Seth Jenkins
@__sethJenkins
Followers
2K
Following
73
Media
4
Statuses
126
Project Zero Security Researcher - Hang glider pilot - Jesus Follower @[email protected]
Sol
Joined January 2015
My blog post is now live alongside @amnesty 's joint release, providing remarkable insight into an ITW exploitation campaign!. Turns out that you can find out quite a bit with just some kernel stacktraces ;). From Amnesty:.
securitylab.amnesty.org
This is the Executive Summary of Amnesty International’s report on surveillance and the suppression of civil society in Serbia. Please click here for the full report in PDF format. You can read the...
2
41
100
Blazing-fast image creation – using just your voice. Try Grok Imagine.
263
501
3K
So did y'all know that in arm64 Linux kernel (including Android) there is a 1:1 linear mapping of physical memory at a static non-ASLR'd virtual address?. Given a physical address you can calculate the corresponding virtual address. Anyway, happy Friday.
4
50
230
RT @natashenka: While most vendors ship timely patches for vulnerabilities reported by Project Zero, they don’t always reach users. Today,….
0
42
0
RT @sundarpichai: New from our security teams: Our AI agent Big Sleep helped us detect and foil an imminent exploit. We believe this is a f….
0
884
0
RT @GoogleVRP: It is time to separate the vibe hackers 🤖 from the hackers with vibe 😎. Google CTF June 27-29. Age….
0
94
0
Just derestricted an issue in the Qualcomm fastrpc driver! All phones running SPL 2025-06-06 should be fixed.
Double-fetch of root_size in fastrpc_pack_root_sharedpage leads to buffer overflow
1
4
30
RT @linkersec: Android In-The-Wild: Unexpectedly Excavating a Kernel Exploit. Talk by @__sethjenkins about analyzing the traces of an In-Th….
0
36
0
RT @natashenka: The final part of @j00ru’s Windows Registry series is live! Contains all the hive memory corruption exploitation you’ve bee….
0
67
0
My OffensiveCon talk, Unexpectedly Excavating an ITW Exploit, is now available to watch!.
0
31
97
RT @offensive_con: "Android In-The-Wild: Unexpectedly Excavating a Kernel Exploit" by @__sethJenkins
0
10
0
RT @dillon_franke: Thrilled to announce my new Project Zero blog post is LIVE! 🎉 I detail my knowledge-driven fuzzing process to find sandb….
0
105
0
My upcoming conference attendance schedule:.Qualcomm Security Conference (speaker): May 7-9.Meta Bug Bounty Researcher Conference (attendee): May 13-14.OffensiveCon (speaker): May 16-17. Come find me at any of those places, but be warned, I will be extremely jetlagged 🤣.
0
0
9
I'm happy to announce that I'll be speaking at OffensiveCon 2025 on May 16th! See you there :).
0
4
33
CVE-2024-49848 is now fixed. 255 days after I reported it!. Sure it took well over 90 days, but on the OTHER hand it's an aesthetically pleasing number of days.
2
11
91
Derestricted this bug too. an LPE attack surface one remote bug away from being touchable. It's a pretty nice UAF actually.
0
6
52
RT @i41nbeer: My writeup of the 2023 NSO in-the-wild iOS zero-click BLASTDOOR webp exploit: Blasting Past Webp -.
0
234
0
Just derestricted a bug in the Qualcomm NPU used in Android chipsets. Glad to say that this issue is already fixed in the March 3rd Qualcomm bulletin, although it's not in the Android security bulletin yet.
2
19
57
RT @AmnestyTech: 🚨BREAKING: @Amnesty has detected a new case of misuse of Cellebrite against a youth activist in Serbia. Just two months….
securitylab.amnesty.org
Amnesty International’s Security Lab uncovers sophisticated Cellebrite zero-day exploit, impacting billions of Android devices.
0
22
0
RT @ifsecure: I tweeted before about the Apple CoreAudio issues found by Google TAG. Well, the fuzz harness used to find these issues is no….
0
40
0