jeff

Forever standing on the shoulders of giants

[jeff @jeffssh]

I have completed the FORCED ENTRY RCE + SBX chain with a PAC bypass. The calculator payload can be found here: https://t.co/voZRBSdgdD. I learned a lot about iOS exploitation and can't wait to share that in a blog post, which I'll release along with the code to generate this PDF.

[Alex Albert @alexalbert__]

With the help of Claude Mythos Preview, the Firefox team fixed more security bugs in April than in the past 15 months combined.

[chompie @chompie1337]

sorry babe, not tonight
2x claude usage during off-hours

[xvonfers @xvonfers]

Let's put together the best articles on v8 vr/xd for 2025-2026. Write the most interesting blog posts, issues/reports, exploitation techniques, and so on in replies.

I'll start with: Seunghyun Lee(@0x10n) and 303f06e3
https://t.co/xrIyRkFjo2
https://t.co/lpl1uQ8MHT

[𝚊𝚕𝚔𝚊𝚕𝚒 @alkalinesec]

shaking my head while excitedly reading a citizen lab / project zero post so everyone in my work-from-home office knows i disagree with human rights violations

[cts🌸 @gf_256]

speedrunners reinvented Use After Free and called it "stale reference manipulation"

one day theyre gonna invent type confusion and call it item abuse

[Seth Jenkins @__sethJenkins]

We really should be talking about this more....KASLR is just not working properly on Android right now, and it hasn't for a long time.

https://t.co/AE0vBXEcob

[Brendan Dolan-Gavitt @moyix]

As the operator of a soup kitchen, I don’t see why I should be expected to fix health code violations people report. After all, we are run almost entirely by volunteers

[jeff @jeffssh]

@francisco_oca Amazing!

[jeff @jeffssh]

@thezdi Who could have seen this coming…

[Dohyun Lee @l33d0hyun]

OMG.. whatsapp 0c in pwn2own

[Project Zero Bugs @ProjectZeroBugs]

Pointer leaks through pointer-keyed data structures https://t.co/AGdl4TfiPi

[jeff @jeffssh]

@Fox0x01 They took my FORCEDENTRY PoC too 😕

[xvonfers @xvonfers]

https://t.co/rj7X7UMSDq
https://t.co/2RF2PqMVqB

[jeff @jeffssh]

@xvonfers @mistymntncop You beat me 😅

[jeff @jeffssh]

@boredpentester @rdjgr Lots of jbig2 related code in my forced entry repo: https://t.co/Vk8L2VQsFJ

Adder, comparator, segments for bit reads/writes and a strategy for byte reads/writes. Good luck!

[jeff @jeffssh]

@dillon_franke From the rop chain it looks like the exploit was done on an intel machine. Did you ever look at arm? Was PAC an issue?

[chompie @chompie1337]

Me and the homies are dropping browser exploits on the red team engagement 😎. Find out how to bypass WDAC + execute native shellcode using this one weird trick -- exploiting the V8 engine of a vulnerable trusted application.
https://t.co/ykJv0sePN9

[Adam Crosser @UNC1739]

I'm thrilled to announce that my talk Ghost Calls: Abusing Web Conferencing for Covert Command & Control was accepted to #BHUSA 2025 (CC: @BlackHatEvents)
https://t.co/hRUncJq3YY

[jeff @jeffssh]

@mistymntncop @xvonfers 👀 you'll tweet if you find out right👀