Xeysz Matrasx

[Brandon Falk @gamozolabs]

If they made private keys open source more people could audit them and make sure they're not 4??

[Brandon Falk @gamozolabs]

I'm still kinda under the impression that AI really is good at motivating people who could have already done the things. Feels bad to see AI get so much credit for things people were already capable of doing. The progress (or illusion of progress) seems to be its biggest value

[vx-underground @vxunderground]

Dawg, they got Pete Hegseth in the data breach. It's available for sale for $100

[cr3ghost @cr3ghost]

If you're new to exploit development, reverse engineering or vulnerability research, bookmark this before buying another course.

Blackstorm Security has published 1,600+ pages of research for FREE.

Windows kernel exploitation.
Driver reversing.
Patch diffing.
Chrome / V8 / WebAssembly.
Hyper-V.
macOS / iOS internals.
Modern mitigation bypasses.
Real CVEs taken from root cause to working exploitation.

Their CVE-2024-30085 series alone spans hundreds of pages and multiple exploitation strategies.

This is the kind of material that teaches you how vulnerability researchers actually think, not just how to run tools.

19 research papers. 1,657 pages. Free.

Start here:
https://t.co/wDftgmamHH

Author: @ale_sp_brazil

Focus on the techniques not the tools (X64DBG, GHIDRA/IDA, WINDBG, GDB GEF)

#ExploitDevelopment #ReverseEngineering #VulnerabilityResearch

[Rui Ueyama @rui314]

僕の書いたmoldリンカの論文がASPLOS（という国際会議）に通りました。プレプリントをarxivにアップロードしてあります。 https://t.co/vHaYJVH84h

[tmp.0ut @tmpout]

We are pleased to release tmp.0ut 5 Volume!

Get your viruses, rootkits, strange ELFs, weird machines, tiny files, cool art, and phresh beats here!!

https://t.co/tZLM50HOc0

[Brandon Falk @gamozolabs]

Oh one final zinger. These companies are training custom bleeding edge models with some of the best AI researchers in the world. In security novel is making tweaks to AFL and running it on a different target. Most people just read code + write scripts on top of gdb :D

[Brandon Falk @gamozolabs]

My kinda hot take on the Mythos stuff is really that there is so little money in offensive research that it's still not really that hard to find bugs. These AI companies are operating with budgets that make the entire offensive research of all big tech combined look like a joke

[Halvar Flake @halvarflake]

Proposal: if you publish about an LLM finding vulns, please publish precise costs. Given the different levels of competence, verbosity etc per model, knowing token counts and cost per token is essential.

[Mari0n @pinkflawd]

Squeeeee 🥳 I'll be teaching my Advanced Linux Malware Reverse Engineering class at RE//verse conference in 2026!! MORE Linux APT insides and peculiarities😍🥰🤩Pls share if you can🙃 https://t.co/hdpjTLKnJc

[vx-underground @vxunderground]

tldr University is a bunch of fucking bullshit because they want to charge you a bunch of money so you can learn. Learning should be free, or at least not place you into crippling debt. Knowledge and higher learning should be accessible to anyone who wants to learn

[Mike Dodds @miike]

I’ve done a lot of formal methods “technical sales” - trying to scope projects for Galois clients that solve their problem and fit into a budget. I gave a talk last week on some things that I learned along the way: https://t.co/pEnr6noLpA

[tess @xsphi]

"responsible disclosure" is a psyop security researchers fell for hook, line and sinker. when you consider the 2nd and 3rd order effects, the ethical way to report a vulnerability is immediately publicly on the internet, exploit code included. or just hack for profit.

[trash jones @jzux]

surely this is the 3-day weekend that will fix my crippling burnout

[Amanda Goetz @AmandaMGoetz]

First they called it “quiet quitting”
Now they call it “quiet vacationing”
Know what’s not quiet?

How tired millennials are of BS corporate culture.

We tried climbing the ladder and we still can’t buy houses or save for retirement.

Agree with Peter Guse on this one.

Out:
Giving everything for a company who doesn’t care about you.

In:
Work that enables you to feel fulfilled in and out of the “office”

Agree?

[chompie @chompie1337]

BORN TO CODE
KERNEL IS A FUCK
Compile Em All C89
I am mailing list man
410,757,864,530 CVEs

[stacksmashing @ghidraninja]

Found the prompt that bash uses 🤯