I like to define Undefined Behaviors. Android Kernel Researcher @SAFATeamApS. Ex-@XI_Research. Mastodon: @zlowram@infosec.exchange
Barcelona
Joined October 2009
- Tweets1.1K
- Following805
- Followers1.8K
- Likes2.2K
Pinned Tweet
Here's a fresh new blogpost about the exploitation of #CVE_2022_32250 on Linux kernel 5.18.1. Hope you like it! (any feedback is welcome): blog.exodusintel.com/2022/12…
If there's any Senior Android Kernel researcher that would like to come work with us, take a look at this! SAFA is a really good place to keep growing as a researcher!
WANTED - Senior Android & Windows Researchers.
Know one? Tell us.
Hand over a friend or turn yourself in for rewards up to €25,000.
Yes, we're dead serious.
Details and T&Cs: safateam.com/wanted
9
376
What a great @hexacon_fr edition! Very good talks, very interesting conversations, but the best was the moments shared with the @SAFATeamApS crew ❄️. Next in the calendar: @POC_Crew next month!
16
520
Sergi Martinez retweeted
What a #Hexacon edition! 🎢
From an emotional keynote to great talks, “serious” AI chats, laughs with friends & discovering shared visions.
Kudos to @Synacktiv for the venue and networking!
Even being crystallised in Paris couldn’t stop the SAFA crew from having a blast! ❤️
Bound for Paris. Will be at @hexacon_fr, so if you want to grab a drink and discuss all things Android Kernel and/or AI let me know! 🍻
6
269
Sergi Martinez retweeted
In which I settle two of the most consequential questions in philosophy: lcamtuf.coredump.cx/blog/mat…
Sergi Martinez retweeted
Part 2 of our CVE-2025-13032 research is live.
From a paged pool overflow to full LPE on Windows 11: IORing RegBuffers corruption, MDL-based kernel address leak, and SYSTEM token theft.
CVE is patched. Full write-up:
safateam.com/intelligence-hu…
Sergi Martinez retweeted
New terminology alert! Welcome to the multiverse of the half-day: margin.re/2026/08/introducin…
Sergi Martinez retweeted
What better place to talk about pwning mobile browsers than at DEFCON?
See ya'll at Vegas on August 7th 🫡
Sergi Martinez retweeted
Please re-post so it reaches as many students as possible - thanks! ❤️ Per popular demand we've added for my upcoming Python Cyber Summer Camp an option to:
[For students] Apply for fully sponsored workshop tickets → hackarcana.com/py-summer#spo…
[For sponsors] Sponsor tickets for students (we match these!) → hackarcana.com/py-summer-spo…
Thank you to everyone who was asking about this option and pushed us to implement it :)
Sergi Martinez retweeted
if anyone's looking for a talented IoT/embedded VR researcher for hire my friend is looking for work (lives in Spain)
message me if you're interested 🙂
Sergi Martinez retweeted
Bad Epoll: missed by Mythos.
Mythos found one critical race in Linux epoll.
The other was hiding in a ~6-instruction race window.
I found and exploited it as CVE-2026-46242: 99% reliable root on Google kernelCTF, with potential Android impact.
badepoll.com
Sergi Martinez retweeted
Kernel-Exploit-Dojo 📍
Curated archive of 100+ Linux kernel exploitation CTF challenges, organized by bug class, exploitation primitive, final technique, difficulty, and solve count.
The goal is to organize practical kernel pwn techniques such as UAF, heap spraying, pipe_buffer abuse, msg_msg, modprobe_path overwrite, and cred overwrite.
Resource: github.com/mito753/Kernel-Ex…
Sergi Martinez retweeted
This week we launched our Offensive Security Accelerator - a fast track training programme for those looking to start their cyber security careers... if you're in the UK and a graduate or looking to pivot in to offensive security, here's how... pwn.careers/
Sergi Martinez retweeted
LLMs explained without all that yucky math stuff
0xkato.xyz/how-llms-actually…
Sergi Martinez retweeted
Half satisfied because a zero day I found in February 2025 has unluckily been patched in April 2026 😢, it was a tricky use-after-free in Adobe Acrobat Reader's Escript.api 😄. Here is my write-up, with a video PoC popping calc as a bonus: blog.exodusintel.com/2026/06…
Sergi Martinez retweeted
Before, people were asking why there weren't any IRL attacks caused by prompt injection if prompt injection was so easy. The answer was simply that not enough real-world systems were using LLMs yet with both attacker exposure and a security boundary to break. Here's the first.
New: Hackers have been stealing high-profile Instagram accounts by simply asking Meta's AI support chatbot to change the email associated with the account they want to steal.
Shockingly easy, terrible flaw associated with offloading support to AI:
404media.co/hackers-simply-a…
