@___prosti

CTF player for @TheRomanXpl0it, @towerofhanoi and @mhackeroni student at @polimi

 Italy
kqx.io/
Joined July 2025
  • Tweets36
  • Following156
  • Followers333
2Media
stop using ubuntu 24.04 to host your kernel pwn challenges lmao kqx.io/post/qemu-nday/
5
87
3
561
71,927
Gabriel Prostitis retweeted
kqx@kqx_ioOct 24
yeah finding vulns in PHP with clankers is easy, but have you ever pwned a phone by milking it?🐄🪣🐮 MOOOOOOOOOO!!!!!!!! kqx.io/writeups/farm
6
24
816
Gabriel Prostitis retweeted
kqx@kqx_ioSep 26
kqx has landed in Milan for TORX CTF 2026! Obviously, we couldn't let you down and leave you with no kernels and browsers pwn. This time we wanted to take it even further and host an actual android kernel pwn! Hope you'll have fun milking cows <3
1
3
24
1,284
Gabriel Prostitis retweeted
zoverin@z0v3r1nSep 24
👀
4
5
14
1,036
Gabriel Prostitis retweeted
Leo@leo_s0methingJul 7
I recently played GreyCTF Finals with @ARESxCTF. Me and @bitfriends_ managed to blood a kpwn challenge by finding some new triggers for modprobe_path. You can find the blogpost + writeup here: leo1.cc/posts/docs/socket020… Thanks @NUSGreyhats for hosting a great no-LLM CTF!

socket(0,2,0) - Reviving modprobe_path again

Finding a new modprobe trigger without AI to solve “greynote” at GreyCTF Finals

leo1.cc
17
1
81
6,382
Gabriel Prostitis retweeted
NebuSec
@nebusecurityJul 8
GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below
22
204
24
992
150,427
Gabriel Prostitis retweeted
kqx@kqx_ioJun 29
Great challenge from SekaiCTF by Qyn, the writeup is absolutely a must-read! Happy to see that people find our fw_cfg technique useful
Qyn@qynlnJun 29
For this (maybe last) year of SekaiCTF I made a fullchain challenge, chaining together an 0-day in ladybird/libjs, an 0-day qemu TCG LPE and a n-day qemu escape: qyn.app/blog/sekaictf-2026-3… We also re-released another challenge with a running bounty until next week!
2
33
3,039
Gabriel Prostitis retweeted
kqx@kqx_ioJun 6
Pwning V8CTF with a 0day in Chrome thanks to Phi untagging. Read here: kqx.io/post/cve-2026-4447/
3
34
1
209
16,708
Gabriel Prostitis retweeted
Daniele Mammone@DanieleMammoneMay 26
Oops!… @mhackeroni Did It Again! Vegas we are coming! #defcon #mhackeroni #ctf
5
1
32
2,300
this 0day works from qemu v9.1 forward. It is still not patched on the latest version so enjoy!
kqx@kqx_ioMay 24
DEF CON patched our QEMU nday, what about a 0day? kqx.io/post/qemu-0day
1
2
34
5,472
Gabriel Prostitis retweeted
Salvatore Abello@salvatoreabelloMay 16
💿Crafting shared object/image polyglots by abusing a forgotten image format: blog.babelo.xyz/posts/elf-in…

ELF in the Pixels: Building Shared Object-Image Polyglots

In this post, I will show how to build shared object/image polyglots that can bypass image validation in Python applications. I will start from a challenge I …

blog.babelo.xyz
5
12
615
Gabriel Prostitis retweeted
kqx@kqx_ioApr 30
We just posted six new writeups for TRX CTF Quals at kqx.io/writeups Check them out!
1
9
1
52
3,079
Gabriel Prostitis retweeted
TRX@TheRomanXpl0itApr 23
"hey claude plz solve all challenges ctftime.org/event/3141" TRX CTF 2026 is coming back this weekend with many cool challenges! Register now at: ctf.theromanxpl0.it/ Top 8 teams will qualify for on-site finals in Italy this autumn🐴
6
2
14
1,408
Gabriel Prostitis retweeted
kqx@kqx_ioApr 22
less than three days left until the start of TRX CTF! get ready for: - two kernel pwn challenges - browser shenanigans - a *real* x86 challenge - reversing a kernel module make sure to register and fight for a spot in the finals in Italy! ctf.theromanxpl0.it/
2
10
1
69
4,305
Gabriel Prostitis retweeted
堇姬 Naup@naup96721Mar 25
My First CVE and my first contribute linux kernel naup.mygo.tw/2026/03/23/My-F…

My First CVE - CVE-2026-23275 - io uring resize and taskrun race condition

My First CVE - CVE-2026-23275 - io uring resize and taskrun race condition Author: 堇姬 Naup (naup96321) 前言人生的第一個 CVEhttps://www.cve.org/CVERecord/?id=CVE-2026-23275 io uringio_uring 的核心設計目標是減少 I/

naup.mygo.tw
7
35
1
241
15,154
Gabriel Prostitis retweeted
kqx@kqx_ioMar 20
"Claude find a 0day, make no mistakes" CVE-2026-4447 chromereleases.googleblog.co…
7
44
580
86,566
leave absolutely cooked with this one! Unfortunately I wasn't able to play DiceCTF this year but the kernel pwn challenge was pretty cool.
kqx@kqx_ioMar 8
played DiceCTF quals and managed to blood the kernel pwn challenge and won the $150 bounty! check out the writeup: kqx.io/writeups/cornelslop/
18
2,106
Gabriel Prostitis retweeted
kqx@kqx_ioMar 2
Exploiting latest v8ctf instance with a 0day? ✅ Beating try-hards who stalk commits and exploit it as an N-day? ❌ In any case keep an eye out for the CVE release and stay tuned for a crazy post on kqx.io once the issue goes public
7
1
90
6,279
Gabriel Prostitis retweeted
kqx@kqx_ioFeb 20
A little bonus while we're working on other cool stuff :)
5
4
105
4,388
Gabriel Prostitis retweeted
drivertom@drivertomttFeb 17
Hunting Linux kernel 0day with @FrankOverF1ow 5 days, from zero to stable privilege escalation. sha256: 2189d5b196f33d512d8d02c6f00d26f4c10bf79ba1f0ac389d6663e026aebbe8
7
23
2
196
21,941
Gabriel Prostitis retweeted
kqx@kqx_ioFeb 13
How a single typo led to RCE in Firefox Can you spot the bug? Read now at: kqx.io/post/firefox0day/
6
90
8
617
149,329
Load more