mrk

defining undefined behaviour

[mrk @ret2mrk]

@yukandothis 好

[Maurice Heumann @momo5502]

I never knew process- and thread ids were a multiple of 4 on Windows 🤯

https://t.co/M8dw3io11I

[mrk @ret2mrk]

@GomezOIvan Yo

[udp @udp_ctf]

The glibc cycle continues lol..

Unsafe -> implement safety features -> safety features slow -> circumvent safety features in order to get speed -> unsafe

https://t.co/G0g5ZLtVNj

[Cvewhen? @cvewhen]

@_gcali pls also keep ALSR, NX, Pie, off for better performance and make sure to always compile with -g flag for extra aura

[mrk @ret2mrk]

Got FOMO from vulnerability researchers doing cool stuff using agentic AI and had to give it a go

Old target, new vuln

[Victor Fresk0 @hacefresko]

Zyxel has published 2 CVEs for some vulns I found :D

CVE-2025-13943: Authenticated command injection in log export CGI
CVE-2025-13942: Unauthenticated command injection in UPnP daemon

I will blog about this in the coming months. Meanwhile, exploits here: https://t.co/CbVHekdN5q

[Victor Fresk0 @hacefresko]

I have finally achieved remote code execution!!! I ended up using the arbitrary read primitive and overwritting some function pointers.

Also, mediatek acknowledged the vuln, so I will be releasing a very cool blog about this when the vuln is disclosed :D

[mrk @ret2mrk]

@hacefresko Crazy work, congrats!!

[Faith 🇧🇩🇦🇺 @farazsth98]

I'm excited to finally share Chronomaly, a kernel exploit for Android and Linux kernels 5.10.x using CVE-2025-38352.

As a reminder, please patch your Android devices if you haven't already!

I recommend getting some 🍿 before reading this post 👀

All links in the thread below:

[mrk @ret2mrk]

pre-auth RCE on a well-known router for the lulz

[mrk @ret2mrk]

command injection is cool

[mrk @ret2mrk]

IoT world is wild

[AIfredo 0rtega @ortegaalfredo]

@JohnDunlap2 @R00tkitSMM @FFmpeg Yes, this 0day is also free.

[cts🌸 @gf_256]

speedrunners reinvented Use After Free and called it "stale reference manipulation"

one day theyre gonna invent type confusion and call it item abuse

[h0mbre @h0mbre_]

Lucid is alive! it's fuzzing its first real target and found it's first 0day already, an 00B read. had to patch it to keep fuzzing. this + some modifications is going to be blog post 1 in a series about iterating on the fuzzer until it's vastly improved.

[mrk @ret2mrk]

Didn't know how to PoC my arbitrary code execution on a device running a RTOS so I just found a function that printed a camel and pointed PC to it

[mrk @ret2mrk]

0x41414141