Polyduekes retweeted
To program the machine well, you need to know the latency, throughput, and port assignments of all instructions and keep its microarchitectural state in your head during programming. You need to become one with the machine. You need to live it, breathe it, and be a huge nerd.
Polyduekes retweeted
> finds interesting function in ms binary
> only 2 xrefs
> "nice, should be easy to reach"
> opens call graph
> 🥺🥺🥺
Polyduekes retweeted
The fuzzer that found project-zero.issues.chromium… (and a number of issues prior to that as well) is now open-source: crrev.com/c/7580844
It uses pkeys, trap-handling and single-stepping to intercept and mutate in-sandbox reads (see trap-fuzzer.h). Definitely had fun writing it!
Polyduekes retweeted
The Exploiting Reversing Series (ERS) currently features 945 pages of exploit development based on real-world targets:
[+] ERS 08: exploitreversing.com/2026/03…
[+] ERS 07: exploitreversing.com/2026/03…
[+] ERS 06: exploitreversing.com/2026/02…
[+] ERS 05: exploitreversing.com/2025/03…
[+] ERS 04: exploitreversing.com/2025/02…
[+] ERS 03: exploitreversing.com/2025/01…
[+] ERS 02: exploitreversing.com/2024/01…
[+] ERS 01: exploitreversing.com/2023/04…
In the coming weeks, I will publish new articles covering exploration in areas such as Windows, Chrome, iOS/macOS, and hypervisors.
Have a great day and enjoy reading.
#exploit #exploitation #windows #chrome #macOS #iOS #hypervisors #vulnerabilityresearch
Polyduekes retweeted
BREAKING: Claude found an RCE in Linux executable files. If you chmod +x and run it, it runs. This effects all binaries and shebangged scripts.
Polyduekes retweeted
This is the EDR crowdstrike fears
This is why EDR stonks go down 3000% for every new opus release
while true; do claude -p "is there a virus on my system if so remove it" --dangerously-skip-permissions; sleep 60; done
GG clamav
Polyduekes retweeted
Została wydana nowa wersja BSD Router Project 2.1. BSD Router Project (BSDRP) jest otwartoźródłową dystrybucją FreeBSD, systemem wbudowanym, na potrzeby routerów sieciowych. linuxiarze.pl/bsdrp-2-1/ #bsd #freebsd #router
Polyduekes retweeted
InfoSec: "Running random Docker containers is a massive security risk."
The risk: Spawning a native window to play ASCII DOOM at 60fps.
Polyduekes retweeted
I just released some free exploit development CTFs based on real world CVEs. They include hints, walkthroughs and working exploits if you get stuck.
zeropath.com/blog/zeropath-e…
Polyduekes retweeted
Optimizing subroutines in assembly language (by Agner Fog): agner.org/optimize/optimizin…
Polyduekes retweeted
Started a blog series on writing a minimal ARM hypervisor from scratch — boots as a UEFI app, claims EL2, identity-maps everything through Stage 2.
Chapter 0 just dropped: ARM vs x86 virtualization, UEFI internals, EDK2 setup, first app at EL2.
0xabe.io/hypervisor/arm/2026…
next time i need an audit of my shit i will claim ai wrote it in 2 hours and software engineering jobs are dead
Is this your Database??
Readers added context they thought people might want to know
It’s fake
x.com/cappyishihara/…


































