English
Crusaders of Rust
Report

Crusaders of Rust

@cor_ctf

A European and American Security Research Group

40 Following2.8K Followers122 Posts
  1. Crusaders of Rust@cor_ctf
    Crusaders of Rust
    RT @pepsipu: i jailbroke the nintendo switch 2 so i modded cinnamoroll, peter griffin, hatsune miku, and more into Mario Kart World, a switch 2 exclusive now watch my friends and i get cooked by bots learn more and get the exploit
    03.1K018
  5. Crusaders of Rust@cor_ctf
    What better place to talk about pwning mobile browsers than at DEFCON? See ya'll at Vegas on August 7th 🫡
    Download
    06492.8K
  6. Crusaders of Rust@cor_ctf
    Offensivecon 2026 talks are out! Check out the Minecraft 1-click RCE talk from our teammate @ryaagard at
    015787.1K
  8. Crusaders of Rust@cor_ctf
    The research is out now! Come find out how we had a live universal XSS on Samsung phones for the past 6 months😎
    OtterSec @osec_io
    15475.5K
  9. OtterSec✓@osec_io
    Posts @osec_io
    0134511K
  10. Crusaders of Rust@cor_ctf
    We finally did something outside of kernel security research? Thank you to @osec_io for the collab🔥 Long live the patch gaps🫡
    OtterSec @osec_io
    We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with @cor_ctf. Full writeup coming next week.
    01393.8K
  11. OtterSec✓@osec_io
    We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with @cor_ctf. Full writeup coming next week.
    Download
    12223122K
  12. Crusaders of Rust@cor_ctf
    Awesome research from @ryaagard 👀
    OtterSec @osec_io
    We achieved a guest-to-host escape by exploiting a QEMU 0-day where the bytes written out of bounds were uncontrolled. Full breakdown of the technique, glibc allocator behavior, and our heap spray/RIP-control primitive ↓
    01232.9K
  13. OtterSec✓@osec_io
    We achieved a guest-to-host escape by exploiting a QEMU 0-day where the bytes written out of bounds were uncontrolled. Full breakdown of the technique, glibc allocator behavior, and our heap spray/RIP-control primitive ↓
    Download
    711254749.8K
  14. Crusaders of Rust@cor_ctf
    Crusaders of Rust
    RT @kqx_io: played DiceCTF quals and managed to blood the kernel pwn challenge and won the $150 bounty! check out the writeup:
    024011.8K
  15. Crusaders of Rust@cor_ctf
    Crusaders of Rust
    RT @chompie1337: Watch XOR’s talk CUDA de Grâce: Owning AI Cloud Infrastructure with GPU exploits Kernel + driver bugs aren’t just a LPE problem, they’re a cloud problem. With the explosion of AI in the cloud, NVIDIA’s GPU drivers have become a valuable attack surface
    073053K
  16. Crusaders of Rust@cor_ctf
    Crusaders of Rust
    RT @u1f383: My HEXACON talk video is out! It covers a small race condition in the Linux kernel’s io_uring. I recommend watching it at 1.25× speed since I’m still not great at speaking 😅 Here is the slide!
    046014.8K
  18. Crusaders of Rust@cor_ctf
    Crusaders of Rust
    RT @hexacon_fr: If you missed HEXACON 2025 or want to rewatch some of the talks, they’re now available on our YouTube channel 📽️ Enjoy the content, and see you in 2026!
    058029.1K
  19. Crusaders of Rust@cor_ctf
    Congrats @ryaagard 👀 We will not be connecting to any Minecraft servers you host.
    OtterSec @osec_io
    Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.
    0014010.4K
  20. OtterSec✓@osec_io
    Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.
    Download
    592582.9K228K
  21. Crusaders of Rust@cor_ctf
    We at CoR (+ @u1f383) had a great experience at @hexacon_fr this weekend Met many skilled VR people, the venue was amazing, and the speaker gifts were simply🔥 Best offensive security conference we have seen so far - thanks again to the organizers for the opportunity!
    Download
    01529.6K
  22. Crusaders of Rust@cor_ctf
    Crusaders of Rust
    RT @hexacon_fr: An RbTree Family Drama: Exploiting a Linux Kernel 0-day Through Red-Black Tree Transformations by William Liu and Savino Dicanosa
    0203.7K
  23. Crusaders of Rust@cor_ctf
    Wanna learn how to perform OOP in functional programming all in Google Sheets? Come check out our team member @MaxCai33447144 research, which he made into a corCTF 2025 challenge!
    01161.8K
  24. Crusaders of Rust@cor_ctf
    We have a🔥presentation ready for Hexacon. Come grab a beer with us afterwards! See everyone in Paris🇫🇷🫡
    Hexacon @hexacon_fr
    📢 An RbTree Family Drama: Exploiting a Linux Kernel 0-day Through Red-Black Tree Transformations by William Liu & Savino Dicanosa
    03363.5K
  25. Hexacon@hexacon_fr
    📢 An RbTree Family Drama: Exploiting a Linux Kernel 0-day Through Red-Black Tree Transformations by William Liu & Savino Dicanosa
    Download
    03406.9K
  26. Show more posts