hakim

web pentesting and low level stuff.

[Calif @calif_io]

Early this week, we had a meeting at Apple Park in Cupertino. While there, we also shared with Apple our latest vulnerability research report: the first public macOS kernel memory corruption exploit on M5 silicon, surviving MIE. It was laser printed, in honor of our hacker friends.

Full story: https://t.co/AmKMGUmWPt

[m411k @m411k_]

Did you know that running Chromium with these two flags --disable-web-security & --single-process ANY website can access your local files.
https://t.co/N8OBX7Q2Hn

[Eduardo Vela @sirdarckcat]

I am actually very interested in puzzle design! I spent some time a few years ago working on https://t.co/qkxvMNWCz1 which (I hoped) would help CTF authors write non-guessy challenges. So I decided to make a "exploratory" style challenge (a collection of a few easy problems) 7/🧵

[m411k @m411k_]

So this happened a couple of months ago, but we reported an account takeover - in a multimillion users entertainment platform - that earned us $4,500 (Collaborated with @Mr_nyly & @S0nG0ku_H). since it's a private program, I can't disclose a thing, but here are some takeaways 👇

[shubs @infosec_au]

IP whitelisting is fundamentally broken. At @assetnote, we've successfully bypassed network controls by routing traffic through a specific location (cloud provider, geo-location). Today, we're releasing Newtowner, to help test for this issue: https://t.co/X3dkMz9gwK

[Renwa @RenwaX23]

CVE-2025-30466: Safari <18.4 UXSS to bypass Same-Origin Policy with CVSS of Critical 9.8 🔴 ;)

https://t.co/VyYEoj3L3G

[hakim @hakivvi]

@orange_8361 Congrats 🍊

[max.rss @tekknolagi]

Overflows? In my runtime? More likely than you think

https://t.co/T8cRl5r7M3

[SinSinology @SinSinology]

Launching a student-only free workshop: ".NET Exploitation Basics" 🪲
If you're a student (or know one), let's write some deserialization exploits, Manchester, July 12.
10 seats.
https://t.co/ZNdfB8R1pO

[hakim @hakivvi]

@S1r1u5_ spot on! makes it pretty easy to quickly test a wild idea in the most obscure programming language.

[@[email protected] @SecurityMB]

🔥 A new (more difficult) era for mXSS will come soon! If nothing breaks, Chromium will start escaping "<" and ">" in attributes starting with M138.

See https://t.co/lXfe86tpmd for details.

[James Kettle @albinowax]

I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓↓↓

[hakim @hakivvi]

this is sick!

[slonser @slonser_]

Today I used a technique that’s probably not widely known in the community.
In what cases could code like this lead to a vulnerability? ->

[RET2 Systems @ret2systems]

New blogpost! Want to see how we exploited @Synology network-attached-storage devices at Pwn2Own Ireland?

RCE to root via out-of-bounds NULL-byte writes, click the embed for a fun little writeup of CVE-2024-10442 🔎🎉

https://t.co/VOhC5NSCat

[alphaXiv @askalphaxiv]

Introducing Deep Research for arXiv

Ask questions like 'What are the latest breakthroughs in RL fine-tuning?' and get comprehensive lit reviews with trending papers automatically included

Turn hours of literature searches into seconds with AI-powered research context ⚡

[Jun Kokatsu @shhnjk]

I think everyone had enough fun with it that we can now remove this feature 😊

[ϻг_ϻε @steventseeley]

This is an excellent finding and analysis by @stephenfewer https://t.co/wouIEVa2V9. Reminds me of @orange_8361’s recent work. Poetic RCE.

[quarkslab @quarkslab]

Unrestrict the restricted mode for USB on iPhone. A first analysis @citizenlab #CVE-2025-24200 👉 https://t.co/CkqMPz2qEp

[hakim @hakivvi]

Just finished my writeup about CVE-2025-23369, an interesting SAML authentication bypass on GitHub Enterprise Server I reported last year. you can read about it here: https://t.co/Ee61EoACtE

[hakim @hakivvi]

I have posted a writeup for a challenge I authored recently that exploits Django's flatpages, read it here: https://t.co/uAA224dGnO