Nige 👻

vulnerability researcher

[adidasUK @adidasUK]

CHOOSE SCOTLAND 🏴󠁧󠁢󠁳󠁣󠁴󠁿🏆

@ScotlandNT @LewisCapaldi

[Signal @signalapp]

Our statement on the UK government’s demand that all content on all devices sold or used in the country be scanned, on the presumption of nudity, using a dystopian combination of age verification and content scanning. This proposal will not safeguard children. It endangers us all.

https://t.co/VdWe9uhi8p

[sam4k @sam4k1]

in this post i explore how small local models handle discovery and validation of a couple of kernel vulns 🤓

[sam4k @sam4k1]

here's a technical write-up i wrote on one of the kernel bugs we've found :)

[tnr @_tnr_]

Had a blast presenting a forever-day ARM Mali Utgard kernel driver bug at @DistrictCon in the Junkyard!

Check out the Github repo here with all five exploits: https://t.co/KwrmgQkWYf

And the blogs with a lot more detail here: https://t.co/Okc248AIOP

[Nige 👻 @nigew_]

@roddux @h0mbre_ It’s from ‘the art of software security assessment’, chapter 5. At least, that’s where I first seen it.

[Calum Hall @_calumhall]

Time to enter a new era of detection & response for macOS 🤘

[Alex Plaskett @alexjplaskett]

Kernel Exploitation Techniques: Turning The (Page) Tables by @sam4k1

https://t.co/Fc9qRY9wv0

[sam4k @sam4k1]

with offensivecon around the corner, i figured id write another post on linux kernel exploitation techniques - this time i cover the world of page table exploitation! enjoy 🤓

https://t.co/dqW9eMJkVI

[sam4k @sam4k1]

ngl gang i might have got a bit lost in the sauce with this one, but if you're curious about how mmap() is implemented, check out part 2 of my memory management linternals series

https://t.co/Wr9X60zW1I

[sam4k @sam4k1]

i'll be up in dundee for securitay if anyone wants to chat/catch up 🐧

[Nige 👻 @nigew_]

@Doctor_Hacker https://t.co/vdxLEOshRa

[Rangers Spares @Rangers_Spares_]

@ScotlandSky It’s a shit rule cause it’s clearly accidental but it clearly comes off his arm and goes in. That’s the rule. If it comes off an arm and goes in then it doesn’t count

[Kyle @kyleb0wes]

🗣️ I’M HIRING

The New Year is off and running! I’ve spent the first couple of weeks settling into my new role looking after Security Ops at Bumble Inc. 🐝

I’m hiring a number of roles - please reach out directly with any questions. (No agencies at this time, please). 🧵

[LiveOverflow 🔴 @LiveOverflow]

skill issue

[sam4k @sam4k1]

it's been a while, but here's a new post in my linternals series where i attempt to introduce the linux kernel's memory management subsystem 🐧

https://t.co/BxJCvZYdzd

[exploits.club @exploitsclub]

No rest, not even for 🇺🇸 day: 🗞️

A kernel bug from @sam4k1

@addisoncrump_vr drops some fuzzing wisdom

@bjrjk puts together a slide deck that would make your @McKinsey friend drool

You guys heard about this low-key OpenSSH vuln?

+ jobs and more 👇

https://t.co/2wNEQDYxU7

[sam4k @sam4k1]

here's the write-up for the net/tipc vuln i found while working on my talk 🙌

https://t.co/8kiXhwpAbe

[TheZDIBugs @TheZDIBugs]

[ZDI-24-821|CVE-2024-36886] Linux Kernel TIPC Message Reassembly Use-After-Free Remote Code Execution Vulnerability (CVSS 9.0; Credit: Sam Page (sam4k)) https://t.co/1y48XrlEFB

[sam4k @sam4k1]

here are the slides for my typhooncon talk on finding bugs in the linux kernel (minus gifs 😩)

https://t.co/kqj2WMVsQ1

[sam4k @sam4k1]

super excited to be back in seoul for #typhooncon24!