Security researcher 🇦🇺 Good-faith hacking 🤡 Weaponizing source code 🧬 https://xitter.cf/t.co/qulkQaGWp9

Joined June 2020
Playing Doom on a John Deere tractor display (jailbroken/rooted) at @defcon
56
780
167
3,179
Sick.Codes retweeted
Now kiss
27
213
14
3,532
68,732
Sick.Codes retweeted
thank you claude
53
69
6
4,644
94,336
Sick.Codes retweeted
messaging my wife a link containing proof of her husband cheating on her from an anonymous instagram account and then when she clicks on it texting her to let her know she failed the family phishing test and she has to retake my cybersecurity course
871
14,763
1,175
240,145
7,692,453
I have been running a wordpress blog for april fools 2023 raisistance.com. Has it been pwned with php2shell? 🧵 1/X
If we are not seeing mass exploitation of php2shell, it's not because the exploit is not easy. It's because threat actors are apparently absolute dumbasses, or don't make enough money to afford a Codex subscription.
11
13
1
282
41,932
Everyone who owns hardware with abominable software (like Sonos players) owes a debt of gratitude to Venkatraman Srinivasan and the rest of the eMudhra gang in Bengaluru, Karnataka. Without their gross negligence, it'd be a lot harder to counterfeit certificates and fix the sw🙏
88
381
58
4,933
224,670
Sick.Codes retweeted
log4j
@log4jOct 24
just dawned on me 90% of smart devices for sale this 2026 black friday will be vulnerable to certificate forgery
54
367
27
7,657
128,627
Replying to @737su0
The results are in for my TV. Your working exploit for the CVE is a kbase-driver bug; my TV's Mali-470 uses the Utgard driver (/dev/mali, no kbase at all). Nothing to port :( He said it will take a lot longer to exploit, potentially days, so might leave it on overnight for this TV. Your working PoC will definitely help others with 2021-ish TV's!
1
1
36
Replying to @UK_Daniel_Card
Think of the amount of compute (water we could’ve saved to grow almonds) if Wiz Califa released their PoC’s
1
1
5
545
Replying to @IceSolst
The only loyalty that customers have to these models is that they’ve paid in full for the month. There are other models (no refusal) that will happily take over your session and take your money instead. Any user can switch to any model, at any time. “Pick up where we left off”
2
161
Replying to @737su0
Very good to know, I’ll let my agent know that 😂 he’s already rebooted it a few times while my son watches YouTube. Thank you for publishing this btw
1
1
21
Replying to @LiveOverflow
They all reached their weekly limit from digesting all the slop, it's coming after the next reset!
1
31
5,136
Sick.Codes retweeted
Released full source for an autonomous root chain on TCL 50C721 Android TV — CVE-2022-22706 Mali GPU page-cache write → uid=0 in <2s from unprivileged app context. Ad blocking, debloat, SELinux hardening. No prebuilt binaries. gitlab.com/c4psu13/mali-page…
4
1
4
482
Replying to @737su0
I believe you! Might be able to get back in if I do boot-loop it anyway 😂 if it ends up working on mine, I’ll open a PR
1
1
1
19
Replying to @737su0
Won't work on mine, but got it brrrr'ing for a related one! TV been slow as fuck too!
10
Replying to @737su0
Will give it to my agent and let him give it a spin on my TCL 😂
2
172
Replying to @UK_Daniel_Card
Even slop, screened hard enough, gives up its gold
2
99
Sick.Codes retweeted
Meet Kimi K3.1 Pro, our most capable 3T-class model.
572
2,081
434
44,392
2,841,404
Replying to @Cthulhu_Answers
Best thing from Perl was/is PCRE
1
1
172
Sick.Codes retweeted
Slop wars 🍿
2
20
1,339
Been getting into opsec due to recent events
120
4,308
60
54,704
597,144