stdnoerr

Tech enthusiast | pwner | CTFs with @ARESxCyber

[chompie @chompie1337]

@Steph3nSims AI is still not great at xdev and often misjudges when determining exploitability of bugs 🤷🏻‍♀️

[stdnoerr @stdnoerr]

I will be in Riyadh for the BlackHat MEA CTF finals. If you're there as well, ping me. I would like to chat with CTFers, or anyone interested in cybersecurity, in person. Exchanging ideas is always fun

[0xor0ne @0xor0ne]

Learning how to exploit DirtyPipe vulnerability in Linux kernel (@0xnull007 and @stdnoerr)

https://t.co/0gQj0RkrY3
https://t.co/MdDPrfmweU

#infosec #Linux

[stdnoerr @stdnoerr]

@Synacktiv Neo-Stuxnet?

[stdnoerr @stdnoerr]

@josef_korbel @0x_shaq Hello josef!
How have you been?!!

[stdnoerr @stdnoerr]

@0x_shaq Yeah man. You have left CTFs for a while but those were the days. Full on action. I actually liked a lot of your tweets since you OS dev brainfuck journey lol
Lets catch up sometime

[stdnoerr @stdnoerr]

@h0mbre_ I don't know if someone mentioned this or not but this blog by @benhawkes addresses this problem by comparing the vulnerability with other similar vulnerabilities and proving them to be members of an "equivalence" class.

https://t.co/lCTziayo8y

[stdnoerr @stdnoerr]

played BlackHat 2024 Qualifiers with AirOverflow. Didn't get much time but managed to solve one challenge. Here's the writeup for the one I solved.

P.S. I'm in Riyadh for the Finals. If you're there as well, feel free to hit me up
https://t.co/oivCOQYznO
#BHMEA24

[stdnoerr @stdnoerr]

Finally figured out my approach and I'm already thinking of a new, hopefully better, one.

[stdnoerr @stdnoerr]

I was trying to write an exploit for CVE-2023-32233 last summer. It was my first exposure to the netfilter subsystem and race conditions. Had to give up when university started. I thought I would continue to try in my free time. Never did. 1/2

[stdnoerr @stdnoerr]

Today I opened the poc I was trying to write and I couldn't understand what I was trying to attempt🫠, got rusty on Netfilter internals and never documented the manual steps of debugging (was using ftrace to tame race condition).

Lesson learnt: ALWAYS document and take notes 2/2

[stdnoerr @stdnoerr]

@_h0p5 That's so cool!!!
Well deserved

[stdnoerr @stdnoerr]

Checkout my teammate's writeup. These were some really good challenges.

[h0ps @_h0p5]

Played #corctf last weekend with @ARESxCTF. Here is my writeup for zeroday, kcipher and smm-diary. On kcipher and smm-diary I worked together with my teammate @stdnoerr :).
https://t.co/W5nhnIiL2Y

[Crusaders of Rust @cor_ctf]

corCTF 2023 has ended🥳- thanks to all the players and our wonderful sponsors! We hope everyone had a great time!

Congrats to the top 5 teams:
1. @Water_Paddler
2. @CyberTeamItaly
3. cat🇰🇷
4. @0rganizers
5. @r3kapig

See you all next year!

[stdnoerr @stdnoerr]

@PhysInHistory @SaveToNotion #thread

[stdnoerr @stdnoerr]

@tourpran @theXSSrat @justk1R4 I am delighted ❤️

[stdnoerr @stdnoerr]

@ustayready @SaveToNotion #tweet #edr

[stdnoerr @stdnoerr]

@LivePhilosophyy @SaveToNotion #Thread

[PARS Defense @ParsDefense]

CVE-2022-22629: From WebKit Patch Diffing to PoC https://t.co/GOyMY4Nu5S

[stdnoerr @stdnoerr]

@mistymntncop I need to read it again ig. Sorry if It turns out to be nothing