@cor_ctf

A European and American Security Research Group

cor.team
Joined February 2021
  • Tweets122
  • Following40
  • Followers2.8K
46Media
Crusaders of Rust retweeted
pepsipu@pepsipuOct 22
i jailbroke the nintendo switch 2 so i modded cinnamoroll, peter griffin, hatsune miku, and more into Mario Kart World, a switch 2 exclusive now watch my friends and i get cooked by bots learn more and get the exploit pepsipu.com/blog/2026-10-swi…
814
3,060
1,900
30,541
5,160,916
Busy weekend for CoR members at @defcon! Congrats to all our teammates who got 3rd at DEFCON CTF Finals under @SuperDiceCode and to @clubby789, @ryaagard, and willsroot.io for their main stage talk on a Samsung Galaxy UXSS exploit (slides + video coming soon)🫡
2
52
2,970
Crusaders of Rust retweeted
SuperDiceCodeLovers@SuperDiceCodeAug 10
SuperDiceCodeLovers finishes #3 in DEF CON CTF finals
23
6
46
28,147
Crusaders of Rust retweeted
Jamie Hill-Daniel@clubby789Jul 20
I'll be giving a talk on a V8 exploit at DEFCON next month with @ryaagard and willsroot.io/!
6
63
3,276
What better place to talk about pwning mobile browsers than at DEFCON? See ya'll at Vegas on August 7th 🫡
6
49
2,811
Offensivecon 2026 talks are out! Check out the Minecraft 1-click RCE talk from our teammate @ryaagard at youtu.be/QgybUtLXS9U😎
15
78
7,082
We had a blast this weekend at @offensive_con 🔥- thank you to @Binary_Gecko for the awesome conference! Congrats to our teammates @caueobici for his pwn2own success and @ryaagard for his talk on a 1-click Minecraft 0day😎
4
65
2,974
The research is out now! Come find out how we had a live universal XSS on Samsung phones for the past 6 months😎
OtterSec
@osec_ioApr 1
Replying to @osec_io
osec.io/blog/2026-04-01-patc…

Patch gap to mobile renderer RCE: pwning Samsung Internet’s V8 on the Galaxy S25

Samsung Internet on the Galaxy S25 shipped a six-month-old version of V8, exposing it to publicly known bugs. Learn how we exploited a bytecode interpreter vulnerability to achieve renderer RCE and...

osec.io
1
5
47
5,492
We finally did something outside of kernel security research? Thank you to @osec_io for the collab🔥 Long live the patch gaps🫡
OtterSec
@osec_ioMar 24
We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with @cor_ctf. Full writeup coming next week.
1
39
3,806
Awesome research from @ryaagard 👀
OtterSec
@osec_ioMar 17
We achieved a guest-to-host escape by exploiting a QEMU 0-day where the bytes written out of bounds were uncontrolled. Full breakdown of the technique, glibc allocator behavior, and our heap spray/RIP-control primitive ↓
1
23
2,870
Crusaders of Rust retweeted
kqx@kqx_ioMar 8
played DiceCTF quals and managed to blood the kernel pwn challenge and won the $150 bounty! check out the writeup: kqx.io/writeups/cornelslop/
1
24
1
186
11,754
Crusaders of Rust retweeted
chompie
@chompie133724 Nov 2025
Watch XOR’s talk CUDA de Grâce: Owning AI Cloud Infrastructure with GPU exploits Kernel + driver bugs aren’t just a LPE problem, they’re a cloud problem. With the explosion of AI in the cloud, NVIDIA’s GPU drivers have become a valuable attack surface youtu.be/Lvz2_ZHj3lo

HEXACON 2025 - CUDA de Grâce by Valentina Palmiotti & Samuel Lovejoy

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

youtube.com
5
73
3
297
53,025
Crusaders of Rust retweeted
Pumpkin 🎃@u1f38325 Nov 2025
My HEXACON talk video is out! It covers a small race condition in the Linux kernel’s io_uring. I recommend watching it at 1.25× speed since I’m still not great at speaking 😅 youtube.com/watch?v=Ry4eOgLC… Here is the slide! u1f383.github.io/slides/talk…
4
46
148
14,834
Our @hexacon_fr talk is out on Youtube now😎 youtu.be/C-52Gwmce3w Follow the slides at: storage.googleapis.com/stati…

HEXACON 2025 - An RbTree Family Drama by William Liu & Savino Dicanosa

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

youtube.com
22
77
12,573
Crusaders of Rust retweeted
Hexacon@hexacon_fr24 Nov 2025
If you missed HEXACON 2025 or want to rewatch some of the talks, they’re now available on our YouTube channel 📽️ Enjoy the content, and see you in 2026! youtube.com/playlist?list=PL…

HEXACON 2025

youtube.com
1
58
2
130
29,075
Congrats @ryaagard 👀 We will not be connecting to any Minecraft servers you host.
OtterSec
@osec_io12 Nov 2025
Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.
141
10,428
We at CoR (+ @u1f383) had a great experience at @hexacon_fr this weekend Met many skilled VR people, the venue was amazing, and the speaker gifts were simply🔥 Best offensive security conference we have seen so far - thanks again to the organizers for the opportunity!
1
1
52
9,571
Crusaders of Rust retweeted
Hexacon@hexacon_fr11 Oct 2025
An RbTree Family Drama: Exploiting a Linux Kernel 0-day Through Red-Black Tree Transformations by William Liu and Savino Dicanosa
2
1
36
3,704
Wanna learn how to perform OOP in functional programming all in Google Sheets? Come check out our team member @MaxCai33447144 research, which he made into a corCTF 2025 challenge! cor.team/posts/corctf-2025-p…
1
16
1,789
We have a🔥presentation ready for Hexacon. Come grab a beer with us afterwards! See everyone in Paris🇫🇷🫡
Hexacon@hexacon_fr17 Sep 2025
📢 An RbTree Family Drama: Exploiting a Linux Kernel 0-day Through Red-Black Tree Transformations by William Liu & Savino Dicanosa
3
36
3,465
Load more