Esoj @_esoj1

Pwning stuff github.com/es0j Rio de Janeiro, Brasil Joined July 2020

Tweets

91
Followers

430
Following

183
Likes

276

GRIS UFRJ @gris_ufrj

2 years ago

Junte-se ao GRIS: Se você é estudante ou entusiasta da segurança da informação e deseja participar ativamente de pesquisas inovadoras ou competições de CTF, o GRIS é o lugar certo para você. Link do forms - docs.google.com/forms/d/19Cffu…

0 3 7 690 0

GRIS UFRJ @gris_ufrj

2 years ago

Explorando técnicas de engenharia reversa em jogos: blog.gris.dcc.ufrj.br/blog/2023-08-0…

1 6 26 2K 7

Alexandra Sandulescu @fkaasan

2 years ago

Tavis found a fascinating architectural CPU bug 🐞

Tavis Ormandy @taviso

2 years ago

Tavis found a fascinating architectural CPU bug 🐞

35 663 2K 335K 178

Download Gif

3 4 36 8K 3

Rodrigo Branco @bsdaemon

2 years ago

The video for the talk is available. I hope folks enjoy and feel free to send me feedback, comments, criticisms (privately or publicly, either way is welcome!)

hardwear.io @hardwear_io

2 years ago

The video for the talk is available. I hope folks enjoy and feel free to send me feedback, comments, criticisms (privately or publicly, either way is welcome!)

1 13 32 26K 8

5 20 46 22K 3

Rodrigo Branco @bsdaemon

2 years ago

The slides for my keynote at Hardwear.io are available (as all others) - it has a few less known stories on uarch/HW security: bit.ly/HardwearKeynot… @hardwear_io

2 44 118 22K 21

Esoj @_esoj1

2 years ago

In RET2ASLR we can leak ASLR from the BTB in under a minute. Plz use the speculation control feature for userspace applications dealing with sensitive data. docs.kernel.org/userspace-api/…

2 3 30 3K 6

Download Video

Epic Leet Team @eltctfbr

2 years ago

Novo artigo em parceria com @mentebinaria ! É sobre segurança de OAuth 2.0! Confiram! Está bem legal! Autor: @vrechson mentebinaria.com.br/artigos/segura… Toda a produção da parceria está em epicleet.team/articles Se quer ler algo específico nos nossos artigos, comenta aí!

0 5 10 1K 0

Jordy Zomer @pwningsystems

2 years ago

Found some Spectre-v1/MDS gadgets in the Linux kernel at work with @fkaasan, including one in ‘copy_from_user’ 😁😁 github.com/google/securit…

1 17 64 23K 11

Rodrigo Branco @bsdaemon

2 years ago

Google embargo on another linux kernel issue found by @_esoj1 and I finally lifted... here is the advisory: github.com/google/securit…

1 30 89 21K 12

Rodrigo Branco @bsdaemon

3 years ago

So, @_esoj1 and I found another linux kernel spectre v2 mitigation problem (lkml.org/lkml/2023/2/20…). At this point: is there anyone who actually care? No one is testing?

1 8 28 6K 4

Rodrigo Branco @bsdaemon

3 years ago

This finding by @_esoj1 and I just demonstrates how much the side channel issues are still misunderstood.

Esoj @_esoj1

3 years ago

This finding by @_esoj1 and I just demonstrates how much the side channel issues are still misunderstood.

0 25 73 18K 6

0 8 30 7K 2

Coppe Sistemas @CoppeSistemas

3 years ago

HEADS' member @_esoj1 (José Oliveira) has disclosed a previously unknown flaw in the Linux Kernel that allows the bypassing of Spectre-BTI mitigations. github.com/es0j/CVE-2023-…

0 4 11 504 0

Download Image

Esoj @_esoj1

3 years ago

It turns out that the user-mode spectre-BTI mitigations were slightly broken since four years ago when they were introduced in prctl syscall... github.com/es0j/CVE-2023-…

0 25 73 18K 6

Rodrigo Branco @bsdaemon

3 years ago

Apparently naming bugs really works on getting attention. So much that the name becomes the focus and folks fail to realize it is literally just a parody. Our industry is doomed.

3 3 33 5K 1

Rodrigo Branco @bsdaemon

3 years ago

Bugs properly reported, time to go drink and celebrate all the blessings of the year, pray for the dreams to keep coming true and for health to family and loved ones. And for peace in the world.

0 1 30 3K 0

caioluders @caioluders

3 years ago

XSS 2 RCE on @flipper_zero Got RCE through an XSS on lab.flipper.net , here's the writeup thread github.com/caioluders/poc… (PoC Video, printing 1337 on the flipper screen)