73696e65 retweeted
Read all the details on how our a missing flag allows an unprivileged user to gain root access - discovered by our @73696e65.
blog.doyensec.com/2026/09/17…
#appsec #security #doyensec
New Doyensec research: The skb that wasn’t freed - the Fragnesia primitive via Open vSwitch.
We discovered a deterministic local privilege escalation affecting default installs of Arch, Fedora, Debian, Amazon #Linux & RHEL.
The result: a byte-granular page-cache write → root via an existing setuid binary.
Technical deep dive + PoC:
blog.doyensec.com/2026/09/17…
#appsec #doyensec #security
73696e65 retweeted
Big slay! maitai (@MaitaiThe) of Doyensec was able to exploit OpenAI Codex! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room for the deep dive. #Pwn2Own #P2OBerlin
73696e65 retweeted
In our final ksmbd research post, @73696e65 provides a detailed walkthrough for exploiting a local privilege escalation vulnerability. If you're interested in learning more about exploitation on modern systems - check it out!
blog.doyensec.com/2025/10/08…
#doyensec #appsec #security
73696e65 retweeted
📢It's here! Part 2 of Norbert Szetei's (@73696e65) research into ksmbd. See how customized fuzzing & the appropriate sanitizers led to discovering 23 Linux kernel CVEs, including use-after-frees & out-of-bounds reads/writes.
blog.doyensec.com/2025/09/02…
#doyensec #appsec #security
73696e65 retweeted
Several members of the #doyensec team are here in Berlin 🇩🇪attending @offensive_con this weekend! Ping us or just say "hallo" in person, if you'd like to talk #appsec or grab a coffee. We're looking forward to some amazing talks!
#offensivecon #security
73696e65 retweeted
The latest coordinated disclosure from our researchers (Norbert Szetei @73696e65 & Viktor Chuchurski @viktorot) details a SQLi and DoS via Prototype Pollution in #TypeORM! Time to update!
More details: doyensec.com/research.html#8…
#doyensec #TypeScript #Electron #NodeJS #appsec
73696e65 retweeted
Our latest blog post takes the pain out of VirtualBox device driver fuzzing. We provide all the details necessary along with custom code patches to get you started! Check it out here: blog.doyensec.com/2022/04/26…
73696e65 retweeted
Can you survive a nuclear war? Yes, you can. As long as you are not in the physical blast zone your main goal is to create distance between yourself and the radiation and then wait it out.
220308 Episode 51 Nuclear War PUBLIC odysee.com/@Chris_Martenson:…
73696e65 retweeted
The Biggest Ideas in the Universe! Informal videos in which I try to explain big ideas one by one. Here is the announcement and intro video:
preposterousuniverse.com/blo…
73696e65 retweeted
Fuzzilli v0.9.1 is out: github.com/googleprojectzero… Many thanks to everyone who helped make this release possible! :)
73696e65 retweeted
We put together our very own "Awesome" list on GitHub about @electronjs security! A frequently-updated repo with presentations,
bug write-ups, and all kinds of content to help during Electron security testing github.com/doyensec/awesome-…
73696e65 retweeted
Google recently awarded $10k for an exotic stored XSS on Google Scholar using polymorphic images. Another “magic” show performed by our own @lorenzostella! Read how on our latest blog post: blog.doyensec.com/2020/04/30… #xss #bugbounty #magic
73696e65 retweeted
Norbert @73696e65 wrapped up his first #DoyensecResearch week with a nice bug in Django - a SQL injection in GIS functions (CVE-2020-9402) djangoproject.com/weblog/202…
#Django #infosec
73696e65 retweeted
Sneak peek under the hood of Electra's kexecute
blog.binary.house/2018/10/sn…
73696e65 retweeted
The slides from my talk "Practical recon techniques for bug hunters & pentesters" presented at @Bugcrowd LevelUp 0x02 in PDF format are here
speakerdeck.com/yamakira/pra…
#osint #appsec #recon
73696e65 retweeted
Another company which creates a huge "power" asymmetry between governments and individuals. Shame!
Inside the secretive industry that helps government hackers get around encryption.
motherboard.vice.com/en_us/a…