joernchen

Your mom's favorite hacker. Also at @[email protected]

[joernchen @joernchen]

Rare pic of an hacker attempting to find a Buffer Overflow vulnerability.

[Markus Vervier @marver]

Btw we’re still looking for AI offensive security specialists to become part of our AI research team. If you’re interested in building AI models with specific attack capabilities beyond finding yet another bug in source code, reach out!

[greg @teh_gerg]

@joernchen oh man, really.. It's too damn funny.
foo :: Maybe Int -> String
foo = last . words . show

oO

[joernchen @joernchen]

My @BSidesFRA slides are up at https://t.co/pifhDSNc6F :D

[joernchen @joernchen]

@4Dgifts @BSidesFRA please proceed

[joernchen @joernchen]

Whom of you I gonna see at @BSidesFRA tomorrow? :D

[joernchen @joernchen]

@bongoalex @BSidesFRA who would have thought

[joernchen @joernchen]

@LiveOverflow You spelled it wrong

[joernchen @joernchen]

@LiveOverflow

[joernchen @joernchen]

@Naivhacking @GoogleVRP @ChatGPT gratz! Love it when other people get inspired by my findings.

[joernchen @joernchen]

@S1r1u5_ who needs therapy when you can just ragebait on twitter

[Phrack Zine @phrack]

📟 CALL FOR COVERS — PHRACK #73

Want your art featured on thousands of copies of Phrack? Show us what you’ve got.
▸ retro sci-fi & chrome futures
▸ cyberpunk / terminal aesthetics
▸ dystopian systems
▸ hacker manuals from an alternate timeline
▸ weird cool stuff

📮 [email protected]
⏰ Deadline: August 15

Make it strange. Make it beautiful!!

[BSidesFrankfurt @BSidesFRA]

Yeah, so… @joernchen is doing the keynote.

Just some random guy who’s been in the hacker scene for decades. Nothing special. Get ready for a totally average talk!

[joernchen @joernchen]

Looking forward to this!

Brace for TOP INSIGHTS (which is still an anagram of SHITPOSTING).

[BSidesFrankfurt @BSidesFRA]

Yeah, so… @joernchen is doing the keynote.

Just some random guy who’s been in the hacker scene for decades. Nothing special. Get ready for a totally average talk!

[Markus Vervier @marver]

While everyone was on Holiday we scanned the Internet for #BadHost (CVE-2026-48710): zero auth required, affecting FastAPI, vLLM, LiteLLM, and many more - basically the whole AI infra stack!
What we found is: clinical trial databases, email mailboxes, MCP server for SSH industrial IoT via bastion servers, and live PII APIs wide open. The FastAPI/MCP ecosystem is sitting exposed - patch to Starlette 1.0.1 NOW and check your exposure at https://t.co/GS6Y0wBLQm

[joernchen @joernchen]

@daveaitel Pff ragebait LOL

[Attack and Defense @attackndefense]

6 Firefox entries at pwn2own.
5 withdrawals due to our 150.0.3 security release.
1 failed attempt.
0 Exploits.

No incidents.
Time to party :)

[joernchen @joernchen]

@0x4ndy @hackerschoice @vxunderground @bsdaemon @phrack

[joernchen @joernchen]

@dhauenstein @offensive_con

[joernchen @joernchen]

@hackerschoice @vxunderground @bsdaemon @phrack

[joernchen @joernchen]

@hackerschoice @vxunderground @bsdaemon @phrack