on vacation a few months ago i challenged myself to come up with a data-only exploit for a `struct file` UAF to escape the Google kCTF container. i was able to find my own arb read/write gadgets and grab the flag, thanks to all mentioned within!

how the heap pointers that i have no other way to leak are looking at me from the WARN() message from an invalid list_del operation

RT @Yogehi: Fun fact about this picture in the blog post by @thezdi , I was actually exploiting my personal phone, the Galaxy Z Flip 6, to…

RT @offlinemark: week 55, streaming kernel dev right now topic: exec / spawn syscall now that we have a filesystem, we can try to exec pr…

@sshell_ hopefully not! i hope it was just me accidentally saying something offensive or something

@defparam no!!

RT @R00tkitSMM: Highly recommend this course by @richinseattle to anyone looking to level up their skills! absolutely worth it!

RT @offensive_con: Yarden Shafir (@yarden_shafir) is back for Offensivecon 2025 🤩 Sign up now to the Windows Internals Training. *Trainin…

i have to write a blogpost about my journey with this bug and finally figuring out how to exploit it. it will remove any shred of impostor syndrome you might have

RT @_qwerty_po: The dreamhack CTF invitational quals will be held from 2025/02/08 00:00(UTC+0) to 2025/02/09 00:00(UTC+0)!

@pwningsystems Linux Kernel so far this year 3. 0 exploitable.

@TACIXAT ChatGPT is suggesting exploit strategy A that clearly doesn’t accomplish what we need. I tell it that. It suggest strategy B. I say “nice idea but doesn’t work because of this code here”. It says “you’re right, how about exploit strategy A?”

maybe his biggest flub yet, accidentally revealing he doesn’t know ball

@alexjplaskett pythong*

@DynastyNerds it sucks to have all the Buy Low guys already on my roster lol

@robertmays i really hope you have to be face to face with Spags and ask him a serious X’s O’s question with that on

RT @jvanegue: I have room for a fuzzing researcher to work with me and the research team on some new exciting ideas. Ping me up If you're i…

@DaltonBMiller for me, sprints are a great way to injure my hamstring and not be able to lift for heavy for 3 weeks

@mycoliza can’t believe they doxxed Lee Harvey Oswald

@DynastyNerds @DynastyRich @DynastyPrice @DynastyMatt are we trading saquon for 1.1? coming off a championship but started 4 rookies in playoffs (young team)