elfe retweeted
Writeup github.com/UnsignedChad/CVE-…
elfe retweeted
HyperLoader now in GitHub!
Hypervisor isolated shellcode execution environment. Maps host process memory into a guest vCPU, intercepts DLL execute faults, and proxies API calls to the host, Stardust PIC shellcode compatible
github.com/S12cybersecurity/…
elfe retweeted
逆向工程也迈进了 AI Agent 时代。
x64dbg 的名头不少人都听过，是 Windows 平台上经典的开源调试与逆向工具。
如今有人为它打造了 x64dbg MCP Server，能把调试能力直接向 Claude Code、Codex 这类 Agent 敞开，让 AI 调用 x64dbg 帮忙分析程序、下断点、读内存，并执行各项调试操作。
从前得自己对着汇编一点点硬啃，现在连逆向都开始 Agent 化了。
x64dbg：x64dbg.com
GitHub：github.com/duty1g/x64dbg-mcp…
elfe retweeted
CVE-2023-21768: Windows WinSock Ancillary Function Driver Privilege Escalation Vulnerability
PoC: github.com/chompie1337/Windo…
elfe retweeted
Introducing CVE-2026-106378: Chrome GPU Sandbox Escape to full Remote Command Execution using synthetic keyboard injection
By combining it with common GPU bugs, it becomes a full chain. Binance DevOps was most likely pwnd with a zeroday chain affecting the browser 😬
elfe retweeted
Windows User Mode Exploit Development memN0ps Series:-
Basics Pt 1: memn0ps.github.io/windows-us…
SEH Part 2: memn0ps.github.io/windows-us…
Egg Hunter Pt 3: memn0ps.github.io/windows-us…
DEP Part 4: memn0ps.github.io/windows-us…
elfe retweeted
Bonus: I've also flipped the chain and popped MS Edge from calc.exe 😆
youtube.com/watch?v=Bh1zglq4…
elfe retweeted
0-Day Exploit for Windows OS for Sale
Read on dbugs: dbu.gs/news/0-day-exploit-fo…
Vulnerability Type: LPE
Affected Versions:
• Windows 11 24H2 (26100.9550+)
• Windows 11 25H2 (26200.9550+)
• Windows 11 26H1 (28000.3086+)
• Windows 11 26H2 (26300.9550+)
Price: $30K
elfe retweeted
Since some people assumed this is a 0day in V8, Im gonna clarify that it isnt one.
Deepseek chained known vulns into a working exploit. Thats it :)
elfe retweeted
I can exploit this with full weaponization.
@LogitechG hi! 👋
Now this turns into a LPE on a fully patched fresh Windows installation. @LogitechG love ya
(I swear I’m not cheating the UAC bypass look at my hand😭)
#zeroday #CyberSecurity #infosec
elfe retweeted
Proof of Concept for CVE-2026-21509 vulnerability, bypassing Windows Defender
PoC: github.com/gavz/CVE-2026-215…
elfe retweeted
A PoC/exploit has been discovered for vulnerability CVE-2026-98260
PT ID: PT-2026-106589
Read on dbugs: dbu.gs/vulnerability/PT-2026…
Vendor: Linux
Product: Linux kernel
Description: A use-after-free issue exists in the Linux kernel during the execution of execve(). When a non-leader thread performs an exec(), the de thread() function changes the task that owns the Process ID (PID). If subsequent operations such as unshare files(), set mm exe file(), exec mmap(), or exec task namespaces() fail, the task may enter do exit() before the POSIX timers are cleaned up. This leads to a scenario where exit itimers() frees the k itimer while its node remains queued. When the task is later reaped, cleanup timerqueue() calls timerqueue del() on the already freed node, resulting in a use-after-free condition.
Link: github.com/V4bel/InfinityCor…
elfe retweeted
CVE-2026-81376: VS Code RCE via Security Feature Bypass; $4,000 bounty.
Write-up: samchen.blog/blog/vscode-nes…
elfe retweeted
Ai just found a full Chrome exploit chain that affected a billion users.
- It took 6 days and $40k.
- Google paid us $250k for it.
Three different bugs.
All of them involved mutating something the browser assumed was immutable.
Found by : xbow.com/labs/research/zero-…
elfe retweeted
NTLM Reflection Attack
🔥 Telegram: t.me/hackinarticles
✴ Twitter: xitter.twitterapi.xyz/hackinarticles
NTLM Reflection is a technique where attackers trick a system into authenticating against itself, allowing privilege escalation without knowing user credentials.
⚡ Attack Highlights
🎯 Coerce victim machine to authenticate
🔄 Reflect NTLM challenge back to same system
🎟 Reuse authentication response
🔐 Gain authenticated session as victim
🚀 Escalate privileges to SYSTEM
💡 Reflection attacks exploit flaws in challenge-response authentication, where a system unknowingly validates its own authentication request.
📖 Article: hackingarticles.in/ntlm-refl…
#CyberSecurity #ActiveDirectory #NTLM #RedTeam #Pentesting #PrivilegeEscalation #InfoSec
elfe retweeted
‼️ Google Awarded $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6
Details: cybersecuritynews.com/google…
Security researchers earned a $250,000 reward from Google after building a full-chain Chrome exploit with AI agents. The XBOW team says the work took six days and about $40,000 in computing costs, using OpenAI’s publicly available GPT-5.6 Sol model.
Google has fixed the flaws. Its chain linked three bugs to move from JavaScript in a Chrome tab to code execution outside the browser’s renderer sandbox.
The company estimated that the issue could affect about one billion users worldwide, while the demonstration targeted Windows. A sandbox limits what a compromised web page can do. A full chain joins bugs to cross Chrome’s defenses in sequence.
#cybersecuritynews
