Security Researcher & Privacy Activist. π DM are welcome for any questions.
/dev/urandom
Joined September 2016
- Tweets2.5K
- Following484
- Followers2.6K
- Likes888
Pinned Tweet
"Webmin 0day remote code execution"
Tl;Dr: Lack of input validation in the reset password function allows RCE (CVE-2019-15107). Over 13 0000 vulnerable on Shodan.
PoC:
/password_reset.cgi
user=root&pam&expired&old=wrong | id
pentest.com.tr/exploits/DEFCβ¦
πππΎ retweeted
The @SolanaFndn just open-sourced Microscope, a free monitoring & alerting tool for Solana programs.
We've tested it out. Its skills map alerts to our STRIDE security framework so the responding team has context to start from during an incident.
github.com/solana-foundationβ¦
πππΎ retweeted
12 weeks into STRIDE, we're sharing a first look at the state of Solana security.
πππΎ retweeted
Mullvad exit IPs are surprisingly identifying
tmctmt.com/posts/mullvad-exiβ¦
πππΎ retweeted
Today we're launching Crucible, a coverage-guided fuzzing framework for Solana programs. Built for Anchor, with v2 support from day one.
Just one example of what Crucible can find: a years-old bug in Solana's stake program, surfaced in seconds β
πππΎ retweeted
With support from Solana Foundation, we're launching STRIDE, a comprehensive security program that sets clear standards for @solana ecosystem projects.
STRIDE will provide independent opsec evaluations with public findings for real transparency into protocol security posture.
πππΎ retweeted
We recently achieved guest-to-host escape by exploiting a QEMU 0day.
Weβll share details on a new technique leveraging the latest glibc allocator behavior and what we believe is a novel QEMU-specific heap spray/RIP-control primitive.
Writeup coming next week.
πππΎ retweeted
Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices.
projectzero.google/2026/01/pβ¦
Published a new writeup:
"HackTheBox - White Rabbit"
hg8.sh/posts/whiterabbit #hackthebox #ctf #writeup
πππΎ retweeted
I wrote up a little post about OPSEC and how to learn from other peopleβs failures.
buttondown.com/grugq/archiveβ¦
#OPSEC
πππΎ retweeted
βThe security of onchain programs on Solana is improving. But we are also seeing some movement in the other direction.β
- @_fel1x from @asymmetric_re
πππΎ retweeted
Our community CTF is now live at @SolanaConf π₯
Come by the Dev Cave on the mezzanine level, hosted by OtterSec, @anza_xyz, @asymmetric_re, @jump_firedancer, and @raikucom. β
Drop by to work, meet other builders, and grab some swag.
πππΎ retweeted
Asymmetric Research and @osec_io have established a shared leadership structure that aligns both teams while each continues to operate independently.
Full details below.
πππΎ retweeted
CVE-2025-23282 is going to debut tomorrow at @hexacon_fr in our talk "CUDA de GrΓ’ce" w/ @chompie1337, but you can try CVE-2025-23332 now!
Tweetable Python PoC:
```
import fcntl
fcntl.ioctl(open('/dev/nvidiactl'),218,0)
```
NVIDIA has released a security bulletin for NVIDIA GPU Display Drivers.
NVIDIA thanks Daniel Rhea, Sam Lovejoy, Valentina Palmiotti, Robin Bastide, JunDong Xie, Giovanni Di Santi, Andrea Di Dio, and Cristiano Giuffrida for reporting their findings.
nvidia.com/en-us/security/
πππΎ retweeted
We're looking for a full stack Go dev in any of the US timezones, if you're interested please DM me. Position is remote with good benefits. A background in security is preferable.
πππΎ retweeted
New post: @RelayProtocolβs contracts trusted Ed25519 verification without validating offsets, opening the door to forged allocator signatures and potential double-spends.
@_fel1x details the bug, the risks it posed to cross-chain liquidity, and how the issue was addressed.
πππΎ retweeted
Threat Contained: marginfi Flash Loan Vulnerability by @_fel1x
A new instruction broke the flash loan logic, creating a way to borrow without repaying and putting $160M at risk.
We explain the vulnerability, potential impact, and how it was fixed. Full post below β
Verifying myself: I am hg8 on Keybase.io. EKch8vJv9Y1TmJ_7OC6xVP_ASNvHltHQVNu4 / keybase.io/hg8/sigs/EKch8vJvβ¦
"The NPM account of the popular developer qix was compromised, leading to malicious versions being published for dozens of packages, including chalk, strip-ansi, and color-convert."
Recommended read. Interesting payload.
jdstaerk.substack.com/p/we-j⦠#SupplyChain
