Krishs

Vulnerability Researcher

[Krishs @shsirk]

After Foxit, It was fun pwning Adobe Reader! Learned quite a lot of things. New achievement unlocked.

[HackSys Team @HackSysTeam]

I and @shsirk submitted our Adobe Acrobat Reader DC UaF RCE exploit to @thezdi. This was an interesting bug to exploit as we faced quite a few challenges. Stay tuned for the blog post describing how we successfully achieve RCE.

https://t.co/cNmKa0QQBt

[Md Ismail Šojal 🕷️ @0x0SojalSec]

AI-Powered Reverse Engineering Plugin for IDA Pro 9+.

One-click explanations understand weird control flow instantly, Smart auto-renames suggestions, vulnerability hints, semantic graphs, RAG search, and docs.

Game-changer for RE & malware analysis, CTF people

- https://t.co/2bSI0k1dkD

[sakura @eternalsakura13]

Enhanced Insecurity Mode: 23 RCEs in Edge's "Safe" WebAssembly Interpreter
Microsoft's "safer" fallback when the WASM JIT is off? 23 paths to RCE in the interpreter itself. Slides now public — huge thanks to the OffensiveCon crew and everyone who came by.
@offensive_con

[Toan Pham @__suto]

I’ve tried various agent pipelines, and here is one of them. It found five type-confusion bugs in V8 Wasm: three under non-default flags and two in DrumBrake/MS Edge.
The repo includes all the bugs in detail, along with a README file that explains how the pipeline works, the prompts used, and many of the genomes it generated.
Since the README is enough to let Claude vibe-code it, I won’t upload my messy and embarrassing code.
Have fun :)
https://t.co/N6zbZmzW8K

[Josh Terrill @joshterrill]

My Windows reverse engineering and exploit research workflow has been:
1. Pick a binary to research like tcpip.sys
2. Use https://t.co/fOxBB6tEsN to automate seeing existing binary versions, download, and generate diffs from them
3. Load the resulting .binexport's and .bindiff into an LLM and ask it to analyze
4. Look up the build number of previous Windows version that old binary existed in from https://t.co/U788ndiJbj such as 26100.8328 and create a VM from it
5. Write code and test, working backwards from LLM analysis

[Ori Nimron @orinimron123]

As promised - full blog post is live for CVE-2026-40369
Covers everything: initial research, methodology, the exploitation path, caveats, cleanups, etc. The whole journey from finding it to production-grade exploit:

https://t.co/XhRTncgRfd

[𝕡𝕨𝕟𝕚𝕖 @0day_ninja]

Just dropped my full notes on Pwn2Own Berlin 2026. Broke down the big wins by DEVCORE, the actual techniques they used, why these matter in the real world, and exactly where you can practice the same skills yourself. Full article here #Pwn2Own #P2OBerlin #CyberSecurity

[Rohit Singh | Mr. Chartist @Mr_Chartist]

🚀 Launching: Mr. Chartist Options Terminal

⭐ Star it → https://t.co/6aP8fVWW46

India's best open-source F&O analytics platform. Built for traders who are tired of paying ₹2K/mo for option chain data.

✅ Live Option Chain + Greeks
✅ Strategy Builder with payoff charts
✅ IV Rank Scanner
✅ FII/DII Activity tracker
✅ Position Tracker with P&L sim
✅ Dark + Light mode

100% free. Open-source. Self-hosted.

#OptionsTrading #NIFTY #BANKNIFTY #NSE #OpenSource #IndianStockMarket

[j j @mistymntncop]

Exploit and mini writeup for CVE-2025-5419.
https://t.co/6XvoVSuii5

[Trenchant @TrenchantARC]

Remember that great OffensiveCon talk? Or sad you missed it? Well, here are the slides for it! https://t.co/wBWo4lHmVu

[sakura @eternalsakura13]

My BlackHat USA presentation's whitepaper and slide are now public.
https://t.co/eSgeWlMMRe

#bhusa

[xvonfers @xvonfers]

(CVE-2025-1920)[$7000][398065918][maglev]Type Confusion
https://t.co/6pNlXqNRHU
https://t.co/E92Be0RVJb
https://t.co/dggBGosDtM

Revert:
https://t.co/bIWMO03OuU
Reland:
https://t.co/mOW5E3rZfU
Revert Reland:
https://t.co/EBK89r4Q7F
Reland^2:
https://t.co/5CWN3yqAIE

[b33f | 🇺🇦✊ @FuzzySec]

I have posted the slides for the talk @chompie1337 and I gave this past weekend at @h2hconference -> The Kernel Hacker’s Guide to the Galaxy: Automating Exploit Engineering Workflows #H2HC

https://t.co/Cl8b58KkAv

[Binni Shah @binitamshah]

Disclosure of 7 Android and Google Pixel Vulnerabilities - PoC published : https://t.co/XeaszDQLzl

PoC :

[Alex Plaskett @alexjplaskett]

✍️ Fuzzing for complex bugs across languages in JS Engines by @cffsmith

https://t.co/T4Eq19uXXN

[Alisa Esage Шевченко @alisaesage]

Releasing full 2+hr video of my browser exploitation workshop from VXCON 2024: https://t.co/SBn4fMarPU

In which I show what goes inside the mind of a skilled hacker while exploiting a highly non-trivial vulnerability in v8, from zero to exploit concept.

Especially this workflow requires advanced abstract thinking, thereby emphasize the role of theoretical modeling in attacking hard zeroday research targets, which is a part of why it's fun. @zerodaytraining

[xvonfers @xvonfers]

🤔
(CVE-2024-7965 - exploited ITW)[356196918][compiler]Improper optimization of ZeroExtendsWord32ToWord64() leads to Memory Corruption is now open with PoC & RCA
https://t.co/E9Ber15Vjw

[Ivan Fratric 💙💛 @ifsecure]

Domato Lives! Today, we merged a WebGPU fuzzer written by @btiszka who used it to find several serious bugs in Chrome. Check it out at https://t.co/NzSn14fBXZ. Potentially also interesting for other browser vendors working on their own WebGPU implementation ;)

[Pumpkin 🎃 @u1f383]

Dropped my slide for POC2024 on Linux kernel exploitation, including a journal from Pwn2Own Vancouver earlier this year. Enjoy 🙂.

https://t.co/CUKKpErYMG

[reverseame @reverseame]

CVE-2024-26926 Analysis #LinuxKernel #CVE202426926 #Analysis #GitHub #SecurityVulnerabilities https://t.co/b93W1QhpM3

[Zero Day Engineering | Community & Industry @zerodayengine]

Analysis of VMware vCenter heap overflow vulnerability exploited at Matrix Cup competitions in China, June 2024 (CVE-2024-38812):

https://t.co/JsK3H1Cpof

Another one in same code, 2023:

https://t.co/jiTT2JVnqK

** Both are RCE to management console, not a hypervisor VM escape!