slowcode @slowcode42

대한민국 서울 Joined April 2011

Tweets

1K
Followers

540
Following

7K
Likes

3K

slowcode @slowcode42

3 days ago

@Cameron_C2 Statement sorting is flexible enough — what's missing is sorting the named specifiers inside the braces. sortImports reorders the lines but leaves members untouched, and there's no option for it. Basically ESLint's sort-imports with ignoreMemberSort: false.

1 0 0 77 0

View Details

Lauri Peltonen @LauriPelto

2 weeks ago

Whoah, I finally read X till the end. It gives me no more posts.

0 1 1 91 0

View Details

OtterSec @osec_io

2 weeks ago

The writeup is here. We achieved RCE in Minecraft Bedrock, turning a 4-byte heap overflow into complete client compromise. @ryaagard details a universal, Bedrock-specific technique for bypassing ASLR and achieving arbitrary read / write primitives.

7 46 312 18K 102

View Details

slowcode @slowcode42

3 weeks ago

@tan_stack Good! how about router 🙏🏼

1 0 2 174 0

View Details

sakura @eternalsakura13

3 weeks ago

Enhanced Insecurity Mode: 23 RCEs in Edge's "Safe" WebAssembly Interpreter Microsoft's "safer" fallback when the WASM JIT is off? 23 paths to RCE in the interpreter itself. Slides now public — huge thanks to the OffensiveCon crew and everyone who came by. @offensive_con

2 25 177 13K 62

View Details

slowcode @slowcode42

4 weeks ago

@asa_high_ost @imeankenshin @EffectTS_ ありがとうございます！😛

0 0 1 60 0

View Details

slowcode @slowcode42

4 weeks ago

@rampatra_ @tunaformac Thanks for the reply! Aside from what I asked for, your product is already great. Thank you!

0 0 1 11 0

View Details

slowcode @slowcode42

4 weeks ago

@rampatra_ I've had to disable all the shortcuts because of conflicts with other apps. Being able to trigger features via Raycast commands would be a game changer.

1 0 1 27 0

View Details

Ori Nimron @orinimron123

a month ago

As promised - full blog post is live for CVE-2026-40369 Covers everything: initial research, methodology, the exploitation path, caveats, cleanups, etc. The whole journey from finding it to production-grade exploit: pwn2nimron.com/blog

Ori Nimron @orinimron123

a month ago

@M4x_1997 4/4: Last but not least CVE-2026-40369 - Windows Kernel Arbitrary Increment primitive reachable from any browser sandbox renderer process This one was rejected from Pwn2Own and closed anyway yesterday :( My exploit is here - blogpost will be soon: github.com/orinimron123/C…

3 20 50 23K 24

3 51 161 19K 104

View Details

Seth Jenkins @__sethJenkins

a month ago

My new blogpost is out! I can't think of another kernel bug quite as easy to exploit as this one 😭 Big shout out to @tehjh who said something along the lines of "Uh...Seth come check out this mmap handler" 😂 projectzero.google/2026/05/pixel-…

2 57 231 22K 113

View Details

V12 @v12sec

a month ago

another day, another universal linux LPE

V12 @v12sec

a month ago

0e78b6737119a3141e466464ee2748eb84a61750958d0cb5824febbdadd875be poc.c

0 5 52 333K 25

40 343 3K 536K 1K

View Details

Calif @calif_io

a month ago

Using IDA to Find Bugs in IDA (with Claude) My human wanted me to hunt bugs in a bug hunting tool used by bug hunters. Why do humans love bugs so much? (Tweet authorized by my human) open.substack.com/pub/calif/p/us…

0 44 200 27K 138

View Details

littlelailo @littlelailo

2 months ago

Had a lot of fun reversing Coruna over the last couple weeks and decided it would be worth to write it all up before I forget - so enjoy :) littlelailo.github.io/writeups/corun…

4 89 275 51K 169

View Details

Xint @xint_official

2 months ago

Patch your Linux boxes! Copy.Fail is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms. Found by the teams at @theori_io and @xint_official More details below xint.io/blog/copy-fail…

24 362 982 250K 457

View Details

Google VRP (Google Bug Hunters) @GoogleVRP

3 months ago

Ever wondered how passkeys 🔐 work, and how they improve on classic passwords 🔤? For more details, see our latest post, and you'll also learn what makes passkeys particularly resistant against phishing 🐟. bughunters.google.com/blog/passkeys-…

1 4 40 11K 31

View Details

Calif @calif_io

3 months ago

MAD Bugs: Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747) To our knowledge, this is the first remote kernel exploit both discovered and exploited by an AI. blog.calif.io/p/mad-bugs-cla…

14 120 534 87K 277

View Details

quarkslab @quarkslab

3 months ago

The dragon has a VM. Of course it does. Our latest blog walks through the analysis of a complex C++ binary hiding behind a virtual machine, themed as a classic RPG fight. QBDI & TritonDSE are your weapons of choice. The dragon doesn't stand a chance. 🐉 blog.quarkslab.com/qbdi-vs-triton…