combab0 @combab0

대한민국 서울 Joined April 2011

Tweets

1K
Followers

588
Following

6K
Likes

2K

ptr-yudai @ptrYudai

2 weeks ago

Here's my writeup for kinc from BlackHat MEA 2025 Quals. It introduces Dirty Pageflags, a new exploitation technique inspired by Dirty Pagetable. Big thanks to Dronex for the great discussions! ptr-yudai.hatenablog.com/entry/2025/09/…

2 40 207 12K 84

Bruce Chen @bruce30262

a month ago

Made a pwn challenge for this year’s HITCON CTF, which required participants to bypass PAC, BTI, and deal with relative vtables. Here’s the write-up: bruce30262.github.io/hitcon-ctf-202… Check it out if you're interested🙂

0 41 182 12K 87

binaryboy @b1n4r1b01

a month ago

Brief info and POC for this week's Apple 0click iOS 18.6.1 RCE bug CVE-2025-43300 github.com/b1n4r1b01/n-da…

16 220 793 120K 406

Download Image

Google VRP (Google Bug Hunters) @GoogleVRP

2 months ago

Our latest post details how we exploited Retbleed (a CPU vulnerability) to compromise a machine from a sandboxed process and VM! Curious? 👇 bughunters.google.com/blog/624373010…

0 56 210 45K 101

David K 🎹 @DavidKPiano

2 months ago

I love nonsense diagrams

2 5 36 5K 3

Download Image

Ken Sykes @KensyAtMS

2 months ago

New WinDbg just dropped in the Microsoft Store! Faster downloads for large PDB files and console debuggers are part of the package! Note the architecture is part of the exe name. aka.ms/windbg.

0 21 79 7K 31

Download Image

Andrey Konovalov @andreyknvl

2 months ago

Documented instructions for setting up KGDB on Pixel 8. Including getting kernel log over UART via USB-Cereal, building/flashing custom kernel, breaking into KGDB via /proc/sysrq-trigger or by sending SysRq-G over serial, dealing with watchdogs, etc. xairy.io/articles/pixel…

5 143 475 33K 289

ö @r0keb

2 months ago

Good Morning! Just published a blog post diving into Windows Kernel LFH exploitation in the latest Windows 24h2 build, Focusing on controlled allocations to achieve arbitrary read/write in the kernel. r0keb.github.io/posts/Modern-(…

4 80 310 19K 156

Shriram Krishnamurthi (primary: Bluesky) @ShriramKMurthi

3 months ago

Well, here we go. After well over two years, here's a new version of my programming languages book, PLAI (v3.2.5). As always, free of cost! Can't thank enough all the people named in the acknowledgments. Enjoy! plai.org

14 95 456 34K 322

ö @r0keb

3 months ago

Good morning! Just published a blog post diving into Windows Kernel Pool internals: basics, memory allocation functions, internal structures, and how Segment Heap, LFH, and VS work. r0keb.github.io/posts/Windows-…

4 135 404 31K 232

Merit Systems @merit_systems

3 months ago

Today, we’re introducing the Terminal. Pay anyone and any project on Github.

112 227 2K 279K 1K

Download Video

Adevar Labs - Security Audits @AdevarLabs

3 months ago

Even a single floating-point op may break consensus. In our latest blog, @0xcneagu shows us why this is the case and how to model exponential functions safely with polynomial approximations via Taylor series: 👇 adevarlabs.com/blog/fee-model…

2 5 17 2K 5

Download Image

Dillon Franke @dillon_franke

3 months ago

I lightly mentioned CVE-2025-31235, a double-free I found in coreaudiod/CoreAudio, during my OffensiveCon presentation last month. It's been derestricted now, so enjoy my writeup which includes a PoC and dtrace script to help understand the vulnerability! project-zero.issues.chromium.org/issues/4062711…

3 43 200 14K 83

Pumpkin 🎃 @u1f383

3 months ago

A bit late, but I just published my blog post on bypassing Ubuntu’s sandbox! Hope you enjoy it! u1f383.github.io/linux/2025/06/…

5 114 392 37K 176

Winnona 💾 @__winn

3 months ago

🚨 NEW PAPER on the 0day Supply Chain 🚨: I gathered open source data & interviewed Gov employees, VR and China researchers to figure out what the zero day marketplace looks like in the U.S. and how it compares to China. Key findings below ⬇️ 0/🧵 atlanticcouncil.org/in-depth-resea…

1 70 177 27K 110

TigerBeetle @TigerBeetleDB

3 months ago

#systemsdistributed

0 3 21 910 1

Download Image

Biome @biomejs

3 months ago

Biome v2—codename: Biotype is here! The first type-aware linter that doesn't require tsc 🔐 Type-aware lint rules 🧑‍🚒 Plugins 📚 Monorepo support 📝 Revamped, configurable import sorting 🧐 Linter domains 🙅‍♀️ Bulk suppressions 👩‍✈️ Analyzer assist

38 210 1K 160K 284

Roman Storm 🇺🇸 🌪️ @rstormsf

4 months ago

😔💔 I’m Roman Storm. I poured my soul into Tornado Cash—software that’s non-custodial, trustless, permissionless, immutable, unstoppable. In 31 days, I face trial. The DOJ wants to bury DeFi, saying I should’ve controlled it, added KYC, never built it. SDNY is trying to crush…

252 1K 5K 474K 356

Ivan Fratric 💙💛 @ifsecure

4 months ago

This weekend, I gave a talk on web browser security research at a student-organized conference. I tried to make the talk reasonably beginner-friendly, so the slides (linked here) could hopefully be useful to someone as a learning resource. docs.google.com/presentation/d…

3 137 524 28K 365

h0mbre @h0mbre_

4 months ago

this is so insane. kCTF has a first-come-first-serve policy when it comes to 0day bounties when an instance releases. this team hand crafted a proof of work solver with avx-512 instructions to beat everyone else with an 0day to the flag: anemato.de/blog/kctf-vdf