@_manfp

Security but not as in "national security". Playing CTFs with @redrocket_ctf (and @Sauercl0ud). Pwn2Own Vancouver 2020..=2024\{2023}. @manf@infosec.exchange

 Outside of computed bounds
Joined January 2020
  • Tweets91
  • Following309
  • Followers5.4K
2Media
CVE-2025-4941 - Trend ZDI analyst @hosselot details the Firefox bug used at #Pwn2Own Berlin by Manfred Paul. Includes root cause analysis and video demo. zerodayinitiative.com/blog/2…

Zero Day Initiative — CVE-2025-4919: Corruption via Math Space in Mozilla Firefox

In recent years, there has been an increase interest in the JavaScript engine vulnerabilities in order to compromise web browsers. Notably, vulnerabilities in JIT engines are among the most favorite...

zerodayinitiative.com
4
29
133
16,020
Manfred Paul retweeted
Manfred Paul@_manfp13 Oct 2024
Replying to @_manfp @ecsc2024 @MITAmalta
@MITAmalta, this is not how you build up a cybersecurity community in your country. It was great to see a lot of ECSC players show their support people like @_mixy1 who faced both disqualification and legal action. As the vulnerability research community, we should do the same.
4
19
6,060
Manfred Paul retweeted
Tavis Ormandy
@taviso20 Jul 2024
This strange tweet got >25k retweets. The author sounds confident, and he uses lots of hex and jargon. There are red flags though... like what's up with the DEI stuff, and who says "stack trace dump"? Let's take a closer look... 🧵1/n
241
2,986
495
15,096
3,277,658
Manfred Paul retweeted
Jack Ren@bjrjk27 Jun 2024
Exploit for Pwn2Own CVE-2024-29943, an Integer Range Inconsistency caused OOB access! Analysis will be updated later. Shoutout to @_manfp for finding this bug. And shoutout to @maxpl0it for his integer range inconsistent PoC. github.com/bjrjk/CVE-2024-29…
10
62
1
293
42,309
Manfred Paul retweeted
h0mbre@h0mbre_26 Jun 2024
think i found a bug. which means it’s time to take a break and enjoy the possibility before looking more closely and finding out there’s a check in an upstream code path I missed
6
18
4
207
20,031
Replying to @chrisrohlf @mncoppola
Keeping open a bug to support a government operation is isomorphic to opening a backdoor to support a government. I'm pretty sure you wouldn't want Google to keep a bug open for the benefit of China, Chris. alecmuffett.com/article/1099…

“Google: Stop Burning Counterterrorism Operations” | @mncoppola | … Remember, Kids: bad guys...

Anyone who thinks the linked blog post is insightful or sensible should watch all of Marcus Ranum’s “Cyberwar: You’re Doing It Wrong” from 2012,  especially from 12:42 on th…

alecmuffett.com
2
4
17
3,138
Manfred Paul retweeted
GrapheneOS
@GrapheneOS25 Jun 2024
theguardian.com/world/2022/f… Is this the "counterterrorism operation" by a U.S.-allied Western government that's being referenced? If saying the country and "terrorist" group involved paints a flattering picture of these exploit tools, why aren't they saying which ones are involved?

More Polish opposition figures found to have been targeted by Pegasus spyware

Analysis by Amnesty International linked them to Pegasus Project leak of more than 50,000 phone numbers

theguardian.com
1
6
1
59
7,005
This years Google CTF Qualification is over. Congratulations to @kalmarunionenDM, kijitora and Zer0RocketWrecks! The top 8 teams qualified for Hackceler8 2024 in Málaga. More details at goo.gle/ctf. ¡Vamos!
19
2
90
15,072
Manfred Paul retweeted
Bart Preneel@bpreneel120 Jun 2024
Good news: vote on chatcontrol postponed. But this monster keeps raising its head: efforts to stop it need to be continued.
CCC Updates@chaosupdates20 Jun 2024
Etappensieg: Die EU-Staaten einigen sich heute nicht auf eine Position zur #Chatkontrolle – Die Ratspräsidentschaft nimmt die Abstimmung von der Tagesordnung netzpolitik.org/2024/etappen…

Belgien scheitert mit Abstimmung zur Chatkontrolle

Die EU-Staaten einigen sich heute nicht auf eine Position zur Chatkontrolle. Die Ratspräsidentschaft hat die Abstimmung von der Tagesordnung genommen, weil sie keine ausreichende Mehrheit hat. Damit...

netzpolitik.org
3
67
4
216
39,664
Congrats to #Mozilla for being the first vendor to provide patches for bugs disclosed during #Pwn2Own Vancouver. bleepingcomputer.com/news/se…

Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own

Mozilla has released security updates to fix two zero-day vulnerabilities in the Firefox web browser exploited during the Pwn2Own Vancouver 2024 hacking competition.

bleepingcomputer.com
1
41
5
249
29,667
CONFIRMED! Manfred Paul (@_manfp) used an OOB Write for the RCE and an exposed dangerous function bug to achieve his sandbox escape of #Mozilla #Firefox. He earns another $100,000 and 10 Master of Pwn points, which puts him in the lead with 25. #Pwn2Own
5
37
4
253
32,913
Confirmed! Our final attempt of the day had Manfred Paul (@_manfp) execute a double-tap on both #Chrome and #Edge browsers with the rare CWE-1284 Improper Validation of Specified Quantity in Input. He earns $42,500 and 15 Master of Pwn points. #Pwn2Own
10
2
86
22,387
Confirmed! Manfred Paul (@_manfp) gets RCE on the #Apple #Safari browser with an integer underflow bug plus a PAC bypass using a weakness in Apple Safari. He wins himself $60,000 and 6 Master of Pwn points. #Pwn2Own #P2OVancouver
1
11
2
131
82,439
Part 2 of the blog describing the #Firefox bug used by @_manfp at #Pwn2Own Vancouver is live. @hosselot continues looking at the code execution bug with sandbox escape that won $100K at the event. Read the details (and watch the video demo) at zerodayinitiative.com/blog/2…

Zero Day Initiative — But You Told Me You Were Safe: Attacking the Mozilla Firefox Sandbox (Part 2)

In the first part of this series , we reviewed how Pwn2Own contestant Manfred Paul was able to compromise the Mozilla Firefox renderer process via a prototype pollution vulnerability in the await...

zerodayinitiative.com
61
1
125
At #Pwn2Own Vancouver, @_manfp won $100K exploiting #Firefox. Now that these bugs are patched, @hosselot details the first part of this exploit in his most recent blog. Part 2 is to come. zerodayinitiative.com/blog/2…

Zero Day Initiative — But You Told Me You Were Safe: Attacking the Mozilla Firefox Renderer (Part 1)

Vulnerabilities and exploits in common targets like browsers are often associated with memory safety issues. Typically this involves either a direct error in memory management or a way to corrupt...

zerodayinitiative.com
77
3
188
Confirmed! Manfred Paul (@_manfp) scored his second win of the day with a OOBW on Apple Safari, earning him another $50K and 5 more Master of Pwn points! #Pwn2Own #P2O15
6
37
Confirmed! Manfred Paul (@_manfp) demonstrated 2 bugs (prototype pollution and improper input validation) in Mozilla Firefox and has earned $100K and 10 Master of Pwn points! #Pwn2Own #P2O15
14
3
75
Manfred Paul retweeted
blasty
@bl4sty14 Jan 2022
I've lost count of how many eBPF verifier vulns we've seen in Linux over the years. You want to make sure unprivileged bpf syscalls are not allowed on your machines (configurable through kernel.unprivileged_bpf_disabled). openwall.com/lists/oss-secur…
1
23
129
Reality: 1, Verifier: 0. Originally reported by @_manfp, this bug in the #Linux Kernel eBPF Verifier could allow a local privilege escalation. @_wmliang_ provides the details of CVE-2021-31440 & shows how it could be exploited. zerodayinitiative.com/blog/2…

Zero Day Initiative — CVE-2021-31440: An Incorrect Bounds Calculation in the Linux Kernel eBPF...

In April 2021, the ZDI received a Linux kernel submission that turned out to be an incorrect bounds calculation bug in the extended Berkeley Packet Filter (eBPF) verifier. This bug was submitted to...

zerodayinitiative.com
46
2
100
Confirmed! Manfred Paul used an OOB Access bug to escalate to a root user on #Ubuntu Desktop. The Pwn2Own vet earns himself $30,000 and 3 points towards Master of Pwn.
8
1
36
Load more