freeman @_2freeman

Learn and practice. Joined July 2016

Tweets

312
Followers

355
Following

312
Likes

279

thaidn @XorNinja

4 weeks ago

Attacks always get better. Here's a new nginx RCE that bypasses ASLR, tested on the latest nginx 1.30 and 1.31. This still requires a non-default config, but unlike some previous bugs, it does not depend on any additional vulnerabilities or external helpers to get to RCE. We reported the bug on May 15. F5 has confirmed it, and hopefully a patch will land soon. This is getting ridiculous 😅. We have enough nginx bugs to do an entire week of MAD Bugs on it. Who could have thought nginx is starting to feel like the new Linux kernel? This is the funniest time in computer hacking. And yet the world is completely unprepared for this new reality.

9 72 355 33K 173

View Details

International Cyber Digest @IntCyberDigest

a month ago

‼️🚨 Pwn2Own Berlin 2026 just hit a wall. For the first time in 19-years, ZDI rejected dozens of working zero-day RCE submissions because organizers ran out of contest slots. Rejected hackers are now going public with PoC demos and direct vendor disclosures, breaking Pwn2Own's usual secrecy. ▪️ AI surfaces a massive wave of 0-day RCEs. ▪️ Submissions overwhelm ZDI past max capacity. ▪️ Slots run out. Researchers with working chains get rejected. ▪️ "Revenge disclosures" begin. ← we are here. Confirmed casualties so far: ▪️ @xchglabs : 86 vulnerabilities prepared (PyTorch, NVIDIA, Linux KVM, Oracle, Docker, Ollama, Chroma, LiteLLM, llama.cpp). All rejected. Now reporting directly to vendors with writeups dropping as patches land. ▪️ @ggwhyp : full-chain Firefox RCE on Windows. Rejected. Publicly demoed (HTML page → cmd.exe → calc.exe). Responsibly disclosed to Mozilla. ▪️ @yunsu_dev : working RCE chain, rejected. Submitting elsewhere. ▪️ @ryotkak : tried to register for 3+ weeks. ZDI confirmed "at maximum capacity, can't add extra contest days." Considered canceling flight and hotel. ▪️ @anzuukino2802 : Claude Code RCE PoC. Rejected. ▪️ @desckimh : 0-day RCEs in Ollama and LM Studio. Rejected. Reported impact: a community-estimated 150+ researchers tried to register. Accepted contestants are now being warned about collisions. Rejected vulnerabilities going to bug bounty programs may trigger pre-event patches that invalidate the work of those who got in. ZDI has not publicly addressed the capacity issue. The event still runs May 14-16 in Berlin.

31 377 2K 414K 642

View Details

GG @oldfresher

3 months ago

I reported a file disclosure vuln in @openclaw. Any group chat member can steal API keys and conversation history. Silently fixed the next day. Never notified. Then denied as "not a vulnerability." A one-day fix shows urgency. Denying it shows disrespect. #infosec

10 20 117 58K 38

View Details

Linux Kernel Security @linkersec

11 months ago

Linux Kernel Hardening: Ten Years Deep Talk by @kees_cook about the relevance of various Linux kernel vulnerability classes and the mitigations that address them. Video: youtube.com/watch?v=c_NxzS… Slides: static.sched.com/hosted_files/l…

1 33 123 6K 76

View Details

xvonfers @xvonfers

12 months ago

USB提权之旅 vul.360.net/archives/745

0 3 19 2K 9

View Details

krupa @krupaad

a year ago

I decided to build a Transformer from Scratch...but on a GPU. No PyTorch or TensorFlow. Just CUDA, Python and Numba. Just finished building the full Encoder Block - here's a thread on my progress so far:

92 318 4K 327K 3K

View Details

freeman @_2freeman

a year ago

@The_Cyber_News Where is the released PoC?😅😅

0 0 0 50 0

View Details

Alex Matrosov @matrosov

3 years ago

This year, our team did a lot of important industry REsearch work. But this BMC research shows literally how poor product security practices are in critical data center infrastructure components. The bugs we found should not exist in 2023 in any environment.

BINARLY🔬 @binarly_io

3 years ago

🚨New REsearch: "Old But Gold: The Underestimated Potency of Decades-Old Attacks on BMC Security" ⛓️Our team demonstrates critical security risks affecting the BMC FW supply chain ecosystem that could lead to full remote control of the server system. binarly.io/posts/Old_But_…

0 34 44 17K 9

2 18 51 16K 7

View Details

Andrey Konovalov @andreyknvl

3 years ago

An RFC patch series by @tehjh and @_MatteoRizzo for mitigating cross-cache use-after-free attacks. The performance impact is still questionable, but functionality-wise, this would be an exciting change if merged 😃 lore.kernel.org/all/2023091510…

Eduardo Vela @sirdarckcat

3 years ago

lkml.org/lkml/2023/9/15…

1 15 36 17K 9

0 4 12 4K 5

View Details

Qyn @qynln

3 years ago

Here is the writeup for CVE-2023-3389, a Use-After-Free on an hrtimer in io_uring, which I exploited for the kCTF VRP qyn.app/posts/CVE-2023…

4 53 208 23K 55

View Details

Jordy Zomer @pwningsystems

3 years ago

Yay! My writeup on finding (half) Spectre-v1 gadgets in the Linux kernel using #CodeQL is finally live 😁😁 github.com/google/securit…

7 113 454 67K 125

View Details

Adam 'pi3' Zabrocki @Adam_pi3

3 years ago

RISC-V (@risc_v) Control Flow Integrity (CFI) is coming and I'm proud to be one of the contributors to this important security extension. Full spec is available here: github.com/riscv/riscv-cf…

1 29 109 15K 11

View Details

POC_Crew @POC_Crew

3 years ago

[Zer0con2023] Jun Luo(De4dcr0w) & Yanfeng Wang giving their talk on Busy2Nice : A New Way to Win the Race for Tiny Windows in the Linux #Zer0con2023

0 7 16 5K 1

View Details

Danny Lin @kdrag0n

4 years ago

Pixel 7 has KVM on by default, and I finally got a chance with play with it. Here's a Linux VM running *without root*

16 140 919 0 65

View Details

Andrey Konovalov @andreyknvl

4 years ago

If anyone who's around in Paris for @hexacon_fr wants to acquire a USB-Cereal adapter — hit me up. This adapter is a convenient replacement for the Android Debug Cable. Essentially splits the USB port into two: one with UART with kernel logs, the other is a pass-through for ADB.