We just received a $250,000 Chrome Full Chain bonus! π
We've claimed the second Full Chain bonus of 2026. Only two remain!
Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched.
Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research.
P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!
We just received a $250,000 Chrome Full Chain bonus! π
We've claimed the second Full Chain bonus of 2026. Only two remain!
Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched.
Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research.
P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!
got my first CVE using an LLM in just one or two weeks.
I was quite surprised by how much easier it has become to find vulnerabilities in the era of AI.
Thank you everyone for taking part in CyKor CTF 2025! π
We truly appreciate all the amazing teams who joined, battled hard, and made this yearβs competition incredible. πͺπ»
Here are the final results:
π₯ The Amazing Digital Orange! β 7585
π₯ r3kapig β 5489
π₯ β΄β β 5358