rtmcx

Member of the Synack Red Team. Researcher, pentester, shellcoder and reverse engineer. OSCE|OSCP|SLAE|eCPPT|CISSP.

[rtmcx @rtmcx]

The feeling when you're at a Defcon workshop about ARM exploitation, and the teacher shows your shellcode (taken from exploit-db, and stripped of the author comments) and takes credit for it himself.. 😦 😠

[0xor0ne @0xor0ne]

Slide decks on getting started with Linux kernel exploitation

"Linux Kernel Exploitation for Beginners" by Kevin Massey:
https://t.co/HNuwKGLTv1

"Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov
https://t.co/9HqgXvCpX4

#Linux #infosec

[Matthias Kesenheimer @BartimaeusvUruk]

I am developing a dirt cheap hardware to perform voltage glitching attacks: https://t.co/v9x5aaKkPD

[Disconnect3d @disconnect3d_pl]

Pwndbg 2025.01 is out! It adds official LLDB support including support for macOS and Mach-O binaries, improved performance, enhanced embedded debugging & many more!

Also, want to support us or buy us a coffee? See our GH sponsors: https://t.co/1KVYKgrXMV

https://t.co/oJmymEeSiC

[WiFiChallenge @WiFiChallenge]

🚨 The Certified WiFiChallenge Professional course is live NOW! 🚀 Exclusive discounts for the first 50 buyers, up to 50% off! Don’t miss out! 💻 #WiFiChallenge
https://t.co/vFqg6BTKqc

[WiFiChallenge @WiFiChallenge]

🛡️ Master the art of auditing Wi-Fi networks! The CWP course at WiFiChallenge Academy is designed for both beginners and experts. Get ready to tackle real-world challenges with confidence in the WiFiChallenge Lab. Launching September 23rd! https://t.co/7eP4Nq2SRZ
#WiFiChallenge

[r4ulcl @_r4ulcl_]

🔍 Want to learn how to hack Wi-Fi networks? The CWP course from WiFiChallenge Academy will take you from beginner to expert with hands-on labs and real-world scenarios. Join the mailing list to be the first to know when it launches! #WiFiChallenge
https://t.co/U3HfvmDPof

[Sticker Mule @stickermule]

Hi All,

We are giving away $500 every time we post to our timeline this August.

Whether you love us or really love us all you have to do is REPOST or REPLY to our timeline posts to enter.

And, to our handful of haters, you, of course, can enter too.

Rules are here:
https://t.co/pgjO4R4d54

Tag your friends so they join the fun.

Anthony Constantino
CEO, Sticker Mule

P.S. We're still thinking about giving away another Cybertruck.

[0xor0ne @0xor0ne]

This was an excellent writeup on how to pwn WatchGuard firewalls
Credits @ambionics

https://t.co/vAv81GU5Uh

#infosec #watchguard

[0xor0ne @0xor0ne]

Interesting series on how virtualization works (VMware, XEN, QEMU)
Credits @LordNoteworthy

Part 1: https://t.co/kuDRlu1fnm
Part 2: https://t.co/OlqHuul7df
Part 3: https://t.co/VFTqEqfEeY
Part 4: https://t.co/Lo0kYfwTcg

#virtualization #infotech

[0xor0ne @0xor0ne]

Series on fuzzing open source software using fuzzuf by @RicercaSec

https://t.co/hqhtJFcWef
https://t.co/nd6EOhdaF1
https://t.co/Uib3p7mLJI
https://t.co/7FwDlO6HW9

#fuzzing #cybersecurity

[0xor0ne @0xor0ne]

Framework for multi architecture emulation and firmware fuzzing (Icicle)

Paper: https://t.co/MbC1ssR8Bm
github repo (pre-release): https://t.co/Y6zjcLPyVq

#fuzzing #firmware #rustlang #cybersecurity

[0xor0ne @0xor0ne]

In this excellent blog post, Olivier Laflamme (@olivier_boschko) goes through practical examples of how Shambles, a tool by Lian Security, can be used to reverse engineer and find vulnerabilities in embedded/IoT devices

https://t.co/ebSWmpMB2N

#infosec #iot #cybersecurity

[0xor0ne @0xor0ne]

Nice short reading for anyone interested in starting with embedded/IoT devices analysis and reversing.
Credits @CyberWolf_2077

https://t.co/S72NTkdrQ8

#embedded #infosec

[Azeria @Fox0x01]

https://t.co/NvJW93VubZ for the win

[rtmcx @rtmcx]

@Fox0x01 Awesome, thank you!

[Azeria @Fox0x01]

Overwhelmed by all the support I’m receiving from the community. 🥹🙏🏼

As a small thank you, I made all my high-resolution Arm assembly cheat sheets available for free 💙

Get them here:

[0xor0ne @0xor0ne]

Series to learn IoT/embedded devices reverse engineering (credits @Palantir555)

Debug Ports: https://t.co/ge5KeF3OU3
Firmware: https://t.co/CqVF7NNV8c
Data: https://t.co/TfkBgcH3fS
Flash: https://t.co/DuIJsqWzux
Digging the Firmware: https://t.co/b3OPIIQc5n

#iot

[0xor0ne @0xor0ne]

Learning the basics of Linux kernel exploitation
Excellent series by @k3170Makan

Debugging with QEMU: https://t.co/MFkoXhjCXP
Stack Overflows: https://t.co/E6meVjl5ub
RIP control: https://t.co/mIdgQs4F0f

#cybersecurity #infosec #Linux #kernel

[0xor0ne @0xor0ne]

Excellent blog post on TrustZone Exploitation (AMLogic A113X) by @boredpentester

https://t.co/YUps6rkXwS

Based on this work by @bl4sty

https://t.co/4i4xcWLnA1

#embedded #trustzone #cybersecurity

[0xor0ne @0xor0ne]

Excellent series on ARM64 reversing and exploitation.
Credits @8kSec

Heap overflow: https://t.co/bgcKhZHRXi
UaF: https://t.co/5wfe1djthT
ROP: https://t.co/BYfC90anxw
NX and mprotect: https://t.co/ZjiYNmZkXE

#arm #exploit #infosec