@bitfriends_

ctf with r3kapig/ARESx/FMC | pwn and vr 🇩🇪

 ประเทศไทย
bitfriends.cc
Joined November 2020
  • Tweets89
  • Following657
  • Followers333
6Media
I just wrote my first exploit for a real-world kernel vulnerability. It is about CVE-2022-24122. I did some cross-cache UAF attack to corrupt modprobe_path. You need to know the kernel base to prevent an oops during the exploit process. Reliability isn't great 😅 maybe like 5%
2
18
2
92
20,002
BitFriends retweeted
Leo@leo_s0methingJul 7
I recently played GreyCTF Finals with @ARESxCTF. Me and @bitfriends_ managed to blood a kpwn challenge by finding some new triggers for modprobe_path. You can find the blogpost + writeup here: leo1.cc/posts/docs/socket020… Thanks @NUSGreyhats for hosting a great no-LLM CTF!

socket(0,2,0) - Reviving modprobe_path again

Finding a new modprobe trigger without AI to solve “greynote” at GreyCTF Finals

leo1.cc
17
1
80
6,376
BitFriends retweeted
ARESx@ARESxCTFMar 29
With a slight delay, our team is proud to share that ARESx has won first place on m0leCon 2026 finals 🏆🇮🇹 thanks to @pwnthem0le for the great event and hope to see everyone next year! 🥳
6
1
24
1,868
BitFriends retweeted
ARESx@ARESxCTF11 Dec 2025
With a slight delay we are proud to announce ARESx won Securinets finals 2025 in Tunisia 🎖️🎖️ Thank you @SecuriNets for hosting the ctf, here are some pics from the trip!!
4
30
2,025
BitFriends retweeted
ARESx@ARESxCTF3 Dec 2025
For the weekend ARESx had the honor of attending mimic ctf 2025 Big thank you to @XCTF_League for organizing the event 🎖🎖 Hope to see you all next year!
5
29
1,798
BitFriends retweeted
ARESx@ARESxCTF25 Oct 2025
We are proud to announce, ARESx placed 3rd on m0leCon CTF!!! 🏆🇮🇹 Thank you for hosting! @pwnthem0le Looking forward to see everyone in Turin!! #pwnthem0le
9
2
39
5,483
BitFriends retweeted
ARESx@ARESxCTF14 Aug 2025
We are happy to announce that ARESx as part of @malta_ctf placed 8th in the #DEFCON CTF finals! It was very nice meeting everyone and competing against some of the best teams in the world! Huge thanks to @plainshift for the support given to the team! Photo dump:
6
1
31
3,142
We got 8th place in defcon! Working together onsite was great as always, also really enjoyed meeting our friends in the other teams 😁. Thanks @Nautilus_CTF for hosting <3
15
4
97
12,410
ZDI-CAN-27262 is a Linux kernel 0-day I reported recently that allows unprivileged users to escalate privileges to root. The vulnerability is a race condition leading to a UAF in the kmalloc-196 cache. It was introduced in v4.2-rc1 and has been present in the kernel for 10 years.
5
49
2
247
24,809
BitFriends retweeted
ARESx@ARESxCTF12 May 2025
ARESx is actively recruiting for experienced CTF players! Join a DEFCON qualifying team in future competitions: shorturl.at/wI24S
7
1
20
2,879
... and the podium for m0leCon Finals CTF! Congratulations! 🚩
5
1
42
6,948
A bit late for a 2024 recap, but who cares. Had an amazing year and went to my first onsite finals 😋
3
3
25
1,871
BitFriends retweeted
r3kapig@r3kapig31 Dec 2024
5th world rank of ctftime in 2024 First time reached 1k ctftime weight point Hope we could do better in 2025!
2
8
1
62
5,270
Happy new year! Our 2024 Recap is here: - 6 CTFs won, including 2 DEFCON Prequalifiers - 1st meetup of ~80 members @ DEFCON - 19.5k mvms sent on Discord - Rank #2 global on CTFtime We're incredibly proud of all of our members and look forward to seeing everyone again next year!
Screenshot of the CTFtime global leaderboard showing the CTF team Friendly Maltese Citizens in second place.

ALT Screenshot of the CTFtime global leaderboard showing the CTF team Friendly Maltese Citizens in second place.

3
21
3
91
9,638
1st place at HITCON CTF 2024 Finals! Many thanks to HIT for hosting an amazing event, and we’re all very excited to see everyone again at DEF CON CTF next year!
takarada, molenzwiebel, Trixter and piers posing with the $10k 1st place vanity cheque at the HITCON CTF 2024 Finals prize presentation ceremony

ALT takarada, molenzwiebel, Trixter and piers posing with the $10k 1st place vanity cheque at the HITCON CTF 2024 Finals prize presentation ceremony

HITCON
@HacksInTaiwan11 Nov 2024
【🔥🔥HITCON CTF 2024 Final 排名發表／Ranking Release!🔥🔥】 ​ 駭客們經過約一天半的激鬥後，Friendly Maltese Citizens 成功衛冕了第一名的寶座，而今年才剛回歸的老手們 defunqt 也擊敗了眾多強隊奪得第二名，MMM 則以些微差距惜敗位居第三名，此外也恭喜星爆牛炒竹狐奪得了台灣之星獎。今年也是一場十分精彩的比賽，有許多精彩的拉鋸及令人印象深刻的趣事。 ​ After a grueling day and a half of intense battles, Friendly Maltese Citizens successfully defended their champion title! The seasoned team defunqt, recently back in action, took an impressive second place after defeating numerous formidable teams, while MMM narrowly missed second place, taking third by a slim margin. Additionally, congratulations to 星爆牛炒竹狐 for winning the Taiwan Star Award! This year’s competition was packed with excitement, featuring many intense showdowns and memorable moments. ​ 以下是最終包含 esports 分數的總排名： Following is the final ranking including scores from esports: ​ 1. Friendly Maltese Citizens 2. Defunqt 3. Maple Mallard Magistrates 4. Superflat 5. TokyoWesterns 6. Cold Fusion 7. Blue Water 8. RePokemonedCollections 9. thehackerscrew 10. 星爆牛炒竹狐 11. SuperDiceCode 12. YAATN ​ 期待明年還能繼續見到大家！ We are looking forward to seeing everybody next year! ​ #HITCON #CTF #Final
1
13
3
111
15,068
#justCTF24 in Poland was amazing 🤍❤️
1
4
29
1,963
finally had some spare time to publish the exploit code and a short explanation. you can see it here: b17fr13nds.github.io/posts/k…

Exploiting the kernel - CVE-2022-24122

Exploiting an UAF decrement to achieve LPE

bitfriends.cc
BitFriends@bitfriends_12 Mar 2023
I just wrote my first exploit for a real-world kernel vulnerability. It is about CVE-2022-24122. I did some cross-cache UAF attack to corrupt modprobe_path. You need to know the kernel base to prevent an oops during the exploit process. Reliability isn't great 😅 maybe like 5%
1
9
51
5,208
github.com/google/security-r…
2
19
1
90
32,477
BitFriends retweeted
c0m0r1@c0m0r127 Jul 2023
CVE-2023-3390: UAF on Linux Netfilter nftables MFT_MSG_NEWRULE leads to LPE. We exploit this tiny 1-day vuln to pwn all targets of Google's kernelCTF for the first time in history. Nice and clear triple-kill 🥳
7
78
2
333
68,335
BitFriends retweeted
HackGit@hack_git16 May 2023
CVE-2023-32233 Building And Configuring. The instructions below were tested under Ubuntu 23.04 (Lunar Lobster). github.com/Liuk3r/CVE-2023-3… #cybersecurity #infosec #cve #redteam
1
98
7
351
45,520
Kernel has been pwned #blackhatasia
6
41
2
392
35,260
Load more