New blog post is up! This one goes over 4 different exploits for CVE-2024-20017, using it as a case study to explore exploit strategies. We start with the simplest version and move all the way up to an exploit for a real-world target: the Netgear WAX206.

RT @FuzzingLabs: Want to get into hypervisor fuzzing? 👾 Today, we're kicking off a new KVM fuzzing series with our first blog post: an intr….

Join millions who have switched to Grok.

Always surprised by how fruitful doing relatively simple PoC stuff like writing fuzzers can be.

RT @chompie1337: I've been asked countless times how to learn VR & xdev. The answer is always: "do something you think is cool". It's hard….

RT @b1ack0wl: the article I wrote for @phrack is online!. thanks to @richinseattle for encouraging me to submit an article and to @netspook….

RT @TheMaineWonk: 🚨 JUST IN: Trump administration directly intervened at Israel’s request to release Israeli cybersecurity official Tom Ale….

unfortunately this vendor is taking a while to get to disclosure but a few of my bugs from earlier this year should be made public over the next 2 months! fresh blog posts coming (and I’m actually starting to write them early this time) :).

RT @vxunderground: This guy was arrested in Las Vegas as part of an undercover Child Sex Predator sting operation. He was in Las Vegas for….

RT @HackingLZ: Zero Cool day!

RT @aspiringpeasant: So. I’m a software engineer. I write code all day, and get paid to do it. This (below) is not how “coding errors”….

RT @b1ack0wl: security_ppl_programming.mp4

RT @vxunderground:

RT @AdHaque110: "an Israeli spy-chief met Microsoft’s CEO and built one of the world’s most invasive surveillance systems, collecting “a mi….

RT @countrycaravan: @ChrisCuomo Posting "but do you condemn Hamas" after my pants fall down and I slip on dog shit.

RT @badcop_: "we made it so you can talk to the computer like a person!". i don't think you understand why i got into computers in the firs….

RT @McGrewSecurity: Vulnerability research and exploit development belongs to the researcher and it’s good sometimes to exercise those righ….

RT @prem_thakker: Wow:.—We ask Senators how many Americans had been killed by Israeli violence. None know. One replies “I am pro-Israel”.—S….

RT @andreyknvl: Documented instructions for setting up KGDB on Pixel 8. Including getting kernel log over UART via USB-Cereal, building/fl….

RT @prem_thakker: NEW — 10 members of Congress are now calling it “genocide.”. Here is a list of the politicians, nations, human rights org….

RT @mehdirhasan: Remember when @AGHamilton29 & @shaunmmaguire & @BillAckman tried to get people to believe that this was all a fake story….

RT @prem_thakker: CLEARER IMAGE: Israeli soldiers have BOARDED the Handala aid flotilla. Cameras being shut down. The ship seeking to giv….