Tobias Scharnowski @ScepticCtf
Ph.D. student. Working on advancing embedded systems software security. Joined April 2015-
Tweets127
-
Followers2K
-
Following393
-
Likes130
Tobias is SUUUUUUUPER skilled, if you are looking for a "one of a kind" course on fuzzing non-linux firmware fuzzing with things like unicornAFL, this is your guy 🔥
Tobias is SUUUUUUUPER skilled, if you are looking for a "one of a kind" course on fuzzing non-linux firmware fuzzing with things like unicornAFL, this is your guy 🔥
@nSinusR and @ScepticCtf know their stuff - if you're want to get into fuzzing firmware this is a great training to attend!
@nSinusR and @ScepticCtf know their stuff - if you're want to get into fuzzing firmware this is a great training to attend!
Our training on fuzzing custom firmware @typhooncon is coming up. This is a rare opportunity to learn about finding vulnerabilities in non-Linux firmware, which can be hard to get into. Get a chance to attend our training that was fully booked @hardwear_io typhooncon.com/blog/conitems/…
Experts @ScepticCtf and @nSinusR teach how to analyze, fuzz test, and exploit deeply embedded devices that use custom embedded operating systems. Join them in Vegas this summer at Ringzer0's DOUBLEDOWN24: buff.ly/4ayAXME
My Ph.D. thesis is now online theses.fr/2023SORUS546.p…
My Ph.D. thesis is now online theses.fr/2023SORUS546.p…
Interested in low-level hacking, embedded systems, and trusted execution environments? We currently have a PhD opening, feel free to reach out for more information! Application deadline: April 1st 2024.
📷We’re excited to announce the second training session for #TyphoonCon24: “Fuzzing & Attacking Deeply Embedded Devices” by Tobias Scharnowski (@ScepticCtf) & Marius Muench (@nSinusR). Learn more and register: eventbrite.com/e/typhooncon-2…
Considering our unfortunate rolls I think it went as smoothly as we could have hoped for. Some uniques at attempts 5+ and all successes first try. Thank you @thezdi for putting up the contest. I think this area is worth continued scrutiny. Hats off to @Synacktiv, great work!
Considering our unfortunate rolls I think it went as smoothly as we could have hoped for. Some uniques at attempts 5+ and all successes first try. Thank you @thezdi for putting up the contest. I think this area is worth continued scrutiny. Hats off to @Synacktiv, great work!
Thank you, blasty :-)
much respect to all the other contestants! In particular: @Synacktiv who was miles ahead of everyone as usual. and the two man team of fuzzware.io (@ScepticCtf & @diff_fusion) that pulled off an insane number of exploits.
Sadly, we had the inverse luck of the draw. >80% (5/6) of our attempts were rolled to the bottom 20% of entries (places 42+ of 52). I have not done the math on how unlucky it is, but maybe I don't really want to know. Anyways, good luck with the attempts to all participants! :-)
Sadly, we had the inverse luck of the draw. >80% (5/6) of our attempts were rolled to the bottom 20% of entries (places 42+ of 52). I have not done the math on how unlucky it is, but maybe I don't really want to know. Anyways, good luck with the attempts to all participants! :-)
Best of luck to our team members @ScepticCtf and @diff_fusion! They have a whopping 6 entries, let's make that six successes! 🏎️🔌⚡️👨💻
Best of luck to our team members @ScepticCtf and @diff_fusion! They have a whopping 6 entries, let's make that six successes! 🏎️🔌⚡️👨💻
PhD thesis submitted, defense in December, officially on the job market
🟢Update! We have added 1 additional seat at Fuzzing & Attacking Deeply #Embedded #Firmware & kindly note this is the ⚠️only seat available Know more about this training by Marius @nSinusR & Tobias @ScepticCtf ➡️bit.ly/43QOqeG #hw_ioNL2023 #hardwaresecurity #fuzzing
⚡Analyze, fuzz test & exploit deeply #embedded devices using custom-embedded operating systems Know more about this training by Marius @nSinusR & Tobias @ScepticCtf ➡️bit.ly/43QOqeG #hw_ioNL2023 #hardwaresecurity #fuzzing
This time I was on the other side of the Artifact Eval process. I find it important to make academic research (and their prototypes) applicable in practice. It is great to hear that @USENIXSecurity appreciated my efforts there :-)
This time I was on the other side of the Artifact Eval process. I find it important to make academic research (and their prototypes) applicable in practice. It is great to hear that @USENIXSecurity appreciated my efforts there :-)
Humbled and grateful that our paper Fuzztruction received a Distinguished Paper Award and was the runner up to the Internet Defense Prize @USENIXSecurity #usesec23 Find the paper at usenix.org/conference/use… Thanks @m_u00d8, @ScepticCtf, @74ck_0, @thorstenholz
I personally know that Tobias (@ScepticCtf ) has a lot of experience on embedded fuzzing and exploitation, in case you like the topic, don't miss the chance to learn from experts :-)
0xor0ne @0xor0ne
55K Followers 526 Following | CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | My Tweets, My Opinions :) |
LiveOverflow 🔴 @LiveOverflow
142K Followers 1K Following wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
Brendan Dolan-Gavitt @moyix
25K Followers 6K Following Associate Professor @ NYU Tandon. Security, RE, ML. PGP https://t.co/3WXr0RfRkv Founder of the MESS Lab: https://t.co/zGycrX3Gmn "an orc smiling into the camera" — CLIP
h0mbre @h0mbre_
12K Followers 577 Following tryhard at linux kernel && avatar is by Ching Yeh: https://t.co/oanjFPPhe7
Samuel Groß @5aelo
24K Followers 499 Following V8 Security technical lead. Previously Project Zero. Personal account. Also @[email protected] and https://t.co/aVitnPjBie
Matteo Rizzo @_MatteoRizzo
2K Followers 590 Following Security engineer at @google, CTF player for @0rganizers and @polygl0ts Personal account. Mastodon: @[email protected]
Real World CTF @RealWorldCTF
5K Followers 80 Following
ϻг_ϻε @steventseeley
21K Followers 519 Following Hermetic Initiate. Exploring conscience and the nature of reality. I also hack things. @[email protected]
kylebot @ky1ebot
5K Followers 315 Following CTF player @Shellphish | PhD Student @ASU | @angrdothorse dev | Author of how2heap | Vulnerability Research Hobbyist | @[email protected]
Andrea Fioraldi @andreafioraldi
3K Followers 583 Following Cyber Response Italian Supercazzola Technology Officer at @mhackeroni Inc. Writing your favourite fuzz testing tools with @aflplusplus. Security research at .
Marcel Böhme👨�.. @mboehme_
5K Followers 978 Following Software Security @maxplanckpress (#MPI_SP), PhD @NUSComputing, Dipl.-Inf. @TUDresden_de Research Group: https://t.co/BRnFNNgynB
crazyman_army @CrazymanArmy
6K Followers 3K Following CTFer / APT hunter / RedTeam / BlueTeam the member of @r3kapig the leader of @ShadowChasing1 CVE-2022-30190 find job opportunities opinions are own not group
Andy Nguyen @theflow0
56K Followers 434 Following The opinions stated here are my own, not those of my company.
Andrey Konovalov @andreyknvl
6K Followers 666 Following Security engineer at https://t.co/027VXUlgOx. Focusing on the Linux kernel. Maintaining @linkersec. Trainings at https://t.co/D5MrxmYimS.
stacksmashing @ghidraninja
47K Followers 430 Following Security researcher with a focus on hardware & firmware. I occasionally publish stuff on YouTube. Co-founder of @hextreeio. Contact: [email protected]
[email protected] @domenuk
4K Followers 503 Following 【ＤΞＣＯＭＰＩＬΞ ＮΣＶΞＲ】 Connectivity & Baseband Security @aflplusplus @enoflag @google (opinions my own)
Rodrigo Branco @bsdaemon
12K Followers 3K Following Just an opinionated security researcher. Opinions are my own H2HC (Hackers 2 Hackers Conference)
Pedro Ribeiro @pedrib1337
8K Followers 309 Following Reverse Engineer | Director @ https://t.co/KuU3tiG1Om | Exploit Chef @FlashbackPwn
The Shit That IRKS YO.. @3commas3
164 Followers 558 Following just talking to myself... get it ? #FUTURES & #FX #daytrader since 2006 🤡🇨🇦
twigx @twigxyz
0 Followers 2 Following
Abdul Hermzer @AHamza6153
21 Followers 757 Following Bug Hunter Ethical Hacker Cybersecurity Analyst Penestrated tester
Aryan_61jr @aryan_61jr
4 Followers 171 Following
hakkerska @hakkerska1
6 Followers 63 Following
pintokhaw @pintokhaw
1 Followers 26 Following
ilyass fatouh @ilyass07
50 Followers 350 Following
A3391gent @a3391gent
2 Followers 99 Following
SerGi0nx @SerGi0nx
12 Followers 208 Following
awavauatush @awavauatush
4 Followers 226 Following
Milad Bahari @Milad_Bahari
672 Followers 1K Following
Eqqie @Eqq111e
791 Followers 361 Following aka 赤道企鹅🐧 / Binary Security Researcher / Fuzzing Test / IoT, NFV Sec / Virtualization / UCAS / CTF pwner of L-team & El3ctronic & Never Stop Exploiting
user31fibcxw2 @user31fibcxw2
0 Followers 549 Following
Sajjad @Sajjadhgolpa
5 Followers 396 Following
CyberInfinite @CyberInfinite
239 Followers 300 Following Random dude on the internet. Not interested in AI. I like retro games.
lisa📊 @lisafxtrades
100 Followers 5K Following Mom | Trader | Mentor 🧑🏾💻📈☕️🌴📚📊Send me a dm for trading value and education🎯
insecuritea @insecur1tea
282 Followers 3K Following
9MF @n1neMF
132 Followers 3K Following
Adrian Herrera @0xadr1an
1K Followers 616 Following Security researcher with a penchant for functional programming. Building fuzzers @InterruptLabs. PhD @ANUComputing + @HexHiveEPFL.
Tyler @tylerthetiger11
1 Followers 91 Following
Cybergibbons 🚲🚲.. @cybergibbons
49K Followers 3K Following Head of hardware. IoT hacker. Alpha Male.
Deanne Monfils @DeanneMonf38322
73 Followers 5K Following
Mabel Polland @pollan_ma
71 Followers 5K Following
Kayck @kayck4x2
7 Followers 35 Following
Robert Alexander @SalvageBuyer
1K Followers 6K Following The God of the OT and the God of Creation Elohim of the Garden is Jesus & we need to listen for his words, laws, and voice in every day of our life.
Harry Tee Money @HarryT29750931
33 Followers 240 Following
Abdallah Waleed @Abdalla08402216
26 Followers 559 Following
BayArea @iHelpJailbreak
224 Followers 300 Following
Null0x0zero @Null0x0zero
212 Followers 1K Following #C #hacking #reverseEngineering #malwareAnalysis #binaryExploitation
Gertie 🤪 @Gertie3585
2 Followers 491 Following Sultry nуmрh with an insаtiаble hungеr fоr intimatе momеnts
SeTcbPrivilege @SeTcbPrivilege
11 Followers 45 Following
Dineshwar @DineshW98529785
39 Followers 226 Following
cheesyquesadilla @quesadilla_exe
511 Followers 3K Following CTF player and CS student. Still bad at computers.
CheolJun Park @cheoljun_p
116 Followers 139 Following Postdoc, Electrical Engineering, Cellular Security, KAIST SysSec Lab
LiveOverflow 🔴 @LiveOverflow
142K Followers 1K Following wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
Zero Day Initiative @thezdi
77K Followers 17 Following Trend Micro’s Zero Day Initiative (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Alex Plaskett @alexjplaskett
9K Followers 590 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Tweets about 0day, OS, mobile and embedded security.
Brendan Dolan-Gavitt @moyix
25K Followers 6K Following Associate Professor @ NYU Tandon. Security, RE, ML. PGP https://t.co/3WXr0RfRkv Founder of the MESS Lab: https://t.co/zGycrX3Gmn "an orc smiling into the camera" — CLIP
h0mbre @h0mbre_
12K Followers 577 Following tryhard at linux kernel && avatar is by Ching Yeh: https://t.co/oanjFPPhe7
Alisa Esage Шевч�.. @alisaesage
35K Followers 143 Following Independent hacker, solo winner Pwn2Own • Building my system of power knowledge @zerodaytraining
Saar Amar @AmarSaar
18K Followers 362 Following Reversing, exploits, {Windows, Hyper-V, *OS} internals, mitigations. Apple SEAR. Opinions are my own. @[email protected]
Samuel Groß @5aelo
24K Followers 499 Following V8 Security technical lead. Previously Project Zero. Personal account. Also @[email protected] and https://t.co/aVitnPjBie
Matteo Rizzo @_MatteoRizzo
2K Followers 590 Following Security engineer at @google, CTF player for @0rganizers and @polygl0ts Personal account. Mastodon: @[email protected]
Real World CTF @RealWorldCTF
5K Followers 80 Following
ϻг_ϻε @steventseeley
21K Followers 519 Following Hermetic Initiate. Exploring conscience and the nature of reality. I also hack things. @[email protected]
Ange @angealbertini
24K Followers 941 Following File Formats for ever! Corkami, CPS2Shock, PoC||GTFO, Sha1tered. Security engineer @ Google/Mandiant/Flare. He/him.
mdowd @mdowd
32K Followers 744 Following Internet Hacker. Founder of @vigilant_labs. Previously, co-founder of Azimuth Security (now L3Harris Trenchant)
kylebot @ky1ebot
5K Followers 315 Following CTF player @Shellphish | PhD Student @ASU | @angrdothorse dev | Author of how2heap | Vulnerability Research Hobbyist | @[email protected]
Brandon Falk @gamozolabs
21K Followers 283 Following I find and exploit 0day, develop OSes, hypervisors and emulators, design massively parallel data structures and code, and do precision machining! Optimization❤️
Andrea Fioraldi @andreafioraldi
3K Followers 583 Following Cyber Response Italian Supercazzola Technology Officer at @mhackeroni Inc. Writing your favourite fuzz testing tools with @aflplusplus. Security research at .
Gynvael Coldwind @gynvael
38K Followers 1K Following security researcher/programmer/director @ HexArcana Cybersecurity GmbH ⁂ @pagedout_zine ⁂ @DragonSectorCTF ⁂ https://t.co/ShG2c5As1K ⁂ ex-Google ⁂ he/him
CheolJun Park @cheoljun_p
116 Followers 139 Following Postdoc, Electrical Engineering, Cellular Security, KAIST SysSec Lab
Daan Keuper @daankeuper
616 Followers 176 Following Head of Security Research @computest/@sector7_nl
Khaled Nassar @notkmhn
332 Followers 433 Following langsec enthusiast | security research @ @computest @sector7_nl | ctf w/ https://t.co/MgD3AOoAwK | opinions are my own
Florian @floesen_
2K Followers 88 Following Passionate about reverse engineering and low level development. @the_secret_club
SinSinology @SinSinology
4K Followers 498 Following Pwn2Own 20{22,23,24}, i look for 0-Days but i find N-Days & i chase oranges 🍊
Thijs Alkemade @xnyhps
2K Followers 517 Following Security researcher @ @Computest @sector7_nl. Master of Pwn @ Pwn2Own 2021 & 2022. On Mastodon @ @[email protected].
Lukas Seidel @pr0me
758 Followers 399 Following Firmware Security • Embedded Systems • AI x Infosec • Researcher @binarly_io • PhD Candidate @TUBerlin • Capturing Flags for @ENOFLAG
Marcel @0ddc0de
140 Followers 243 Following PostDoc @HexhiveEPFL working on mobile security. CTF-Enthusiast @polygl0ts/@0rganizers. Former @shellphish and @fausecteam. Co-founder of @faustctf.
Philippe Teuwen @doegox
4K Followers 1K Following If you can't root it you don't own it. doegox infosec exchange
mxhdrm @_mxhdrm
50 Followers 447 Following ctf @Fluxfingers firmware padawan and byte digger https://t.co/nO9pfDNlpZ
Diego Zaffaroni @Xenomit_
121 Followers 372 Following Security Researcher @nozominetworks | CTF player @mHACKeroni and @towerofhanoi
Martin Thompson @martinjthompson
234 Followers 334 Following embedded cybersecurity, electronic design, FPGAs, software, Linux. Also plays Linnstrument and WX5
Robert Merget @ic0nz1
1K Followers 609 Following TLS nerd | Maintainer of TLS-Attacker | 🦝 RACCOON Attack | 🦙ALPACA Attack | Cyber Heist Consultant
Maxwell ꓘ Dulin (St.. @Dooflin5
1K Followers 876 Following God First | Web3 & Web2 Security Researcher (Hacker) at @asymmetric_re | Gonzaga U & Centralia HS Grad | Wiffleball with @ctownwiffle | Dodgeballer |
Kaijieguigui @kaijieguigui
245 Followers 56 Following Independent vulnerability research, mobile/desktop/server full-stack offensive weaponized, MSRC Top 100 & Chrome VRP Top 50 (2022)
Eviatar Gerzi @g3rzi
632 Followers 888 Following Security Researcher interested in reversing, malware analysis, CTFs, PrivEsc vulns, and DevOps security (docker and k8s) ;)
RBTree @RBTree_
1K Followers 425 Following Rev & Crypto | Work @theori_io @dreamhack_io | CTF @pb_ctf | HypwnLab | DEFCON CTF 2017-2024 Finalist
Andrey Konovalov @andreyknvl
6K Followers 666 Following Security engineer at https://t.co/027VXUlgOx. Focusing on the Linux kernel. Maintaining @linkersec. Trainings at https://t.co/D5MrxmYimS.
Tim Blazytko @mr_phrazer
4K Followers 244 Following Binary Security Researcher, Chief Scientist at https://t.co/XhN07utPLu and Trainer. @[email protected]
Michał Kowalczyk �.. @dsredford
3K Followers 146 Following reverse-engineering / low-level security @DragonSectorCTF vice-captain / Invisible Things Lab Mastodon: @[email protected] bsky: @mkow.bsky.social
Andreas Zeller @AndreasZeller
9K Followers 226 Following Software researcher at @CISPA. Testing, debugging, analyzing, and protecting software for a better world. Find me on Mastodon as @[email protected]
Grant H @Digital_Cold
2K Followers 2K Following Mobile security researcher. Previously @Qualcomm product security. @UF Ph.D, @UCF B.S. Opinions my own https://t.co/VKTGUksQFd Mastodon: @[email protected]
Efrén López @efren_lopezm
220 Followers 1K Following Computer Science Ph.D. student at Texas A&M University - Corpus Christi
Marcel Böhme👨�.. @mboehme_
5K Followers 978 Following Software Security @maxplanckpress (#MPI_SP), PhD @NUSComputing, Dipl.-Inf. @TUDresden_de Research Group: https://t.co/BRnFNNgynB
crazyman_army @CrazymanArmy
6K Followers 3K Following CTFer / APT hunter / RedTeam / BlueTeam the member of @r3kapig the leader of @ShadowChasing1 CVE-2022-30190 find job opportunities opinions are own not group
D_K @D_K_Dev
98 Followers 98 Following IT-Security Student, @allesctf Member, Co-Founder and Security Researcher @neodyme
Tom Dohrmann @13erbse
106 Followers 198 Following
Rolf Rolles @RolfRolles
14K Followers 353 Following Static reverse engineering, deobfuscation, program analysis and formal verification, training, mathematics, compilers, functional programming, etc.
Richard Johnson @richinseattle
16K Followers 3K Following Computer Security, Reverse Engineering, and Fuzzing; Training & Publications @ https://t.co/mloVP6rPB7; hacking the planet since 1995; Undercurrents BOFH
Gilbert Verdian @gverdian
50K Followers 5K Following CEO @quant_network. Security leader creating new technology and companies. Converging Cybersecurity & Blockchain. Ex-CISO/CIO/CTO from Gov & FS. #BuildtheFuture
Benjamin | p4ck3t0 @p4ck3t0
160 Followers 274 Following Kubernetes and Cloud Security Engineer at AVOLENS | CTF player @fluxfingers
Nico Schiller @74ck_0
592 Followers 199 Following PhD Student and Security Researcher @CISPA and @ruhrunibochum also on mastodon [email protected]
Fabio @degrigis
463 Followers 577 Following Computer Security PhD student@UCSB Seclab | Binary tamer | hacking@shellphish
Brian Gorenc @MaliciousInput
3K Followers 428 Following Leader of the Zero Day Initiative. Pwn2Own organizer and adjudicator. Trafficker of export-controlled intrusion software. Bug Hunter.
Barak Hadad @Barak_Hadad
85 Followers 253 Following
Doreen Riepel @doreenriepel
263 Followers 217 Following PostDoc @ucsd_cse • PhD from Ruhr University Bochum @CASA_EXC • Cryptography & Provable Security
Robert Chen @NotDeGhost
6K Followers 522 Following founder @osec_io | web/pwn with @redpwnctf + @dicegangctf | prev @dfsec_com
@domenuk should is too mild, this is a great course!
This should be good
Experts @ScepticCtf and @nSinusR teach how to analyze, fuzz test, and exploit deeply embedded devices that use custom embedded operating systems. Join them in Vegas this summer at Ringzer0's DOUBLEDOWN24: buff.ly/4ayAXME
very excited to announce that I've joined @binarly_io as a researcher! really looking forward to working on making firmware more secure
Very impressive work from @_manfp all 4 browsers exploited! That’s some significant effort fr
Three browsers down, one to go... time to get some sleep :)
@ghidraninja I can in fact confirm that I can barely pass as a human being
Blasty always goes the extra mile, with lexmark he wrote some crazy code from scratch to change the display, then he decided to write a universal decryptor, with sonos he went and drilled down to AMlogic core to defeat secure boot, with Canon he did this, always a blast 🔥
@Th3Zer0 @nullcon thanks. I pushed it just now (beware, bad code :)) github.com/blasty/canon/t…
A gentle introduction into fuzzing, it's intricacies, a deep dive into control, and so much more. One of the theses you actually want to read! Congratulations to @andreafioraldi for this amazing piece of work.
My Ph.D. thesis is now online theses.fr/2023SORUS546.p…
My Ph.D. thesis is now online theses.fr/2023SORUS546.p…
Today some people told me that I got a Ph.D. degree, finally many important doctors like Dr. Dre, Dr. Doom, Dr. Who, Dr. House and Dr. Jekyll are my peers.
Interested in low-level hacking, embedded systems, and trusted execution environments? We currently have a PhD opening, feel free to reach out for more information! Application deadline: April 1st 2024.
Too bad that only Germans will get this pun 🥲
We're announcing our second flagship "Hunting Zero-Days in Embedded Devices" training this year at @cybersaiyanIT, in Rome, 24-27th September!! 4 days of PWNING 💻 romhack.io/training/2024/… Contact us for limited offer discount codes, only 4 u, as our Valentine's gift ❤️❤️❤️
LibAFL maintainer and CISPA Ph.D. candidate @addisoncrump_vr presented at our internal Lunch and Learn session. buff.ly/3w8wmS6
This was a super cool event this year - amazing location, venue and fun list of novel targets. Feels like it will be hard to beat! Congrats to all the teams who participated and the @thezdi for the epic planning and slick execution!
Miss any of #Pwn2Own Automotive? Just looking for the highlights? Check out our wrap video where we cover the total amount awarded during the event and the most significant entries. And we have a little fun as well... youtu.be/uM384qFApic
@ScepticCtf @thezdi @Synacktiv Congratz! That's pretty impressive!
here's a little look behind the scenes. the Autel EV charger is remotely puppeteered through a RPi over SSH. The android phone was used to develop some BLE exploits because pybluez is hard/flaky (apparently). The camera-tiewrapped-to-a-selfiestick was used to stream the display.
Trends for United States
You might like
