#Exploitdev

PS5 14.10 — The research is entering a critical stage. WebKit primitives, heap stability and memory disclosure are the main focus. The biggest remaining challenge is a reliable kernel exploit chain. No finish line yet, but progress matters. #PS51410 #PS5Jailbreak #ExploitDev

🚨 Redis server RCE PoC dropped use-after-free in tlsProcessPendingData() patched in 8.8.2 #ExploitDev #BinarySecurity #InfoSec

Professors have approximately zero free time. And yet. 👀 Turns out LLMs as super assistants make exploit dev manageable and fun again. Pixel 10 root exploit (LPE) with an N-day. No public exploits exist for this thing. Maybe I should teach a course on this. #LLM #ExploitDev

Awesome-Red-Teaming just hit 1k stars. phase map, not a 2018 graveyard. AD/Entra · EDR bypass · C2 · AI red team · fuzzing shoutout @hetmehtaa @PadhiyarRushi for the push. #RedTeam #ExploitDev #InfoSec

Important note to those new to this account. The course below is completely FREE. I know someone (maybe more) has ripped the videos & probably now the labs & is selling them on @udemy. Please do not pay for this course, it is FREE! #ExploitDev #Offsec

Best books, tutorials and courses to learn about exploit development #infosec #pentest #exploitDev

Course materials for Modern Binary Exploitation by RPISEC - outstanding material !!! Thank you for sharing @RPISEC #infosec #pentest #exploitDev

Using Syscalls to Inject Shellcode on Windows #infosec #pentest #exploitDev

🚨 CVE-2026-43786 macOS CoreServices local app to root. CVSS 7.8. Apple's line is short. an app may be able to gain root privileges. Malwation shipped the C PoC and a video of it landing. #macOS #ExploitDev #InfoSec

Full linux LPE just popped in my lab. uid=0 on the demo. full writeup + PoC after disclosure. tech details stay closed until then. #Linux #LPE #ExploitDev #InfoSec

🚨 another potato just dropped CouchPotato: SeImpersonate → SYSTEM ETW + AMSI patched. indirect syscalls. service account or admin → NT AUTHORITY\SYSTEM #ADSecurity #ExploitDev #InfoSec

Thanks to @eLearnSecurity and @ine for their support, my "Offensive Software Exploitation" course will also be recorded in English... You can check what will be covered here: YES this is a FREE course!!! #Offsec #Exploitdev #Software #Exploitation

Tool written in python3 to determine where the AV signature is located in a binary/payload - super useful for AV evasion 😉 #infosec #pentest #exploitDev

Sandbox evasion using_vba_referencing-x33f_con #infosec #pentest #exploitDev

🚨 another Nightmare 0day PoC just dropped ShieldCrash: Defender patch bypass arbitrary file read as SYSTEM ShieldBreak fix (CVE-2026-69414) still leaves a hole. works on Sept 2026 patch. #VulnerabilityResearch #ExploitDev #InfoSec @MSNightmare2000

A curated list of fuzzing resources ( Books, courses - free & paid, videos, tools, tutorials & vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis. #infosec #pentest #exploitDev

IIS AppPool RCE is not the end of the story. AppPool hits AD CS RPC → Windows promotes it to the machine account → Machine cert → TGT → S4U2Self admin. no Potato required. #ADSecurity #ExploitDev #InfoSec

Chompie's Exploit Dev Roadmap: Zero to Kernel (Free Paths for Everyone) 🧵 #ExploitDev #VulnResearch #Pwn2Own #Cybersecurity

Chompie of IBM X-Force Offensive Research (XOR) used a race condition to escalate privileges on Red Hat Enterprise Linux for Workstations, earning $20,000 and 2 Master of Pwn points. The 🐐

Linux Exploit Development Techniques #infosec #pentest #exploitDev

CVE-2018-0886- PoC CredSSP from Win7 to win2016 -> RCE 😱 #infosec #exploitDev #vulnerability