0›0

0x13 years old Penetration Tester |
CTF Player | Do RE & Coding stuff | eWPTX, eCCPT, CapenX, CRTA, eJPT

[0xor0ne @0xor0ne]

Reverse engineering and exploitation of the Xiaomi C400 smart camera, by Botond Hartmann (@TaszkSecLabs).

https://t.co/LXCfXmrRPm

#infosec

[obscaries ❘ AppSec @obscaries]

Here is a great repo for studying real-world exploited zero-days and their root causes.

repo: https://t.co/IAxDKpU03y

Worth bookmarking for anyone into security research and bug bounty hunting.

#CyberSecurity #BugBounty #InfoSec

[0xor0ne @0xor0ne]

Deep dive into bypassing flash encryption on Espressif ESP32

https://t.co/ANgsEZamWM

#cybersecurity

[impulsive @weezerOSINT]

the same technique giving cheaters wallhacks in Valorant is the same one being used in malware to pwn you. Still working no patch, undetected from AV's and AC's.

I pulled the source from a cheating forum, built it, and ran it on my fully patched Windows 11 machine. it reads memory straight out of another running program without needing admin, without loading a driver, without calling any API that your EDR monitors. it just uses two normal Windows functions that have existed since the 90s, SetWindowsHookEx and SendMessage.

I reversed the root cause in Ghidra. two functions that ship in every copy of Windows ntdll.dll and shell32.dll will blindly execute whatever function pointer you hand them through a window message. Microsoft's own exploit protection CFG signs off on it because they're legitimate functions. no CVE. no patch. 279 stars on GitHub. Microsoft won't fix it because they consider same-privilege process interaction "by design." Chinese researchers found the same technique in live malware back in 2023.

[Jeff Cross @jeffbcross]

We’re continuing to work with Microsoft and GitHub to investigate the impact of the malicious Nx Console version 18.95.0. I'll share any updates on X (@jeffbcross and @NxDevTools) as well as in our security advisory: https://t.co/szBoQ3doaX.

Initially, Microsoft indicated to us that there were 28 installs of the malicious version 18.95.0. Based on our own analytics for the compromised version, we currently believe the number of users who received the malicious package may be significantly higher; potentially over 6k installs.

We’ll keep working to determine the actual impact and exposure, and I don’t want to speculate beyond the facts we have right now. But I also don’t want to minimize the situation.

This is my top priority right now. Our team has been, and continues to be focused on understanding exactly what happened, helping affected users, hardening our systems and release processes, and being as transparent as possible throughout the investigation.

[TrendAI Zero Day Initiative @thezdi]

Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

[0xor0ne @0xor0ne]

DIRTYFREE (paper, NDSS 2026): Linux kernel privilege exploitation via arbitrary free primitive

https://t.co/4ObcknE5ht

#infosec

[Daily CyberSecurity @the_yellow_fall]

Public PoC for NGINX CVE-2026-42945. An 18-year-old RCE flaw in the rewrite module enables server takeover. Update to NGINX 1.31.0 or 1.30.1 immediately.

#NGINX #CyberSecurity #InfoSec #RCE #Vulnerability #CVE #WebServer #PoC #GitHub #SysAdmin #TechNews
https://t.co/huz0K21JaR

[Joruno @wsl8297]

GitHub 上有一份被无数自学者当作“计算机本科替代方案”的课程清单：open-source-cs，已拿下 2 万+ Stars。

它把 MIT、斯坦福、普林斯顿等顶尖高校的免费公开课，按传统 CS 本科培养路线重新编排：从入门到进阶、从理论到工程，一条清晰的学习路径直接铺好。

编程、数学、系统、算法到应用全覆盖；每门课还贴心标注学时、难度与前置要求，让你少踩坑、不迷路。

GitHub：https://t.co/KNWdnmwOpJ

你将学到：

- 计算机科学基础：从 Harvard CS50 打牢地基
- 编程能力：Duke、华盛顿大学的 Java 与编程语言体系训练
- 数学底座：MIT 微积分 + UT Austin 线性代数，补齐硬核必修
- 系统原理：从零构建现代计算机，理解“它为什么这样跑”
- 算法与理论：普林斯顿算法与 CS 理论，练出解题与证明能力
- 方向应用：软件工程、机器学习、数据库、密码学等实战领域

所有课程来自知名大学公开课平台，完全免费。适合想按本科体系系统自学计算机科学的人：按这张地图走，就不再靠运气学习。

[Denis Laskov 🇮🇱 @it4sec]

Incident response for Nuclear facilities: insights into the most protected area of OT cybersecurity. ☢️🧪🖥️🌡️🤯

More details on:
LinkedIn: https://t.co/NiIiZ9dMOh
Substack: https://t.co/cdjHGFcFnF

[CyrilXBT @cyrilXBT]

MIT just quietly dropped a free AI curriculum that puts $50,000 university courses to shame.

12 books.

Zero tuition.

From the same institution that produced the people building the models everyone is talking about.

FOUNDATIONS

1. Foundations of Machine Learning — https://t.co/Un6UbjJ3Xo
2. Understanding Deep Learning — https://t.co/UQxZmyESdn
3. Machine Learning Systems — https://t.co/YAgrLVGAXt

ADVANCED TECHNIQUES

4. Algorithms for ML — https://t.co/YlBk59o8Hp
5. Deep Learning — https://t.co/KMO1uWPyk1

REINFORCEMENT LEARNING

6. RL Basics (Sutton & Barto) — https://t.co/sOZlDXzu41
7. Distributional RL — https://t.co/uOkviYiAq7
8. Multi-Agent Systems — https://t.co/Dx9caJVx1d
9. Long Game AI — https://t.co/K9Qm2TjAQ6

ETHICS & PROBABILITY

10. Fairness in ML — https://t.co/MgkLdRvicO
11. Probabilistic ML Part 1 — https://t.co/Zz33gQi1vG
12. Probabilistic ML Part 2 — https://t.co/qBe776EjCg

This is a complete MIT-level AI education.

Not a YouTube playlist.

Not a Twitter thread full of fluff.

Textbooks written by the researchers who built the field.

The people who actually study this will not just understand AI better than their peers.

They will understand it better than most people currently getting paid to work in it.

Most people will bookmark this and never open it.

The ones who open it tonight are the ones who show up in 12 months having built something nobody around them understands yet.

Bookmark this.

Open the first one tonight.

Follow @cyrilXBT for more resources that actually compound.

[Vivek | Cybersecurity @VivekIntel]

Embedded Hacking Arsenal — From Firmware to Full Device Compromise 🔧🔥

A no-BS resource dump for IoT / Embedded vulnerability research:

• Firmware reversing, bootloader exploitation, hardware debugging
• ARM / MIPS / U-Boot / QEMU / Ghidra workflows
• Real-world RCE writeups, 0-day chains, Pwn2Own cases
• Labs + tools + blogs → complete learning pipeline

If you're serious about IoT / hardware hacking, this is a goldmine. Better than random YouTube content — this is real research.

https://t.co/bxvJppHNdo

#IoTSecurity #EmbeddedSecurity #FirmwareAnalysis #ReverseEngineering #BugBounty #HardwareHacking

[Co11ateral @co11ateral]

Car Hacking with GearGoat

GearGoat is a car simulator that allows you to work with the CAN bus, which is the internal communication network used by most modern vehicles

In the real world, this is equal to connecting a CAN adapter such as CANable or Macchina M2 into the OBD-II port, which is typically located under the dashboard. This port is essentially a gateway into the vehicle’s internal network

See it in action on our article: https://t.co/1h5buGT237

@three_cube @_aircorridor #cybersecurity

[Mohit Mishra @chessMan786]

"TCP is a byte stream, not a message protocol. If you do not know the bytes on the wire, you do not understand the system."

Track 17, The Networker, is live.

You will build TCP servers from raw syscalls, implement length-prefixed and line-delimited message framing, build a binary serialization format, and create gRPC streaming from first principles.

Stop guessing and start reading the wire yourself: https://t.co/eJaQvEg9wI

[Shadan @skshadan_]

I just gave Claude Code a rooted Android phone…

It autonomously reverse-engineered Subway Surfers, hooked the coin logic, bypassed the anti-cheat, and gave itself UNLIMITED coins in ONE session.

[Hacking Articles @hackinarticles]

🔴 Active Directory Attack Architecture – Visualized Like Never Before

If you’re into Red Teaming / AD Exploitation, this is 🔥

This interactive map breaks down how attackers move from initial access ➝ domain dominance using real-world techniques.

💡 Why it matters:
Modern cyber attacks don’t happen in one step — they follow structured paths like reconnaissance, exploitation, lateral movement, and privilege escalation ()

🎯 What you’ll learn:
• Attack paths inside AD
• Privilege escalation chains
• Lateral movement techniques
• Real attacker mindset

🧠 Think like an attacker → defend like a pro

🔗 Explore here: https://t.co/CKLvM4p7FV

#cybersecurity #redteam #activedirectory #pentesting #infosec #ethicalhacking #mitreattack #oscp

[0xor0ne @0xor0ne]

Introduction to intercepting and modifying application traffic with mitmproxy (@Synacktiv)

https://t.co/1ZanT3a6LE

#infosec

[Tech with Mak @techNmak]

Harvard made its Senior Engineer roadmap available to the public at no cost.

Stop paying for $2,000 bootcamps. Prof. Vijay Janapa Reddi just put the entire ML Systems (CS249r) curriculum on GitHub.

If you master these 6 pillars, you're ahead of 99% of the field:
🏛️ Architecture
🚿 Data Pipelines
🚢 Production
🛠️ MLOps
🔋 Edge AI
🔒 Privacy

This is the "Black Box" of Big Tech infrastructure, open-sourced.

Read. Learn. Bookmark.

[Unwanted Blog @UnwantedBlog]

"Handbook on Guided Missiles" 1946 War Department report on German & Japanese rocket powered missiles & aircraft. This rarely-seen classic (scanned from a photocopy) provides a vast pile of information, including a great many diagrams. Air Doc 26 here:

https://t.co/gqzVsFB2bT

[🕳 @sekurlsa_pw]

Was remembering this crazy 0-click iOS exploit chain:

GIF in iMessage → actually PDF with JBIG2 → integer overflow in JBIG2 decoding → Use logic to emulate computer architecture → sandbox escape → Pegasus malware

https://t.co/sZxpSY2HLb