faryad rahmani

Security researcher

[faryad rahmani @faryadR]

@1401JN @juniiemoon هوژین

[faryad rahmani @faryadR]

زیاد اهل تویت زدن نیستم و همیشه خواننده بودم اینجا اما وضعیت ما ۱ ماهه شده پینگ گرفتن،نمیشه کار کرد.
فیبر نوری با سرعت ۱۰۰ مگابیت گرفتم اما این سرعت منه ساعت ۲:۳۰ شب
۴۰ کیلوبایت ارسال و دریافت بعد از ۱ دقیقه

[fuzzsociety @fuzzsociety_org]

We built a full-system iOS fuzzer using QEMU+AFL, dup2() I/O channels, hypercalls, syscall enumeration & __syscall tricks on undocumented architecture. Bridged gap between fuzzing theory & closed-source systems.
Instructions and code

https://t.co/elx6EA825s

Course and book
https://t.co/mPwIymEvmz

https://t.co/xwY1vsWwwo

The course has an exam and a certification.

#iOSFuzzing
#SecurityResearch #Fuzzing

[faryad rahmani @faryadR]

@ruikai @pwnoio @FFmpeg How did you find the vulnerabilities? Did you use AFL fuzzer?

[Joe Desimone @dez_]

All credit to @maple3142 but verified this works. Full PoC: https://t.co/4K21aVGGQT

[0xor0ne @0xor0ne]

pre-auth RCE (CVE-2025-9242) stack buffer overflow vulnerability in WatchGuard Fireware OS

https://t.co/8gUrO3steS

Credits @watchtowrcyber

#infosec

[Clandestine @akaclandestine]

GitHub - DedSecInside/TorBot: Dark Web OSINT Tool https://t.co/ybS0n5qHVu

[0xor0ne @0xor0ne]

Analysis and exploitation of a Use-After-Free vulnerability in the Linux network packet schedule (CVE-2025-38001)

https://t.co/t0C6wWlyWI

#infosec #Linux

[Panos Gkatziroulis 🦄 @ipurple]

Indirect-Shellcode-Executor | Exploits the misconfiguration/vulnerability present on the API Windows method ReadProcessMemory https://t.co/0fS9wCfVwN

[Stephen Fewer @stephenfewer]

We now have a (draft) @metasploit exploit module for the recent Fortinet FortiWeb vulns, chaining CVE-2025-64446 (auth bypass) + CVE-2025-58034 (command injection) to achieve unauthenticated RCE with root privileges: https://t.co/Xh15JybxsC

[faryad rahmani @faryadR]

Fuzzing Windows Defender with loadlibrary in 2025 https://t.co/yqDMacGQZO

[faryad rahmani @faryadR]

Defeating KASLR by Doing Nothing at All https://t.co/szXVAqjIXP

[faryad rahmani @faryadR]

https://t.co/vhnxTFajPr

[0xor0ne @0xor0ne]

VMware Workstation guest-to-host escape (CVE-2023-20870/CVE-2023-34044 and CVE-2023-20869) by Alexander Zaviyalov (@NCCGroupInfosec)

https://t.co/qAKnS15RLn

#infosec

[Florian Hansemann @CyberWarship]

''GitHub - D4m0n/CVE-2025-50168-pwn2own-berlin-2025: CVE-2025-50168 Exploit PoC — Pwn2Own Berlin 2025 - LPE(Windows 11) winning bug.''

#infosec #pentest #redteam #blueteam
https://t.co/HA4tMCNFLZ

[Daily CyberSecurity @Daily_CyberSec]

A Critical (CVSS 10.0) RCE flaw (CVE-2025-65108) in md-to-pdf allows arbitrary JavaScript code execution via malicious front-matter. Over 47K weekly downloads are affected. Update to v5.2.5.

#mdtopdf #RCE #SupplyChain #Cybersecurity
https://t.co/ppj5WiAVmC

[Enes Şakir Çolak @enessakircolak]

Windows 11 24h-2 Kernel Exploitation
eneio64.sys LPE PoC

Task traversal is one of my favorite techniques. I hope everyone like it as me :)

Reach the blog at the link below ->
https://t.co/oetoxDjLi8

#Windows #Kernel #Exploit #win11 #24h2 #kernelexploit #windowskernel

[faryad rahmani @faryadR]

@imh06127 @ircfspace اگه هردو سرور تو اینترنت دارن من میتونم دستی برات کانفیگ کنم

[xvonfers @xvonfers]

(ZDI-CAN-25282)[ksmbd]Race condition between smb2 session log off and smb2 session setup -> UAF from session log off -> ... -> RCE(auth is required)
https://t.co/MhJesxlqbW
https://t.co/yP2vtDKme5

@FFFVR_

[0xor0ne @0xor0ne]

Analysis of Windows nwifi.sys Wi-Fi driver vulnerability (CVE-2024-30078)

https://t.co/5LeswHywYW

#windows #infosec