Pew, just came back to work from the long journey.
Thanks everyone for making another great success on #Zer0Con2024 ! Wish you all safe travel back home and most importantly take a good rest!
We will be around at the offensivecon, if you are there, let's grab a drink 🙌

Here's my blog post about CVE-2024-26230. I aim not only to introduce the exploit stage but also hope to share my thoughts on how I completed the exploitation step-by-step in all my posts from now on.

whereisk0shl.top/post/a-trick-t…

We posted our third writeup of N-day full chain series:

Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System medium.com/theori-blog/ch…

'The boom, the bust, the adjust and the unknown'

The industry around us changes at a faster pace than ever before.

This will force the different stakeholders to reevaluate their strategy and how they will decide to move forward.
#Zer0Con2024

slideshare.net/slideshow/zer0…

One of my favourite 'bugs' was in fallout 2 where you had two kids that would pickpocket you in The Den as you entered a store but in non-us versions they were ... invisible ... because of ... censorship. Those kids robbed me blind the first time round. They weren't laughing…

the xz sshd backdoor rabbithole goes quite a bit deeper. I was just able to trigger some harder to reach functionality of the backdoor. there's still more to explore.. 1/n

All good things must come to an end eventually, it was great to meet my irregular hacker family at zer0con and meet many new friends. POC_Crew 👨‍👩‍👦‍👦 did an awesome job as always to strengthen the Power Of Community 정말 고마워요 🙇‍♂️🙇‍♂️😎

[ #Zer0con2024 ]

Arsenii Kostromin
'The Userland Maze — Revealing macOS's Logic Bugs and Security Bypasses'

[ #Zer0Con2024 ]

Another 0day to be revealed...?
Yes, stay tuned😆

sakura & Kiprey
'Attacking Chrome from Runtime to JIT Once Again'

I spent the last 5 months reverse engineering Denuvo's protection in Hogwarts Legacy and finally managed to bypass it using more than 2000 hooks 😂

One of the toughest challenges of my life.

Here's my blog post about it:

momo5502.com/posts/2024-03-…

[ #Zer0Con2024 ]

Day2 kicks off with

Maor Shwartz
'The Boom, the bust, the adjust and the unknown'

We've just launched our updated public bug bounty program with extended targets and juicier payouts!
Calling all vulnerability researchers, it's your chance to dive in and be paid for your skills! 💰💰💰crowdfense.com/exploit-acquis…

Jia Tan found a way to get paid to work on open source. Why can't you

The POC_Crew 👨‍👩‍👦‍👦 is always super warm and welcoming ♥️🙇‍♂️, the Power Of Community is why I am back in Korea for the third time now! I want to give special thanks to Ian Lee for this sweater he gave me as a birthday gift 🥹🥹🎂🎊

#Zer0Con2024

First 0day dropped 🤣
G. Geshev, patate

Guess what device it is

Theori's N-Day Full Chain Exploits Series: Part 2

How did we escape the chrome sandbox?

Want to dive deep into the first Windows kernel in-the-wild vulnerability(CVE-2023–21674) discovered in 2023?
Check it out now.

#Theori #티오리 #windows #sandbox

blog.theori.io/chaining-n-day…