@AndrewMohawk

Sec/Madness @privy_io principal security , @_seal_org technical council prev: HoS @uniswap, D&R/IR @RobinhoodApp, IR @BitMEX, Built @Paterva Maltego with RT

 New York, USA
andrewmohawk.com
Joined February 2008
  • Tweets13K
  • Following3.1K
  • Followers5.5K
1.1KMedia
Fun react bug, (CVE-2025-55183) if you have a server side component and it explicitly or implicitly exposes a stringified argument you can get the source code for that function. Also found DoS, but reported it to vercel instead of meta and some else reported the next day 🙃
7
13
2
95
19,633
AndrewMohawk⁽ⁿᵘˡˡ⁾ retweeted
James Pavur@JamesPavur12h
Congrats to @killa who solved stealmybitcoin.com hours ago but I screwed up which key went on the server (the flag was a root wallet WIF instead of the branch WIF). Check out their awesome writeup here: github.com/KillaBoi/StealMyB…
33
192
35
1,714
326,399
wow, those scores are something
Kimi.ai
@Kimi_MoonshotOct 23
Introducing Kimi K3.1 Pro: our most capable 3T-class open-weight model. 🔹 1M-token context, 2.8T total / 104B active params (MoE), Multimodal. 🔹 Full-project coding: games in Unreal, Unity & Godot. 🔹 Excels at parametric 3D modeling in Blender & CAD. 🔹 More reliable at finance work: Accurate modeling with hallucination down by 65%. 🔹 Matching the strongest proprietary models across coding, agentic and knowledge benchmarks. Kimi K3.1 Pro and K3.1 Pro Highspeed (2–3× faster) are now live on Kimi.ai, Kimi Work, Kimi Code, and the Kimi API. Open weights by Nov 4, 2026. 🔗 API: platform.kimi.ai 🔗 Tech blog: kimi.ai/blog/kimi-k3-1-pro
2
326
AndrewMohawk⁽ⁿᵘˡˡ⁾ retweeted
Mayor Zohran Kwame Mamdani
@NYCMayorOct 23
If you encounter ICE, here's what every New Yorker should know.
6,744
16,015
1,398
111,396
8,254,945
AndrewMohawk⁽ⁿᵘˡˡ⁾ retweeted
David Agranovich
@DavidAgranovichOct 21
What a creative way to celebrate cybersecurity awareness month
33
900
42
7,093
74,702
No matter how much fun, with this much still vulnerable from php2shell.censys.com/ , it seems irresponsible to release PoCs for this right now :'(
1
5
2
23
2,537
Its me, I have a working PoC with the infoleaks to bypass ASLR. It took a lot of prompting and re-iterating to find those, tested against PHP 8.5.11 x86_64 with with all defaults and tested over the Internet
AndrewMohawk⁽ⁿᵘˡˡ⁾@AndrewMohawkOct 21
Has anyone actually seen a fully working PoC in the wild for the PHP vuln? Finding the UAFs is fast, but you still need things like info leak to get it to exec and I dont see anyone posts that include it, just tons of llms that are just reading proc/other ways to manage layout
8
14
94
11,715
Tested on: PHP 8.5.11 x86_64 Apache mod_php PHP 8.5.11 AArch64 mod_php PHP 8.4.26 / 8.3.35 / 8.2.34
1
9
1,407
also x86_64 PHP-FPM and AArch64 PHP-FPM just for @k_firsov
1
6
1,039
AndrewMohawk⁽ⁿᵘˡˡ⁾ retweeted
frye
@___fryeOct 21
it’s been an honor using the computer with you all
130
2,576
65
27,587
390,430
phoronix.com/news/LKML-New-T… Does it ever end? Accidentally sent unpatched (incl RCE) bugs to public mailing list

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list

phoronix.com
1
1
1
1,154
😰
Lukasz Olejnik
@lukOlejnikOct 22
OVH supply chain compromise. Attackers took over a developer's GitHub account and replaced existing OVHcloud CLI release binaries with backdoored versions.
1
9
704
Bind9 RCE anyone? linuxcompatible.org/story/is…

ISC Releases BIND 9.20.30 and 9.21.27, Patching Four Flaws Including an RCE

ISC has released BIND 9.20.30 (stable) and 9.21.27 (development) as its fourth monthly BIND security update of 2026, all four vulnerabilities rated High. One flaw, CVE-2026-94300, carries a CVSS 8.

linuxcompatible.org
2
10
1,044
Has anyone actually seen a fully working PoC in the wild for the PHP vuln? Finding the UAFs is fast, but you still need things like info leak to get it to exec and I dont see anyone posts that include it, just tons of llms that are just reading proc/other ways to manage layout
6
2
1
46
18,076
Its gonna be a long day for defenders :'(
Railway
@RailwayOct 21
An urgent notice from the Railway team blog.railway.com/p/security-…

Security Disclosure: Wednesday October 21st | Railway Blog

Railway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention

blog.railway.com
17
1,313
thephp.foundation/blog/2026/… Really disappointing that companies put marketing ahead of safety.
11
62
5
716
48,512
Fresh Node.js + React/Next.js security fixes: Node Brotli RCE (CVE-2026-111497): 22.23.4 / 24.22.1 / 26.12.1 Next.js: 2 critical RCEs + Server Actions DoS → 15.5.28 / 16.4.1 Check your deployed versions. nodejs.org/en/blog/vulnerabi… nextjs.org/blog/nextjs-secur…

Node.js — Wednesday, October 21, 2026 Security Releases

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org
5
881
Love that people arent even bothering to rewrite AI slop, just screenshot and go, who needs to validate findings anymore. Security needs to have PoCs that rm -rf / again to bring back some critical reviews.
3
2
31
13,952
AndrewMohawk⁽ⁿᵘˡˡ⁾ retweeted
Nagli
@galnagliOct 21
php2shell.com

PHP2Shell — AI uncovers critical vulnerabilities in the backbone of the web

PHP2Shell is a family of critical vulnerabilities in core PHP that can allow unauthenticated attackers to execute code or disclose sensitive process memory.

php2shell.com
4
13
91
5,413
AndrewMohawk⁽ⁿᵘˡˡ⁾ retweeted
php-net
@php_netOct 21
PHP 8.5.12 released - 90 fixes in 29 components, including security fixes (CVE-2026-109618, CVE-2026-109619). Changelog + downloads: php-net.pro/news/php-8-5-12-…

PHP 8.5.12 released with security fixes | The Dev Dispatch

The PHP project has released PHP 8.5.12: 90 fixes across 29 components of the 8.5 branch.

php-net.pro
42
2,497
214
5,382
721,701
- [RCE via OOM corruption · Advisory · php/php-src](github.com/php/php-src/secur…) - [RCE via stale global state · Advisory · php/php-src](github.com/php/php-src/secur…)

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
3
6
1,319
Load more