Rotce (@Rotcee_) header
Rotce (@Rotcee_) profile picture

Rotce

@Rotcee_

0x13 / Just a freak

rotcee.github.io
Joined April 2026
  • Tweets14
  • Following236
  • Followers128
Rotce retweeted
s1r1us (@S1r1u5_) profile picture
s1r1us
@S1r1u5_Oct 29
What if you could backdoor Bash, ls, cp, rm, and other GNU software used by millions of systems? Our research led us to hack GNU Savannah, the infrastructure hosting their source code. The xz backdoor that never happened 🧵
Image from s1r1us (@S1r1u5_)
12
59
6
312
24,737
This problem that appeared yesterday seems to have been fixed. Yesterday it wouldn't let me do anything, but today it's working as usual again.
Migel Tissera (@migtissera) profile pictureMigel Tissera
@migtisseraOct 8
What the hell man? Current state of Western "Frontier" AI. Daybreak Blue, using a 3 generations older model. I even have the HackerOne submission open on the in-app browser. Codex can even read (and have read) the submission. I can't even get help to submit a (CRITICAL!) vulnerability.
Image from Migel Tissera (@migtissera)
2
5
1,112
🍎🐛 I got Claude making this, maybe it's useful for others as well. Every Apple security advisory since 2002 - parsed, indexed, charted. With links to writeups, POCs and presentations. apple-cve.com/
APPLE·CVE — every Apple security advisory, indexed

APPLE·CVE — every Apple security advisory, indexed

Search, filter and chart every CVE in Apple's security release notes since 2002.

apple-cve.com
14
55
5
297
25,817
Rotce retweeted
0xedh (@0xedh) profile picture
0xedh@0xedhAug 7
You don't need a USB. You need to look like one. Emulate the device, Windows fetches a signed package off Windows Update and runs vendor code as SYSTEM. Arbitrary code execution, LPE, standard user or empty logon screen. DEF CON 34 talk w/ @Qm9yamFN. Link at the first comment.
17
267
14
1,269
144,599
Hi everyone! I’ve just updated the first post on my blog with the writeup for CVE-2026-12495: "Hardware Hacking: From zero to a Pre-Auth Stack Buffer Overflow on Amazon's best-selling router." Go check it out! rotcee.github.io/posts/analy…

Hardware Hacking: From zero to a Pre-Auth Stack Buffer Overflow on Amazon’s best-selling router

This will be a blog series where we’ll do a deep dive into the Mercusys MB115-4G router, which, as of today (02/17/2026), is the best-selling router on Amazon Spain. In this first post, we’ll cover...

rotcee.github.io
17
1
99
7,072
Hi everyone! CVE-2026-50458, a Windows kernel 0-day I discovered a few months ago has been patched by Microsoft in this month's Patch Tuesday. You can read the in-depth analysis here: rotcee.github.io/posts/CVE-2…

CVE-2026-50458: Finding a UAF in the Windows Brokering File System

On Tuesday, July 14, Microsoft released the largest Patch Tuesday update in its history, fixing more than 600 vulnerabilities. A bug I reported to Microsoft on May 17 was patched as CVE-2026-50458 in...

rotcee.github.io
3
50
204
9,052
Rotce retweeted
ö (@r0keb) profile picture
ö@r0kebJul 22
Hope you guys enjoy this read!
Calif (@calif_io) profile pictureCalif
@calif_ioJul 22
Dark Elevator: Windows Install Service Local Privilege Escalation (CVE-2026-50343) A pure-logic, 100% reliable path from a normal user to SYSTEM on Windows 11. Full write-up: open.substack.com/pub/calif/…
Image from Calif (@calif_io)
1
9
1,495
CVE-2026-42980, a Windows kernel WMI integer-underflow vulnerability that can be exploited for local privilege escalation to NT AUTHORITY\SYSTEM on vulnerable lab builds. github.com/G4sp4rCS/CVE-2026…
GitHub - G4sp4rCS/CVE-2026-42980-POC: CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH

GitHub - G4sp4rCS/CVE-2026-42980-POC: CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH

CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH. Contribute to G4sp4rCS/CVE-2026-42980-POC development by creating an account on GitHub.

github.com
48
194
10,889
Rotce retweeted
Calif (@calif_io) profile picture
Calif
@calif_ioJul 16
In case you missed it, the recording is up: youtube.com/watch?v=maWnIKH3… @5aelo Thank you so much! We'll name one of our chains after you.
Meet the Hackers: Samuel Groß | State of Browser/JavaScript Engine Exploitation

Meet the Hackers: Samuel Groß | State of Browser/JavaScript Engine Exploitation

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

youtube.com
1
32
2
117
22,793
Hi everyone! I've published a new post: "Achieving SYSTEM with WNF, I/O Rings and ALPC from a Paged Pool Overflow. Does it ring a bell?", where I explain various techniques and objects used in modern Windows kernel exploitation. Hope you enjoy the read! rotcee.github.io/posts/archi…

Exploit Development: Achieving SYSTEM with WNF, I/O Rings and ALPC from a Paged Pool Overflow. Does...

Introduction In this blog I am going to explain several objects and exploitation techniques that are pretty well known when exploiting the Windows kernel paged pool. For the bug itself I will use one...

rotcee.github.io
2
275
Rotce retweeted
Calif (@calif_io) profile picture
Calif
@calif_ioJun 1
RedSun: Exploiting Windows Defender's Remediation Workflow for Local Privilege Escalation Just showing some appreciation for @ChaoticEclipse0's excellent work. Hopefully this won't get us banned! open.substack.com/pub/calif/…
RedSun: Exploiting Windows Defender's Remediation Workflow for Local Privilege Escalation

RedSun: Exploiting Windows Defender's Remediation Workflow for Local Privilege Escalation

Just showing some appreciation for Nightmare-Eclipse's excellent work. Hopefully this won't get us banned!

blog.calif.io
1
46
3
165
19,354
Hi everyone! I've published a new post: root cause analysis of CVE-2025-62454, a heap buffer overflow in the Windows Cloud Minifilter Driver. Hope you enjoy the read! rotcee.github.io/posts/n-day…

N-Day Research: CVE-2025-62454 Root Cause Analysis. Understanding a Heap Buffer Overflow in the...

Introduction

rotcee.github.io
3
190
Load more