Zisis (@_zisis) profile picture
Greece
Joined January 2016
Photo by Zisis (@_zisis)Photo by Zisis (@_zisis)Photo by Zisis (@_zisis)Photo by Zisis (@_zisis)Photo by Zisis (@_zisis)Photo by Zisis (@_zisis)Photo by Zisis (@_zisis)Photo by Zisis (@_zisis)Photo by Zisis (@_zisis)Photo by Zisis (@_zisis)
You can find the latest version of slides/whitepaper/videos from my talk about VMware exploitation presented at Bluehat and BlackhatEU at census-labs.com/news/2019/01…
2
88
163
Zisis retweeted
The coreutils Rust rewrite story is pretty funny. Coreutils are tools like rm, mv, mkdir, etc. Unlike binutils, this isn't a fertile ground for memory safety bugs. But, the rewrite was completed, and in the spirit of progress, Canonical decided to switch. 🡇
42
90
12
1,397
219,746
Zisis retweeted
Blog post: On the Coming Industrialisation of Exploit Generation with LLMs sean.heelan.io/2026/01/18/on… TL;DR: I ran an experiment with GPT-5.2 and Opus 4.5 based agents to generate exploits for a zeroday QuickJS bug. They're pretty good at it. Code: github.com/SeanHeelan/anamne…
29
232
34
1,101
233,858
I wrote my first and maybe only Substack post. This is a follow up to my Colwell post where I found a 2007 technical report by two Microsoft employees who interviewed folks from MS, AMD and Intel about the history of the transition, and I learned a lot! computerparkitecture.substac…
I was looking up some history behind the x86-64 transition, particularly around the Pentium 4 time frame, and I found out that Bob Colwell (Pentium Pro chief architect) has been posting on Quora. Pentium 4 had a version of x86-64 that was fused off.
9
40
3
217
30,548
"KernelGP: Racing Against the Android Kernel" by Chariton "huku" Karamitas
1
12
1,839
You can find the slides from my BHUSA2024 talk Bugs of Yore: A Bug Hunting Journey on VMware's Hypervisor at i.blackhat.com/BH-US-24/Pres…
3
26
1
82
9,925
Zisis retweeted
Congratulations to my @census_labs colleague Zisis Sialveras (@_zisis) for being accepted to present his amazing work on VMware vulnerability research and exploit development at Black Hat USA 2024: blackhat.com/us-24/briefings…
6
39
4,074
The xz backdoor was initially caught by a software engineer at Microsoft. He noticed 500ms lag and thought something was suspicious. This is the Silver Back Gorilla of nerds. The internet final boss.
142
2,487
507
18,524
4,574,072
A project my grad student is working on required us to review the implementation of the C++ standard library, and now I want to tear my eyes out.
16
36
1
1,234
235,138
αγνωσται αι βουλαι του gdb
7
317
How Fast is Your Computer?
62
404
93
3,341
516,829
The 8086 processor (1978) led to the hugely-popular x86 architecture. Internally, the 8086 uses microcode, running a tiny program for each machine instruction. I'm reverse-engineering the chip from die photos and I can explain exactly how the 8086 microcode engine works.🧵
53
811
55
4,960
oldie but goodie, heap overflow and null pointer dereference bugs in #radare2 (fixed in 5.6.0) by Angelos T. Kalaitzidis of @census_labs For more info: census-labs.com/news/2022/05… #CVE-2022-0419 #CVE-2021-44974 #CVE-2021-44975
9
1
14
once you go 120hz, you never come back
6
Sometimes I wonder if there's single human that keeps the "Show file name extensions" option disabled on Windows.
2
6
Zisis retweeted
Validating a bug is an emotional roller coaster ride
2
14
90
#VMWARE #ESXi OpenSLP heap-overflow CVE-2021-21974 walkthrough + poc straightblast.medium.com/my-… github.com/straightblast/My-…
2
102
3
240
Very hard to describe how embarrassing this is for everyone involved in the Web and, sort of, software more generally. nitter.gq/Suhail/st…
unavailable
57
258
29
1,512