pwnmonk @pwnmonk

Joined January 2011

Tweets

2K
Followers

256
Following

908
Likes

11K

chompie @chompie1337

2 weeks ago

I've been asked countless times how to learn VR & xdev. The answer is always: "do something you think is cool". It's hard to figure out what to do. Try the PhrackCTF which I've now open-sourced. It's not a contrived CTF - modeled after real vulnerabilities github.com/xforcered/Phra…

10 144 617 47K 382

Alex Plaskett @alexjplaskett

3 years ago

🔥 1/ In the last 6 months working on Linux kernel bug hunting/exploitation there has been a number of key resources which have been super useful (coming from a macOS/Windows background) to understand the state of things in 2022 🚀. Here's a short🧵 to recognise this + thoughts:

8 195 580 0 332

Download Image

payloadartist @payloadartist

3 years ago

If you are trying to understand heap exploitation, here's an awesome series by @Ch0pin 👇 I. valsamaras.medium.com/the-toddlers-i… II. valsamaras.medium.com/the-toddlers-i… III. valsamaras.medium.com/the-toddlers-i… IV. valsamaras.medium.com/use-after-free… #infosec #hacking #cybersecuritytips

2 46 156 18K 65

Download Image

pwnmonk @pwnmonk

a month ago

Xdev is sooooo f'kin hard and I'm nowhere close to Kernel Exploitation! #brainfart

0 0 0 18 0

pwnmonk @pwnmonk

2 months ago

Hello @hexacon_fr do you have student discounts?

0 0 0 36 0

xvonfers @xvonfers

8 months ago

pwncollege V8 Exploitation WP 上 loora1n.github.io/2024/11/27/%E3… pwncollege V8 Exploitation WP 中 loora1n.github.io/2024/12/02/%E3… pwncollege V8 Exploitation WP 下 loora1n.github.io/2024/12/24/%E3…

0 49 202 14K 166

seal @seal9055

2 years ago

@steven_rossi_ and I taught a course on Binary Exploitation and Vulnerability Analysis at UMass Amherst for the past 2 years. After this semester's offering we decided to open source all course material including lecture vods, slides, and projects. pwn.umasscybersec.org

9 101 271 35K 128

0xor0ne @0xor0ne

2 years ago

Heap exploit series by @Ch0pin infosecwriteups.com/the-toddlers-i… infosecwriteups.com/the-toddlers-i… infosecwriteups.com/the-toddlers-i… infosecwriteups.com/the-toddlers-i… infosecwriteups.com/the-toddlers-i… infosecwriteups.com/the-toddlers-i… infosecwriteups.com/the-toddlers-i… infosecwriteups.com/the-toddlers-i… infosecwriteups.com/the-toddlers-i… #infosec #heap

5 150 527 66K 318

Download Image

0xasen @asen_sec

2 years ago

Getting a lot of DMs about how to start in the Web3 security space I’ve seen a few threads about this and honestly, they are all good, but This is what I did personally:👇

15 72 229 30K 284

Anand Balaji @d4rk_kn1gh7_

3 years ago

Breaking JIT range assumptions in JSC: here's my writeup for b3typer from bi0sCTF 2022! blog.bi0s.in/2023/01/23/Pwn…

1 42 122 18K 29

Quentin M @0xdagger

3 years ago

@r3tr074 Here it is: github.com/meffre-q/B3Typ…

0 1 4 315 1

kylebot @ky1ebot

3 years ago

Pwned GKE under Google's #kctf program again!

6 25 364 47K 27

Download Image

Whole Mars Catalog @WholeMarsBlog

3 years ago

Now this is creepy. This AI model can detect the pose of people in the room based just on WiFi signals. No camera needed.

267 1K 7K 1.5M 993

Download Image

jeiwan @jeiwan7

3 years ago

From 0 to 38 audits 🕵🏻‍♂️ In July, I quit my web2 dev job. I spent August grinding past CTFs to prepare for @paradigm_ctf Then was the Paradigm CTF, and that was the biggest charge of motivation I had ever had. In September I did my first security audit, and here I'm now 👇

35 58 629 105K 253

Download Image

jeiwan @jeiwan7

3 years ago

@Shikamaru_119 @paradigm_ctf @Mudit__Gupta @cmichelio @code4rena @sherlockdefi This really helped me to understand what auditing is: youtu.be/LLiJK_VeAvQ

1 1 3 167 1

Andy Nguyen @theflow0

3 years ago

Late christmas present: github.com/TheOfficialFlo… WebKit+Kernel exploit chain for all PS Vita firmwares. This is a WIP from 3 years ago that I never finished (exploit is fully working, but hasn't been turned into a jailbreak yet).

35 221 1K 145K 72

h0mbre @h0mbre_

3 years ago

pretty good collection of exploitation-friendly linux kernel structs: blog.csdn.net/panhewu9919/ar… also recommend browsing the kCTF cook book: docs.google.com/document/d/1a9…

1 88 247 28K 109

Romain THOMAS @rh0main

3 years ago

The Christmas open-obfuscator challenge is live at this address: obfuscator.re/challenges/ Thank you to @vector35 @build38dotcom and @eshard for sponsoring the prizes of this challenge.