blasty (@bl4sty) header
blasty (@bl4sty) profile picture

blasty

@bl4sty

irresponsible disclosure aficionado

 The Netherlands
haxx.in/
Joined April 2009
  • Tweets4.8K
  • Following1.2K
  • Followers18K
My god with the ego. It takes serious nerve to put your personal byline on an entire OS when five 9s of the heavy lifting was done by upstream Linux and Arch maintainers. Even Linus didn’t put his initials on the cover like this. I was gonna try @omarchy, saw this, and immediately said no thanks, I’m not joining your cult.
Image from Iman Rahmati (@imanrahmati)
181
27
17
736
73,943
tgt v1.0.98 has been released! write prim (e3b418a), leak prim (a3f4a25) and CHAP base64 overflow (094ade2) silently fixed. no CVE, no advisory, no attribution to this (public) report ;^(
blasty (@bl4sty) profile pictureblasty
@bl4styOct 28
🚨 ATTENTION PLEASE! ATTENTION PLEASE! 🚨 🚨 SL0P.FOO HIGH COUNCIL ANNOUNCEMENT: Linux iSCSI tgt RCE 0day 🚨 warez.sl0p.foo/tgt-iscsi-rce… REMOVE YOUR NETWORKED BLOCK DEVICEZ FROM THE INTERNET BEFORE IT'S 2L8!@#
Image from blasty (@bl4sty)
7
1,151
walking thru firewalls like IDSPISPOPD
Ikotas Labs, Inc. (@ikotas00) profile pictureIkotas Labs, Inc.@ikotas00Nov 9
We discovered a new variant of BunkerBuster that targets IPv4. It also allows remote attackers to bypass firewall restrictions and establish bidirectional communication. Codename: BunkerBuster2💥 #BunkerBuster
3
3
22
2,621
🚨 I lobotomized Qwen3.5-4B 🚨 it now speaks somewhat fluent l33t. it still won't hack the planet. :^( it just says it c4n't h4ck th3 pl4nt!@# neuron patch + PoC: warez.sl0p.foo/l33t-patch/
3
4
1
39
3,183
in accordance with our Responsible Attribution Policy, the vendor was not contacted (the vendor is a 9.3 GB safetensors file)
1
417
boi followed up with this one just now smh
Image from blasty (@bl4sty)
blasty (@bl4sty) profile pictureblasty
@bl4styOct 29
my bro from dprk sent me this on snapchat
Image from blasty (@bl4sty)
1
1
12
1,313
if anyone needs a keygen for RedStar OS I should still have a python script in /data/backup/2012/something/something
1
574
someone with a typo-squatted @VitalikButerin ENS pulls up on the chain to school lazarus about laundering 😂😂 etherscan.io/tx/0x551d70453f…
Image from blasty (@bl4sty)
1
6
1,338
I'm lowkey interested in the psychology of the operators behind lazarus/tradertraitor. do they still get ANY dopamine hit at all when they move billions of dollars around? you reckon any of them squirrel some loot away from daddy kim? vim or emacs? that sorta shi
8
2
85
10,275
my bro from dprk sent me this on snapchat
Image from blasty (@bl4sty)
1
5
2
19
2,726
How to get current Mythos Linux kernel 0day: lore.kernel.org/all/?q=%22Fi…
1
11
119
12,243
watching terminator 2 with the kid. shit’s aged well. 2029AD is right around the corner! 🤖
12
1,094
btw now would be a good time to build the new hackcoza/milw0rm/exploit-db that doesn't suck and is correctly maintained/curated. throw a shitton of clank and compute at it for e2e verification of all hax. community notes/dispute system for QA etc. etc.
2
6
28
1,958
there's a ridiculous amount of synthesized exploits floating around right now, in various states of legitimacy/decay. you might not like that they were vibe-coded or whatever but you cannot argue with a (potential) shell they pop
2
5
797
additionally, people might be posting PoCs that actually are variants or entirely different bugs that are incorrectly labeled because they did "maek my own php2shell exp pls" and got a lucky virtual dice roll
1
4
592
🚨 ATTENTION PLEASE! ATTENTION PLEASE! 🚨 🚨 SL0P.FOO HIGH COUNCIL ANNOUNCEMENT: Linux iSCSI tgt RCE 0day 🚨 warez.sl0p.foo/tgt-iscsi-rce… REMOVE YOUR NETWORKED BLOCK DEVICEZ FROM THE INTERNET BEFORE IT'S 2L8!@#
Image from blasty (@bl4sty)
3
14
3
52
6,965
the heap feng shui is not so ez-clap depending on compiler flags used. I did leave in some infra for easily adding support for other libc's and tgt binaries. but you will need better grooming strats for some targs. a good one to practice your vulture-clanking on I'd say!
3
775
even daddy musk agrees
Elon Musk (@elonmusk) profile pictureElon Musk
@elonmuskOct 26
Everyday is zero-day these days
1
8
1,283
love this, patching up neurons to introduce what some would perceive as misalignment. we can have a horny qwen who is happy to assist with building floor plans and a shoppinglist for your next methlab
lyra (@_lyraaaa_) profile picturelyra
@_lyraaaa_Oct 24
if you have a qwen3.5 4b around, please try steering neurons L14 N8949 +1 and L13 N7956 -1 now you have evil qwen recipe: dose × median(‖resid‖ leaving layer L, tokens 1:) / ‖W_down[:, n]‖` at the down_proj at every input
1
15
2,309
INTRODUCING: "Wake & Break" - a PSP Exploit for @AMD navi31 cards. Ever wanted to fuck around with firmware components running on your @AMD GPU that @AMD believes you have no business messing around with? Me neither! But the @tinygrad people might have! github.com/blasty/wake-and-b…
Image from blasty (@bl4sty)
5
15
1
69
8,679
this thing has been in the works for quite a while now and I was ready to give up MANY times. some coconut oil and perseverance and help from an anonymous contributor (🙌) later here we are; we got the Platform Security Processor really fucking high and neutered the sigchecks! ;]
2
4
1,095
sorry, I meant @__tinygrad__ of course, damn X handles
733
Load more