combab0 @combab0

대한민국 서울 Joined April 2011

Tweets

1K
Followers

576
Following

6K
Likes

2K

Bruce Chen @bruce30262

2 weeks ago

Made a pwn challenge for this year’s HITCON CTF, which required participants to bypass PAC, BTI, and deal with relative vtables. Here’s the write-up: bruce30262.github.io/hitcon-ctf-202… Check it out if you're interested🙂

0 40 183 11K 86

binaryboy @b1n4r1b01

2 weeks ago

Brief info and POC for this week's Apple 0click iOS 18.6.1 RCE bug CVE-2025-43300 github.com/b1n4r1b01/n-da…

15 217 785 116K 400

Download Image

Google VRP (Google Bug Hunters) @GoogleVRP

4 weeks ago

Our latest post details how we exploited Retbleed (a CPU vulnerability) to compromise a machine from a sandboxed process and VM! Curious? 👇 bughunters.google.com/blog/624373010…

0 53 208 43K 101

David K 🎹 @DavidKPiano

a month ago

I love nonsense diagrams

2 5 36 4K 2

Download Image

Ken Sykes @KensyAtMS

a month ago

New WinDbg just dropped in the Microsoft Store! Faster downloads for large PDB files and console debuggers are part of the package! Note the architecture is part of the exe name. aka.ms/windbg.

0 20 79 7K 31

Download Image

Andrey Konovalov @andreyknvl

a month ago

Documented instructions for setting up KGDB on Pixel 8. Including getting kernel log over UART via USB-Cereal, building/flashing custom kernel, breaking into KGDB via /proc/sysrq-trigger or by sending SysRq-G over serial, dealing with watchdogs, etc. xairy.io/articles/pixel…

5 143 474 33K 289

ö @r0keb

a month ago

Good Morning! Just published a blog post diving into Windows Kernel LFH exploitation in the latest Windows 24h2 build, Focusing on controlled allocations to achieve arbitrary read/write in the kernel. r0keb.github.io/posts/Modern-(…

4 80 310 18K 157

Shriram Krishnamurthi (primary: Bluesky) @ShriramKMurthi

2 months ago

Well, here we go. After well over two years, here's a new version of my programming languages book, PLAI (v3.2.5). As always, free of cost! Can't thank enough all the people named in the acknowledgments. Enjoy! plai.org

14 95 454 34K 321

ö @r0keb

2 months ago

Good morning! Just published a blog post diving into Windows Kernel Pool internals: basics, memory allocation functions, internal structures, and how Segment Heap, LFH, and VS work. r0keb.github.io/posts/Windows-…

4 135 404 31K 234

Merit Systems @merit_systems

2 months ago

Today, we’re introducing the Terminal. Pay anyone and any project on Github.

110 223 2K 273K 1K

Download Video

Adevar Labs - Security Audits @AdevarLabs

2 months ago

Even a single floating-point op may break consensus. In our latest blog, @0xcneagu shows us why this is the case and how to model exponential functions safely with polynomial approximations via Taylor series: 👇 adevarlabs.com/blog/fee-model…

2 5 17 2K 5

Download Image

Dillon Franke @dillon_franke

2 months ago

I lightly mentioned CVE-2025-31235, a double-free I found in coreaudiod/CoreAudio, during my OffensiveCon presentation last month. It's been derestricted now, so enjoy my writeup which includes a PoC and dtrace script to help understand the vulnerability! project-zero.issues.chromium.org/issues/4062711…

3 43 200 14K 83

Pumpkin 🎃 @u1f383

2 months ago

A bit late, but I just published my blog post on bypassing Ubuntu’s sandbox! Hope you enjoy it! u1f383.github.io/linux/2025/06/…

5 114 393 37K 177

Winnona 💾 @__winn

2 months ago

🚨 NEW PAPER on the 0day Supply Chain 🚨: I gathered open source data & interviewed Gov employees, VR and China researchers to figure out what the zero day marketplace looks like in the U.S. and how it compares to China. Key findings below ⬇️ 0/🧵 atlanticcouncil.org/in-depth-resea…

1 69 175 26K 110

TigerBeetle @TigerBeetleDB

3 months ago

#systemsdistributed

0 3 21 909 1

Download Image

Biome @biomejs

3 months ago

Biome v2—codename: Biotype is here! The first type-aware linter that doesn't require tsc 🔐 Type-aware lint rules 🧑‍🚒 Plugins 📚 Monorepo support 📝 Revamped, configurable import sorting 🧐 Linter domains 🙅‍♀️ Bulk suppressions 👩‍✈️ Analyzer assist

38 210 1K 159K 284

Roman Storm 🇺🇸 🌪️ @rstormsf

3 months ago

😔💔 I’m Roman Storm. I poured my soul into Tornado Cash—software that’s non-custodial, trustless, permissionless, immutable, unstoppable. In 31 days, I face trial. The DOJ wants to bury DeFi, saying I should’ve controlled it, added KYC, never built it. SDNY is trying to crush…

252 1K 5K 472K 359

Ivan Fratric 💙💛 @ifsecure

3 months ago

This weekend, I gave a talk on web browser security research at a student-organized conference. I tried to make the talk reasonably beginner-friendly, so the slides (linked here) could hopefully be useful to someone as a learning resource. docs.google.com/presentation/d…

3 137 524 28K 364

h0mbre @h0mbre_

3 months ago

this is so insane. kCTF has a first-come-first-serve policy when it comes to 0day bounties when an instance releases. this team hand crafted a proof of work solver with avx-512 instructions to beat everyone else with an 0day to the flag: anemato.de/blog/kctf-vdf

2 52 238 14K 82

Ethereum @ethereum

4 months ago

Ethereum is for shipping. Here’s 21 things the global @ethereum ecosystem got done in the last few weeks: 1. The latest upgrade to Ethereum, Pectra, went live. Pectra introduced smart account wallet features to improve UX, increased capacity for Ethereum L2s by 2x, and…