mit @mit0sys

Joined September 2009

Tweets

224
Followers

71
Following

266
Likes

413

OtterSec @osec_io

2 weeks ago

The writeup is here. We achieved RCE in Minecraft Bedrock, turning a 4-byte heap overflow into complete client compromise. @ryaagard details a universal, Bedrock-specific technique for bypassing ASLR and achieving arbitrary read / write primitives.

7 47 313 18K 101

View Details

OtterSec @osec_io

2 weeks ago

osec.io/blog/2026-06-0…

1 9 29 2K 14

View Details

mit @mit0sys

2 weeks ago

@samellie_ do share what you receive

0 0 1 16 0

View Details

mit @mit0sys

3 weeks ago

@7N7 like 2-3w, according to reddit they filter on keywords common on torrents. I've had good luck with Torbox since

1 0 1 224 0

View Details

mit @mit0sys

3 months ago

@Melodyy_ow frames are pretty horrible, but i noticed spotify web player dropping my fps like 30-40 while open might be helpful if this applies to you

1 0 13 3K 1

View Details

mit @mit0sys

3 months ago

@samellie_ Where

0 0 3 77 0

View Details

𝗮𝗰𝗶𝗱𝘃𝗲𝗴𝗮𝘀 @acidvegas

3 months ago

Made my first blog post acid.vegas/blog/the-myste… 46 million DNS ANY queries for a Danish man's personal domain, from DoD address space, residential ISPs, and cloud providers across 12 countries. A two-year mystery nobody can explain. More coming soon.

1 2 17 2K 13

View Details

mit @mit0sys

5 months ago

@nylangelic bad

0 0 0 71 0

View Details

arete @aretekzs

7 months ago

Just learned a very interesting trick from @0xacb’s challenge at the @Bsideslisbon CTF. If an application uses "magick convert" to modify an uploaded image, it may be possible to achieve LFI by using "text:" One of the file formats supported by ImageMagick is "text",

6 60 351 38K 268

View Details

mit @mit0sys

11 months ago

@rowmelett @snaz_adv WOW WOW WOW

1 0 1 103 0

View Details

mit @mit0sys

11 months ago

@thoughtfault impenetrable.

0 0 1 182 0

View Details

mit @mit0sys

11 months ago

@snaz_adv false

0 0 1 56 0

View Details

Maya !! @snaz_adv

11 months ago

snaz is a genius.

2 1 6 529 0

View Details

mit @mit0sys

a year ago

@snaz_adv Irish.

0 0 1 34 0

View Details

mit @mit0sys

a year ago

@GoatedWomanizer I did this with my morning instant coffee today and had to restart.

1 0 1 79 0

View Details

Graham Helton (too much for zblock) @GrahamHelton3

a year ago

I come with receipts

37 199 3K 111K 217

View Details

slonser @slonser_

a year ago

I think many people are familiar with the topic of blind CSS exfiltration, especially after the post by @garethheyes However, an important update has occurred since then, which I wrote below ->