bug?

Read now at: https://t.co/fr6Z6gW8bw

[Simone Di Maria @dimariasimone]

top 8 for my friend and teammate @salvatoreabello's xs-leak novel !

[PortSwigger Research @PortSwiggerRes]

The voting has concluded, and we're thrilled to announce the top ten web hacking techniques of 2025! Massive thanks to everyone in the community for sharing their hard-earned discoveries, plus the panel and everyone who nominated or voted!
https://t.co/mjzzM4S7k0

[Simone Di Maria @dimariasimone]

Last month I wrote a Firefox challenge for Ctrl+Space CTF Finals about Extensions, FF Xray Vision, and document.all weirdness. 🌌
Find out more here: https://t.co/e8yACPgNor

[Simone Di Maria @dimariasimone]

EOY JS trivia: what do these lines evaluate to? :/

[TRX @TheRomanXpl0it]

street cannoli sellers pwning in the Romanian parliament 🇷🇴

[Simone Di Maria @dimariasimone]

Top3 @ OpenECSC this year :)

[Salvatore Abello @salvatoreabello]

XSS-Leak: Leaking Cross-Origin Redirects, Subdomains and More! You can read the article here: https://t.co/Zc6NWO4716

[Simone Di Maria @dimariasimone]

👀👀👀

[Salvatore Abello @salvatoreabello]

I recently discovered a way to leak domains/subdomains from cross-origin requests in Chrome, and I thought it would be cool to create a chall before publishing a blog post about it
Chall: https://t.co/v59lmZE2zV
Source: https://t.co/b61ZBgZ8CD
DM me if you managed to get the flag

[Simone Di Maria @dimariasimone]

🩸🤖

[Intigriti @intigriti]

First blood went to @dimariasimone 🩸 They get a €100 swag voucher!