Joined February 2021
- Tweets 690
- Following 23
- Followers 1,792
- Likes 11,631
Hey fuzzer folks! Want to learn how to use LibAFL ? Check this super exercices made by @addisoncrump_vr
github.com/addisoncrump/park…
New bug I've reported: CVE-2025-52194 - IRCAM File Processing Buffer Overflow in LibSndfile
Write-up: bushido-sec.com/index.php/20…
Introducing Havoc Professional: A Lethal Presence
We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth!
infinitycurve.org/blog/intro…
Joining @rektoff_xyz bootcamp about Solana Rust Security! Really thrilled and thankful to start this one :D
Releasing this fun tool Golem based on @0xdea, LLVM, LLM and @semgrep
Golem automates C/C++ vulnerability discovery by combining Semgrep rule scans, LLVM call-graph & CFG slicing, and AI-driven context analysis.
Tool: github.com/20urc3/golem
Article: bushido-sec.com/index.php/20…
Just launched Code Auditor CTF — auditor.codes
A web platform to practice finding real-world C/C++ vulnerabilities
• 8000+ challenges
• Progress tracking + leaderboard
• Beginner-friendly
• Fully open source (beta): github.com/20urc3/auditor.co…
Write-up of my v8 bug: Critical type confusion in V8's Turboshaft compiler allowed stale pointers to bypass GC, leading to exploitable memory corruption.
Full details + PoC: bushido-sec.com/index.php/20…
I wrote a comprehensive guide on harnessing libraries for effective fuzzing with AFL++ !
Have a look => github.com/20urc3/Publicatio…
🥳CVE-2024-53589: I discovered a heap buffer-overflow vulnerability in objdump affecting version 2.43, during a fuzzing campaign with
@aflplusplus
More details: bushido-sec.com/index.php/20…
Following 7zip 24.08 release, @thezdi disclosed yesterday my vulnerability in 7zip 24.07: CopyCoder Infinite Loop Denial-of-Service Vulnerability - CVE-2024-11612
I found this vulnerability last summer during a fuzzing campaign with @aflplusplus
bit.ly/4fZUnfz
My talk at lehack! Hacking satellites from SDR to RCE
🇫🇷 Hacking Satellites: From SDR to RCE - Salim LARGO - 2ourc3
piped.video/AhtTHXyMz9c
It was a fantastic experience giving a talk about automated vulnerability research for SANS today. Grateful for this opportunity, very happy to meet all the other fantastic speakers there.
Really proud! My vulnerability in Chrome v8 has been disclosed today! CVE-2024-6773 Type confusion in the v8 engine.
chromereleases.googleblog.co…
