vuln research+exploit dev | pwn2own {'24, '25}, Master of Pwn '25 | bordeaux enjoyer | friend of all cats | @SummoningTeam

[REDACTED]
Joined March 2013
Pinned Tweet
New post is up! This one uses CVE-2025-20741 (a heap overflow in the MediaTek MT76xx driver) to show how a bit of kernel alchemy can turn a heap OOB write into a number of stronger exploit primitives, up to page-level r/w via pipe_buffer corruption :) blog.coffinsec.com/0day/2026…
4
99
1
380
28,162
'Linux is full of crazy clowns'
7
94
2
1,395
26,908
I’m convinced that a large % of programmers don’t actually like computers. As a side effect, are also perfectly happy to throw away their reasoning to a model as soon as they can. I don’t get it, at ALL. Don’t you *LIKE* understanding the magic of the machine? You do realize hand-programming (I hate that I even have to specify hand now) is fun…right?
1,004
718
271
8,967
970,360
double trouble baby!
2
596
imagine being gatekept from hacking by a bot lmao
7
864
i've written a harness for cybersecurity work that's like actually being used in real work by people who actually pay for it which feels kinda cool i'm working for a very very big company that makes security software, who, as with most of the tech sector, is very pro AI. thousands of lines a day are passing over us where the vast majority are at this point written by AI, i have sat sessions with major AI vendors where they gave us obviously faked demos. i get a lot of LLM exposure, like a lot. in very big production codebases. part of my specific responsibilities here are to try find places where LLM's can actually yield efficient and reliable positive-security outcomes, which is in far fewer places than they would have you believe i've never really liked AI, but when I got this responsibility it was important to me to do a good job at it. So i studied high-performance vibecoders and how they work and tried to integrate that wherever relevant and actually got some decent stuff done all the while, i would be frustrated when people in meetings would say shit like "can you ask Claude how we-", because, like... just think? over time though, i started finding AI a lot more useful, and starting to feel a little more positively towards it. every time I spoke to someone I'd hear people talk about how much better they were, how they were using LLMs to better themselves and their work they weren't talking just about productivity but also like actually being smarter, which was in many cases just observably not true. I was learning a lot though. as i started getting more used to LLMs I realized that there were more uses for them than I had previously guessed one day, i was just kinda bored, so i decided to do a lil binex challenge, nothing too interesting just something to pass the time, and as i got started, i opened a claude window and asked it to take a look that's when it kinda clicked that something had gone very wrong, and that reaching for an LLM had just become an ingrained behaviour i started looking back on how i was thinking about others, how they were obviously getting stupider by the day and how i was obviously doing something they weren't because i was smart as shit actually, and i realised, i was just as dumb as they were as someone who loves code and cybersecurity because of the potential for infinite learning, the realization that i had actually given up all my joy unknowingly and become stupider legit had me crying at my claude code so i decided i would get away from LLMs as much as possible. my job requires me to use them a lot so that couldn't really go anywhere, but twitter won't stop talking about 'em so i left here, i also put in a week PTO with the intention that that week, i would not touch an LLM even once, not even search engine auto-answers. where i would just _do things_ w my own stupid hands and learn as much as i could for the simple joy of having learned it without regard for applicability or even if anything i did was even good the whole time i kept thinking "fuck computer, everything is human", because I had a tweet from my moot @luxmendax stuck in my head the entire time i was trying not to lose my mind and decided that would be the theme for the week. SO - I read some books! - I downloaded Reaper and made a song! - I wrote some code which solves literally no problems - I played videogames - I did a patreon course thing from one of my fav creators - I did a bunch of CTFs I had a really really good time, and this time, i actually did learn a lot. The CTFs were fucking hard tho it was so easy to see the impact LLMs had on my brain. Challenges that used to take like 5 min were taking me 20+ in the beginning. It all came back pretty quick but HOLY SHIT that was rough to claw back. the reason i wanna write this down is bc i know i got homies in similar places atm, w frustration abt LLMs being used as first order optimal solutions, with LLMs taking the fun out of doing the things you love doing, but also, i know a lot of people are on here like "i've learned so much w AI". i'm sure that is the case for like... 1% of u... but the far likelier case is that u have alr lost more than u even remember having. there's no shame in that either, these machines are designed to make u stupid bc ur stupidity is dependence and dependence is profitable if u don't believe me and ur a person who does have daily LLM exposure measured in hours, try it, go a week without touching an LLM and still do all the things you're interested in now. fuck israel, fuck the police, fuck AI CEO's, fuck the computer everything is human thx
16
12
1
100
3,252
major progress on the emulated mt7622 project -- network transport, interrupts, DMA scatter, and a lil injector script to emulate a STA with real 80211 frames. good enough to trigger one of the over-the-air bugs in the wifi driver ;)
2
4
1
114
7,298
the injector is kinda cool. i compiled the core RSN code from wpa_supplicant into a shared lib (cuz fuck reimplementing all that) and expose the eapol state machine through ctypes bindings so it works like a real STA but feeds the raw frames through the qemu stream socket
3
595
hey folks! hope yall have been okay. i've been taking a hiatus from twitter and its been *great*. tldr: i'm not into the new obsession with automating the craft so i'm gonna stick to the art and generally avoid InfoSec(TM) shit to keep my sanity. till next time :) <3
1
43
2,510
i'll still drop blog posts and other stuff here as it comes along but otherwise probably won't be around here much. ping me for signal/etc if you wanna stay in touch :)
6
401
After 6 months of extensive research, I have finally published a new blog post! It describes the journey from breaking into my router using a couple of command injections to finding and exploiting a remote heap overflow in a MediaTek kernel driver :D hacefresko.com/posts/rce-on-…
5
38
1
161
10,976
My new article: "Some notes on the security properties of the pipe_buffer kernel object" Many Linux kernel exploits use the pipe_buffer kernel object to build strong exploit primitives. I experimented with pipe_buffers and discovered something interesting a13xp0p0v.tech/2026/04/20/pi…
1
44
1
128
16,579
“Expecting an algorithmic description to instantiate the quality it maps is like expecting the mathematical formula of gravity to physically exert weight.”
Google DeepMind researcher argues that LLMs can never be conscious, not in 10 years or 100 years. "Expecting an algorithmic description to instantiate the quality it maps is like expecting the mathematical formula of gravity to physically exert weight."
108
3,388
52
38,565
1,470,254
Important to note that the vast majority of those 91,000 jailed by Bukele have never been tried, much less convicted of gang activity. They are held in indefinite pre-trial detention, sometimes for years. This is a classic tactic of authoritarian governments.
This quoted post is unavailable.
4
31
1
69
3,784
Inconceivably evil.
98
11,081
142
33,216
746,530
recently made some major progress on the emulated QEMU device to allow it to fully complete link-up to bring the emulated device up after resolving some interrupt delivery issues + implementing DMA transfers for the emulated MCU+PDMA engine. should be pushed soon :)
And here it is! The repo provides a minimal setup for running the MediaTek MT7622 kernel driver in an x86_64 VM. Includes a build of QEMU with a PCI device emulating the MT7622 chip, kernel images, and a precompiled copy of the MT7622 kernel driver. Link below ⬇️
1
25
2,452
ayo its no more free bugs or yolo dropping 0day on main from now on, no in between. pass it on :)
2
1
30
2,468
looking out 12-36m, it’s clear that our industry (and broader society) will go through a time of dramatic change. A lot of it is going to be amazing but some of it will also be dangerous and detrimental (like job loss and capability proliferation). We should be there, in
2
1
17
2,417
can’t tell whether this bullshit take that LLMs are the same as fuzzers conceptually (just another tool, nbd) is cope or actual ignorance
6
1
46
15,021
Especially the “I use fuzzers to find bugs, this is the same” as some kind of defense against the script kiddie accusations lol
6
1,102
The only and unique #QEMU #Internals training in the world is happening again! For vulnerability research and fuzzing of embedded systems. And professional audio recordings of the classes. typhooncon.com/typhooncon-20… In Seoul, in Spring. Feat @Farenain
4
13
1,053