-
Tweets212
-
Followers734
-
Following631
-
Likes47
KASLD v0.3.0 released. Unprivileged Linux #KASLR derandomization tool that gathers leaks & side-channels and fuses them through a constraint solver into one sound answer for the kernel base — exact where a leak allows, smallest residual window otherwise. github.com/bcoles/kasld
💥 Introducing "Dirty Frag" A universal Linux LPE chaining two vulns in xfrm-ESP and RxRPC. A successor class to Dirty Pipe & Copy Fail. No race, no panic on failure, fully deterministic. ~9 years latent. Ubuntu / RHEL / Fedora / openSUSE / CentOS / AlmaLinux, and more. Even if you've applied the "Copy Fail" mitigation, your Linux is still vulnerable to "Dirty Frag". Apply the Dirty Frag mitigation. Details: dirtyfrag.io
@readwithai Correct. Blocked when kernel.yama.ptrace_scope >= 1
New tool: envex — extract and analyze environment variables from running Linux processes. Flags secrets and credentials across all processes using name heuristics, value pattern matching, and entropy analysis. No ptrace or special capabilities required. github.com/bcoles/envex
KASLD v0.1.0 released. New orchestrator runs and cross-correlates leak components to map kernel memory layout. Computes #KASLR slide, entropy bits, and renders virtual/physical memory maps. Now includes prefetch side-channel. github.com/bcoles/kasld
New tool: auth-log-scraper — search Linux auth logs for usernames that look like accidentally typed passwords. 100+ service-specific parsers (SSH, databases, web servers, monitoring, etc.), JSON/CSV output. Vibe coded, so YMMV. github.com/bcoles/auth-lo…
Qualys Threat Research Unit (TRU) discovered CrackArmor: 9 AppArmor flaws impacting 12M+ Linux systems since 2017. These enable root access & container breakouts. Patch your kernels now! Details: bit.ly/4s2c3O4 #Linux #Cybersecurity #CrackArmor"
A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets. A step-by-step guide to exploiting a 20-year-old bug in the Linux kernel to achieve full privilege escalation and container escape, plus a cool bug-hunting heuristic. open.substack.com/pub/calif/p/a-…
🎅mongobleed - poc for CVE-2025-14847. Leaks data from mongodb instances due to flaw in zlib message decompression. Reminiscent of heartbleed ❤️
If you're using #Hexstrike Server, be aware that it binds to all interfaces by default (which allows unauth remote command execution). github.com/0x4m4/hexstrik…
Local Privilege Escalation in Fedora Linux (CVE-2025-12744). Red Hat has made this public, but patches aren't out yet. Reliable root for any local user. Mitigation: sudo systemctl disable --now abrtd Writeup + PoC: initblog.com/2025/abrt-root/
Easily detects public rootkits like Singularity and Diamorphine. Not a novel approach. lsrootkit performs similar checks, but is abandoned (since 2018), doesn't compile, and requires root privileges.
I've released Rootkit Signal Hunter - a simple tool which detect rootkits which use signals to elevate process privileges. github.com/bcoles/rootkit…
Here is our 0day for kernelCTF🩸 - 82k bounty - quickest submission ever - all instances pwned😎 syst3mfailure.io/rbtree-family-… Disclaimer: We apologize for abusing the red black tree family. Turning grandparents against grandchildren is only acceptable in the context of pwn😤
Exploit write-ups for our 🚨latest 0-day🚨and the tragedy that swept the red black tree family dropping soon 👀 Here is a tiktok style video for those of you with no attention span thanks to slop and social media. Turn on the audio!!!
An introduction to Software Defined Radios. A thread for beginners on: 1. What a SDR is 2. What you can do with SDRs 3. How it plays a role in the security/hacking world 4. How it’s used in ham radio. 5. How to choose/buy one 6. Link to more reading material 0/21
Big new feature in kernel-hardening-checker: now it supports checking the Linux kernel security parameters for RISC-V ⚡️ (in addition to X86_64, ARM64, X86_32, and ARM). I've spent many weekends on this. Thanks to @_bcoles for the contribution ⭐️ github.com/a13xp0p0v/kern…
Too Subtle to Notice: Investigating Executable Stack Issues in Linux Systems huhong789.github.io/papers/ye:bada…
KernelSnitch: Side-Channel Attacks on Kernel Data Structures Paper by Lukas Maar et al. about using a timing side-channel for leaking addresses of exploitation-relevant kernel structures. lukasmaar.github.io/papers/ndss25-…
@nyxgeek On related note, did you know, that 7z (running as admin), can browse to "PhysicalDrive0" (so \\.\PhysicalDrive0\3.Basic data partition.ntfs\Windows\System32\config\) and copy file from there? SAM is not locked, AV/EDR don't seem to give a damn :)
🆕 Check out our latest publication on DMA attacks via SD cards! 💾 The article was written by our researcher Gesser. ➡️ swarm.ptsecurity.com/new-dog-old-tr…
Luke Stephens (hakluk... @hakluke
101K Followers 2K Following Dad x3, hacker (cybersecurity), marketing expert, serial entrepreneur. CEO of cybersecurity companies: Ironbark Cyber, HackerContent, TRIAGERS™.
Andreas Kling @awesomekling
63K Followers 2K Following building @ladybirdbrowser. recovering addict. husband of @katalinkult. uncle. gymnasium brother.
shubs @infosec_au
59K Followers 2K Following Co-founder, security researcher. Building an attack surface management platform, @assetnote
Andrey Konovalov @andreyknvl
8K Followers 874 Following Security engineer at https://t.co/027VXUlgOx. Focusing on the Linux kernel. Maintaining @linkersec. Trainings at https://t.co/D5MrxmYimS.
ϻг_ϻε @steventseeley
23K Followers 562 Following Artist disguised as a logician. Pwn2Own Winner. Spiritual Alchemy. An adept in the making.
brendan @bscarvell
2K Followers 622 Following Security researcher, penetration tester and co-founder of @signal11io PGP: 9F7D 181D 1F4A 51B2
Silvio Cesare @silviocesare
11K Followers 1K Following CTO of @infosectcbr. Co-founder of @bsidescbr. Still hacking.
Soroush Dalili @irsdl
20K Followers 946 Following Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker 🕸️https://t.co/YipuTcYnWc🥷 🍏A dad-joke maker🍐
wvu @wvuuuuuuuuuuuuu
6K Followers 1K Following Sentient one-liner grepping the Internet for signs of intelligence.
Pedro Ribeiro @pedrib1337
9K Followers 361 Following Reverse Engineer | Director @ https://t.co/KuU3tiG1Om | Exploit Chef @FlashbackPwn
Quentin Kaiser @qkaiser
2K Followers 895 Following Offensive (embedded) security @onekey_sec / @konkretesec founder / @ecoswtf initiator
Mehmet INCE @mdisec
34K Followers 2K Following Vuln. Researcher since 00s. cto & co-founder @PRODAFT. Muay Thai addict.
K_citizen @K_Citizyn
2 Followers 206 Following
Whale Solana @WSolana50635
119 Followers 7K Following NFT Collector|DM for promo | Community Building & Marketing 💫
OS Dev @OSdev_
5K Followers 930 Following Senior Engineer @Qualcomm - Performance Engineering | Windows kernel | C/C++ | ARM64 | CPU & Memory Microarchitectures | SoC's
secaggr @secaggr
127 Followers 4K Following
0 cru5h @0Cru5h48452
104 Followers 443 Following Android kernel vuln researcher @ Pangu Team Speaker @ Poc2024 / Offensivecon2025 Former ctfer @ Blue Water / Water Paddler / 0x401 / Vidar Team
mrragava @mrragava
250 Followers 7K Following
Dmytro Oleksiuk 💥 ... @d_olex
13K Followers 2K Following zero-fucks-given infosec research | contacts: https://t.co/PhHyQg3G1E
比个心 @vbigthing
51 Followers 4K Following
Phishing Radar @PointerRadar
146 Followers 3K Following Linux | Ethical Hacker | Security Enthusiast | Python | Bug Hunter | sushi lover | 🍣 👾 🤖 🇨🇴
Alex Kuleshov @0xAX
12K Followers 193 Following Software developer Elixir/Go/Rust. Open to work. Posting about things that I've met during reading source code of different systems: Author of linux-insides.
0x2A Security @0x2asec
46 Followers 1K Following Security: the answer to the ultimate question of life, the universe, and everything.
Gangetik Prophet🕊�... @0xojaxwi
77 Followers 2K Following Linux Kernel Pwner | Systems Security Researcher
test domain @User2Micro
703 Followers 5K Following
Awgervoo @Awgervoo698386
32 Followers 726 Following The strongest actions for a woman is to love herself, be herself, and shine amongst those who never believed she could.
ʞʞıdɐɔoɥƆ @Chocapikk_
4K Followers 316 Following Security Researcher & Exploit Developer @VulnCheckAI
Emma Harris @EmmaHarris84165
5 Followers 170 Following Recruiting webshell engineers to penetrate websites, with a monthly salary of up to $100,000. If interested, please contact https://t.co/3RT5arQKNA
︎ @0xocdsec
4K Followers 8K Following ︎🏴☠️ 🇪🇺 💚 🇺🇦 | computers & features | 💚 🏴☠️ party | memory enjoyer | 603,628 km² | https://t.co/F5dgX7AEoL
Eduardo Silva @0xnibbles
92 Followers 699 Following 'The keyboard is my piano' • Vulnerability Researcher at Bitsight
NULL @ok111
8 Followers 1K Following
쇼헤이쿤🐉≅ H... @qb_PWN
1 Followers 319 Following
Rodrigo Branco @bsdaemon
13K Followers 4K Following MTS at does it matter? Advisor of Grsecurity. BYOS Commitee Member of OffensiveCon, Langsec, DistrictCon, Secdev
` @flippaa
96 Followers 142 Following
9527 @Mr0x65
0 Followers 1K Following
Ameer Hamza @0xhamza
213 Followers 4K Following I have Diverse Interests: Interested in Global Politics Specific to Great Power Rivalry, Middle East, South Asia and OBOR. Interested in Information Security.
sam4k @sam4k1
3K Followers 591 Following head of vr @bynar_io 🌱 pwning kernels & blogging on os internals
SpaceFill @Sp4c3Fill
5 Followers 310 Following
Roland Hack @RolandHack6
971 Followers 3K Following 20yo😼|Junior Pentester|Bug Hunter|Discoverer of 2 CVEs
Jung-hwan Kang @ultractt
127 Followers 472 Following Cyber Security Researcher. Open Source Summit North America 2017/2018/2020/2021 Speaker, Blackhat Asia 2017 Speaker, Open Source Developer.
Kodi @Kodi1119579
33 Followers 2K Following
Fruajes @Fruajes27254
35 Followers 2K Following
kirovgrad @kirovstone
0 Followers 146 Following
Ray [REDACTED] @RayRedacted
60K Followers 8K Following Hacker, Researcher, Podcast Producer (Tribe of Hackers, Darknet Diaries). Proud dad of the fastest climber in the world. Ever. “Ut scandis, alios subleva”
Anderson Nascimento @andersonc0d3
4K Followers 7K Following Director & Security Researcher @alleleintel
RAMELLA Sébastien @Mekhalleh
439 Followers 339 Following Hunter/Journalist at https://t.co/FQgKIYTFi0 and official #Troll for @MattAudibert, @PoliceNationale, and others French institutes.
vx-underground @vxunderground
445K Followers 372 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
chompie @chompie1337
89K Followers 1K Following hacker, exploit developer/weird machine mechanic head of X-Force Offensive Research (XOR) @IBM
raptor @0xdea
14K Followers 17 Following When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.
Luke Stephens (hakluk... @hakluke
101K Followers 2K Following Dad x3, hacker (cybersecurity), marketing expert, serial entrepreneur. CEO of cybersecurity companies: Ironbark Cyber, HackerContent, TRIAGERS™.
Nicolas Krassas @Dinosn
159K Followers 783 Following Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKZLB Posting content that I find interesting.
LiveOverflow 🔴 @LiveOverflow
161K Followers 1K Following wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
Nate @nnwakelam
44K Followers 1K Following
Gareth Heyes \u2028 @garethheyes
39K Followers 1K Following Web security researcher at PortSwigger. Author of JS for Hackers and Hackvertor. https://t.co/e0aNEbEDk5
Andreas Kling @awesomekling
63K Followers 2K Following building @ladybirdbrowser. recovering addict. husband of @katalinkult. uncle. gymnasium brother.
Alex Plaskett @alexjplaskett
14K Followers 592 Following Security Researcher | Pwn2Own 2018, 2021, 2022, 2024 | Posts about 0day, OS, mobile and embedded security.
shubs @infosec_au
59K Followers 2K Following Co-founder, security researcher. Building an attack surface management platform, @assetnote
Andrey Konovalov @andreyknvl
8K Followers 874 Following Security engineer at https://t.co/027VXUlgOx. Focusing on the Linux kernel. Maintaining @linkersec. Trainings at https://t.co/D5MrxmYimS.
thaddeus e. grugq @thegrugq
128K Followers 422 Following Hacker :: researcher :: PhD candidate @warstudies @KingsCollegeLon :: [email protected] :: PGP https://t.co/dYipV8y3bo
ϻг_ϻε @steventseeley
23K Followers 562 Following Artist disguised as a logician. Pwn2Own Winner. Spiritual Alchemy. An adept in the making.
Louis Nyffenegger @snyff
21K Followers 612 Following Founder/CEO of @PentesterLab. Trainer, researcher, CVE archeologist. I like bugs, code review, and understanding why vulnerabilities exist.
0xor0ne @0xor0ne
93K Followers 508 Following Cybersecurity | Reverse Engineering | Vulnerability Research | Embedded & Silicon Security | My Tweets, My Opinions :)
Ben Sadeghipour @NahamSec
250K Followers 1K Following Cofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷
Simone Margaritelli @evilsocket
48K Followers 2K Following Music, cybersecurity, open source and AI • Author of bettercap, pwnagotchi, opensnitch, bleah, legba and a few other things. Chief Architect @ 🥷
Hai Tung @tacbliw
926 Followers 1K Following Security Researcher at @vcslab | CTF player (pwn) of @u0Kplusplus
Mehmet INCE @mdisec
34K Followers 2K Following Vuln. Researcher since 00s. cto & co-founder @PRODAFT. Muay Thai addict.
MattKC @itsmattkc
10K Followers 64 Following asian ryan reynolds, keanu reeves with a british accent, discount markiplier
starlabs @starlabs_sg
10K Followers 15 Following A Singapore company that discovers vulnerabilities to help customers mitigate the risks of cyber attacks. Organisers of @offbyoneconf
Jenny Qu @GuanniQu
2K Followers 1K Following
kylebot @ky1ebot
7K Followers 343 Following @OpenAI | CTF player @Shellphish | PhD @ASU | @angrdothorse dev | Author of how2heap, angrop | Vulnerability Research Hobbyist
Sajeeb Lohani (prodig... @sml555_
4K Followers 966 Following Group CISO @Kingside (Ex Tech CISO @Bugcrowd | Web Security Lecturer (Masters) @ Melbourne University) | Top 40 @Bugcrowd | #2 DVuln | Investor
Fabian Rauscher @v4m1n
113 Followers 176 Following Security Researcher | PhD Candidate with CoreSec at @tugraz
9MF @n1neMF
85 Followers 5K Following
OS Dev @OSdev_
5K Followers 930 Following Senior Engineer @Qualcomm - Performance Engineering | Windows kernel | C/C++ | ARM64 | CPU & Memory Microarchitectures | SoC's
Kylie McDevitt @kylieengineer
4K Followers 923 Following Founder & organiser of Au hackercon @BSidesCbr | Tech startup founder @infosectcbr | Network Engineering & Infosec Researcher
0 cru5h @0Cru5h48452
104 Followers 443 Following Android kernel vuln researcher @ Pangu Team Speaker @ Poc2024 / Offensivecon2025 Former ctfer @ Blue Water / Water Paddler / 0x401 / Vidar Team
Gabriel Prostitis @___prosti
332 Followers 151 Following CTF player for @TheRomanXpl0it, @towerofhanoi and @mhackeroni student at @polimi
leave @_leave07
170 Followers 84 Following i do linux kernel and x86 stuff for fun CTF player at @TheRomanXpl0it
Disconnect3d @disconnect3d_pl
4K Followers 717 Following Security Engineer at @trailofbits. Pwndbg maintainer, justCatTheFish CTF team captain. Opinions are my own =)
evildaemond @evildaemond
2K Followers 483 Following Electronics and hardware guy, will most likely break stuff | 🏳️🌈 bi | Sectalks Perth Organiser | Personal account
Mitchell Hashimoto @mitchellh
223K Followers 151 Following Co-founder of @Superlogical. Creator of Ghostty. 👻 Prev founded @HashiCorp, created Vagrant, Terraform, Vault, and others.
patate @patateQbool
708 Followers 306 Following
LukeGix @LukeGix
527 Followers 594 Following Computer science student @ Unimi. Professional n00b. He/Him
DebugPrivilege @DebugPrivilege
41K Followers 2K Following Not active anymore on X. Problem solver with a passion for troubleshooting complex issues.
Alex Kuleshov @0xAX
12K Followers 193 Following Software developer Elixir/Go/Rust. Open to work. Posting about things that I've met during reading source code of different systems: Author of linux-insides.
Gangetik Prophet🕊�... @0xojaxwi
77 Followers 2K Following Linux Kernel Pwner | Systems Security Researcher
.. @R00tkitSMM
10K Followers 895 Following
ʞʞıdɐɔoɥƆ @Chocapikk_
4K Followers 316 Following Security Researcher & Exploit Developer @VulnCheckAI
那个火饺🦆(JJ) @thatjiaozi
1K Followers 451 Following 🇲🇽🇨🇦. Cloud Vulnerability Research. Opinions are my own. Not those of my company.
Eduardo Silva @0xnibbles
92 Followers 699 Following 'The keyboard is my piano' • Vulnerability Researcher at Bitsight
︎ @0xocdsec
4K Followers 8K Following ︎🏴☠️ 🇪🇺 💚 🇺🇦 | computers & features | 💚 🏴☠️ party | memory enjoyer | 603,628 km² | https://t.co/F5dgX7AEoL
PinkDraconian @PinkDraconian
12K Followers 288 Following ▶️ YouTube: https://t.co/j2KvfZx6Un 💼 LinkedIn: https://t.co/1Ky1Jft7mj
spencer @techspence
17K Followers 3K Following 🛠️ Former Sysadmin, now Pentester | Microsoft MVP | Helping IT teams make their environment harder to attack | @SecurIT360 & @CyberThreatPOV
Rodrigo Branco @bsdaemon
13K Followers 4K Following MTS at does it matter? Advisor of Grsecurity. BYOS Commitee Member of OffensiveCon, Langsec, DistrictCon, Secdev
Roland Hack @RolandHack6
971 Followers 3K Following 20yo😼|Junior Pentester|Bug Hunter|Discoverer of 2 CVEsYou might like
