Filippo Cremonese

Lead Alt-L1 security engineer @Zellic_io. CTF player @towerofhanoi, @mhackeroni. Fmr @poul_polimi member. Prev @_revng, @Doyensec

[Zellic @zellic_io]

The core utilities that run every Linux system have been rewritten in Rust. We audited them.

Before shipping uutils coreutils with Ubuntu 26.04, @Canonical commissioned Zellic for an external security audit.

Two rounds, fixes contributed directly upstream.

Full report below.

[Filippo Cremonese @fcremo]

@d0nutptr Sir I think you misunderstood what people mean by finding bugs using formal verification tools

[cts🌸 @gf_256]

V12 is now live for open beta. It can:

- Find valuable bugs
- Generate working, runnable PoC
- Generate patch and test the PoC against it

In our testing during audits at Zellic, Zenith, and Code4rena we've been consistently impressed.

Best of all: it's free. (Don't abuse it!)

[Zellic @zellic_io]

Bad auditors miss obvious bugs. We built an AI tool that finds them.

Introducing V12: the only autonomous Solidity auditor that actually finds Highs and Criticals.

We'll be releasing it for free.

V12 finds Crits in Zellic audits, High/Mediums in Cantina, and a bug in Pendle.

[mhackeroni @mhackeroni]

Still hacking with your feet on the ground? Not anymore, we cooked 🍝

Join Ctrl+Space CTF Quals (20–21 Sep) to be one of the 5 finalist teams to play in-orbit challenges running on @D_Orbit ION Satellite Carrier 🛰️ at @esa 3S conference 🇳🇱 (4–6 Nov)!

https://t.co/cvS1NKTvZF

[mhackeroni @mhackeroni]

🚨 Sponsoring us?!

The mhackeroni kitchen will open its usual pop-up restaurant in Vegas at @defcon this August 🍝

There's still time to help us make it - write us if you'd like to discuss!
Let's get your logo out there on this summer's hottest piece of apparel 👕🚩

[Zellic @zellic_io]

We're proud to share that Zellic Security Researcher @fcremo helped discover an issue in the Cairo VM during a recent audit of @Starknet OS.

This bug has been fixed as an immediate patch to Starknet's current version 0.13.3.

[Filippo Cremonese @fcremo]

@wizzair hi! My lawyer is trying to get in contact with you but is not receiving any answer.
What email address can he use to reach you?

[Filippo Cremonese @fcremo]

I'm loving @nohatcon soundtrack

[Filippo Cremonese @fcremo]

@_revng Hey I know that machine 👀

[mhackeroni @mhackeroni]

📢 Calling all Sponsors!

Get mhackeroni to the DEF CON 32 CTF finals 🚩🍝

Would you like to be a part of moving the kitchen to Las Vegas this summer & secure a spot for your logo in our highly-demanded t-shirt?

Contact us!
Your favourite Italian Acheri™️ need your help!

[Filippo Cremonese @fcremo]

@hackerfantastic @pid_eins I am trying to understand the vulnerability you are outlining. Could you please give me an idea of how you would hijack the pty to inject inputs into it without ptrace and without being root/having CAP_SYS_ADMIN which AFAIK is needed to use TIOCSTI on the pts?

[Filippo Cremonese @fcremo]

Ticket still available, get it while it's hot!

[Filippo Cremonese @fcremo]

I have a friend with one extra CCC ticket. Reply/DM me if interested, will put you in contact.
RT apprecieted, see y'all at Congress!
#CCC #37C3

[Filippo Cremonese @fcremo]

How ironic -- one of the songs in the playlist @Spotify made for users that unsubscribe from a premium plan is unavailable

[Filippo Cremonese @fcremo]

I have a friend with one extra CCC ticket. Reply/DM me if interested, will put you in contact.
RT apprecieted, see y'all at Congress!
#CCC #37C3

[Filippo Cremonese @fcremo]

Gone! Sorry everyone, good luck with the general sale!

[Filippo Cremonese @fcremo]

I have one spare ticket for #CCC. Giving it away at cost (obviously, screw scalpers). RTs appreciated :)
#37C3

[Filippo Cremonese @fcremo]

@vh_tech @frank_juston I have a spare ticket, giving it away at cost. DM me if you still need one!

[Filippo Cremonese @fcremo]

@_revng I meant you don't get to decide where the push goes, it's one time up, the next down.
I guess it could be worse, it could push half word up, half word down.