0xor0ne
LightNews LightNews
banner
0xor0ne.bsky.social
0xor0ne
@0xor0ne.bsky.social
1.2K followers 20 following 460 posts
| CyberSecurity | Reverse Engineering | C and Rust | Exploit | Linux kernel | PhD | Only My Opinions :) |
Posts Replies Media Videos
0xor0ne.bsky.social
Interesting short blog post on how electronic passports cryptography works

blog.trailofbits.com/2025/10/31/t...

Credits Joop van de Pol

#infosec #embedded
November 9, 2025 at 10:44 AM
0xor0ne.bsky.social
Analysis and exploitation of a Use-After-Free vulnerability in the Linux network packet schedule (CVE-2025-38001)

syst3mfailure.io/rbtree-famil...

#infosec #Linux
November 8, 2025 at 11:55 AM
0xor0ne.bsky.social
XLoader malware analysis with generative AI

research.checkpoint.com/2025/generat...

#infosec #malware
Leveraging Generative AI to Reverse Engineer XLoader
Check Point Research succeeded in understanding the infamous malware family, Xloader, by leveraging Generative AI
research.checkpoint.com
November 7, 2025 at 11:05 AM
0xor0ne.bsky.social
Valve Anti-Cheat (VAC) reverse engineering

codeneverdies.github.io/posts/gh-2/

#cybersecurity
November 6, 2025 at 3:19 PM
0xor0ne.bsky.social
Apple SEAR is hiring offensive security researchers!

We’re looking for talented researchers across multiple areas of security.

Check out the job description here:
jobs.apple.com/en-us/detail...

Feel free to reach out if you have any questions.

#infosec
Offensive Security - Researcher - Jobs - Careers at Apple
Apply for a Offensive Security - Researcher job at Apple. Read about the role and find out if it’s right for you.
jobs.apple.com
October 24, 2025 at 9:44 AM
0xor0ne.bsky.social
Great deep-dive on AMD Zen microcode hacking and a signature-validation flaw

bughunters.google.com/blog/5424842357473280/zen-and-the-art-of-microcode-hacking

#infosec
October 20, 2025 at 3:13 PM
0xor0ne.bsky.social
Collection of blog posts, write-ups, papers and tools related to cybersecurity, reverse engineering and exploitation

github.com/0xor0ne/awes...

#cybersecurity #infosec
GitHub - 0xor0ne/awesome-list: Cybersecurity oriented awesome list
Cybersecurity oriented awesome list. Contribute to 0xor0ne/awesome-list development by creating an account on GitHub.
github.com
October 19, 2025 at 11:36 AM
0xor0ne.bsky.social
Presentations about getting started with Linux kernel exploitation

"Linux Kernel Exploitation for Beginners" by Kevin Massey:
rvasec.com/slides/2025/...

"Control Flow Hijacking in the Linux Kernel" by Valeriy Yashnikov
pt-phdays.storage.yandexcloud.net/Yashnikov_Va...

#Linux #infosec
October 19, 2025 at 11:34 AM
0xor0ne.bsky.social
Teardown and exploitation of the Nokia Beacon 1 Router

spaceraccoon.dev/nokia-beacon...

#iot #infosec
Hacking the Nokia Beacon 1 Router: UART, Command Injection, and Password Generation with Qiling
The Nokia Beacon 1 proved to be an interesting journey covering the full spectrum of techniques from hardware debug interfaces to firmware extraction and finally both static and dynamic analysis. I wa...
spaceraccoon.dev
October 18, 2025 at 11:05 AM
0xor0ne.bsky.social
Synology TC500 smart camera: Remote code execution (RCE) vulnerability

blog.infosectcbr.com.au/2025/08/01/e...

#infosec #embedded
October 17, 2025 at 7:20 PM
0xor0ne.bsky.social
Excellent blog post on bypassing Ubuntu’s Unprivileged Namespace Restriction

u1f383.github.io/linux/2025/0...

#infosec
October 14, 2025 at 5:55 PM
0xor0ne.bsky.social
Short introduction to Windows heap exploitation

mrt4ntr4.github.io/Windows-Heap...

#infosec
Windows Heap Exploitation - From Heap Overflow to Arbitrary R/W
TLDR I was unable to find some good writeups/blogposts on Windows user mode heap exploitation which inspired me to write an introductory but practical post on Windows heap internals and exploitati
mrt4ntr4.github.io
October 13, 2025 at 5:21 PM
0xor0ne.bsky.social
Fault injection for secure boot bypass and secret extraction targeting RP2350

www.usenix.org/system/files...

#infosec
October 12, 2025 at 11:59 AM
0xor0ne.bsky.social
3-parts series on vulnerability research and exploitation of the SMB3 Linux Kernel Server (ksmbd)

Part 1: blog.doyensec.com/2025/01/07/k...
Part 2: blog.doyensec.com/2025/09/02/k...
Part 3: blog.doyensec.com/2025/10/08/k...

#infosec
October 8, 2025 at 8:20 PM
0xor0ne.bsky.social
Exploiting a libANGLE offset integer underflow read the Chrome WebGPU heap

qriousec.github.io/post/oob-angle

#infosec
October 5, 2025 at 11:25 AM
0xor0ne.bsky.social
Worldline Yomani XR payment terminal reverse-engineering and security analysis

stefan-gloor.ch/yomani-hack

#embedded #infosec
October 4, 2025 at 10:51 AM
0xor0ne.bsky.social
Exploiting vulnerabilities in Supermicro BMC (CVE-2025-7937 and CVE-2025-6198)

www.binarly.io/blog/broken-...

Credits Anton Ivanov

#infosec
October 3, 2025 at 11:18 AM
0xor0ne.bsky.social
Breaking Server SGX via DRAM Bus Interposition

wiretap.fail

#infosec
WireTap: Breaking Server SGX via DRAM Bus Interposition
Breaking Server SGX via DRAM Bus Interposition
wiretap.fail
October 2, 2025 at 6:38 PM
0xor0ne.bsky.social
Analysis of GrapheneOS hardened malloc libc allocator

www.synacktiv.com/en/publicati...

Credits Nicolas Stefanski

#infosec
September 24, 2025 at 8:28 PM
0xor0ne.bsky.social
Flipping the R/W bit in the page table entry of a mapped file to gain write access

ptr-yudai.hatenablog.com/entry/2025/0...

#Linux #infosec
September 17, 2025 at 6:01 PM
0xor0ne.bsky.social
Exploiting CVE-2024-50264, a Linux kernel UAF vulnerability due to a race condition in AF_VSOC sockets

a13xp0p0v.github.io/2025/09/02/k...

#infosec #Linux
September 14, 2025 at 11:22 AM
0xor0ne.bsky.social
Reliable Linux system call interception

blog.mggross.com/intercepting...

#cybersecurity #Linux
September 12, 2025 at 7:12 PM
0xor0ne.bsky.social
Devirtualizing VMProtect and Themida

nac-l.github.io/2025/01/25/l...

#infosec #reverseengineering
Lifting Binaries, Part 0: Devirtualizing VMProtect and Themida: It’s Just Flattening?
Table Of Contents
nac-l.github.io
September 8, 2025 at 9:00 AM
0xor0ne.bsky.social
Practical guide to fuzzing the Binder kernel driver using the Linux Kernel Library (LKL)

androidoffsec.withgoogle.com/posts/binder...

Credits Eugene Rodionov, Gulshan Singh and Zi Fan Tan

#infosec #android
September 6, 2025 at 1:02 PM
0xor0ne.bsky.social
Reverse engineering and decryption of Synology encrypted archives

www.synacktiv.com/en/publicati...

Credits Théo Fauché

#infosec
August 30, 2025 at 10:40 AM