Last month I posted a write-up for a bug I found on the FiiO M6. At the time, I had never written a kernel exploit, but I decided this was as good a chance as ever to give it a shot.
I am proud to say I have now written ~one~ kernel exploit
Jack M ๐ดโโ ๏ธ
605 posts
- Vuln research feels like the only career path where in the context of a normal day, I could switch tabs between a peer-reviewed academic paper and a high schooler's blog
- Did I get nerd sniped by a listening port on my eink device? Maybe Blog on the worst 0click RCE soon
- Don't worry, instead of this many of my teachers have opted for open note 24 hours exams where the questions are so open ended and difficult that you are lucky to finish within the time allotted. It's not like I needed those full days for other things either.
- A bit of personal news - I am super excited to be starting a new position as a vuln researcher with @InterruptLabs ๐
- Went sub-12 hours in my first Ironman! What an experience - Iโll be back #wehackhealth
- I'm gonna go out on a limb here and say I probably won't get any form of response in the next 60 daysDid I get nerd sniped by a listening port on my eink device? Maybe Blog on the worst 0click RCE soon
- Just hit 1k followers for @exploitsclub. Back in February when we about 100 I scribbled it as a goal for the end of the year I have a lot of cool ideas for the project outside of a boring newsletter but Im really happy with the progress. Still procrastinate it each week though ๐VR resources to feed your motivation and imposter syndrome ๐๏ธ @SinSinology is the Michael Jordan of embarrassing Progress @Claroty P2O SOHO smashup vulns Ghostscript pwnage from @CodeanIO @spaceraccoonsec pops browser extensions โ jobs and more ๐ blog.exploits.club/exploits-club-โฆ
- Been running this for the better part of 4 months now - originally created because I was tired of scrolling Twitter to find VR related news. The downside is now I scroll Twitter 3x as much๐ฐ SIGSEV: newsletter release detected ๐ Windows Kernel Exploitation Primer from @33y0re @gabe_k pops the new Windows update before it even drops ๐ ๐ @Synacktiv decides to reverse a proprietary protocol to avoid using a Mac + jobs, bugs and more ๐ blog.exploits.club/exploits-club-โฆ
- Sad it's over! Huge thanks to @KringleCon and @edskoudis. Already looking forward to next year! I saved the holidays and stopped the villain! holidayhackchallenge.com Don't miss out on SANS #HolidayHack x @KringleCon holidayhackchallenge.com
- My FiiO M6 presentation from BSidesRDU is now up on YouTube :)
- This was originally going to be a tweet thread, but I couldn't condense it enough, so I have posted it on Medium. How CTFs Landed Me A Job As An Offensive Security Engineer 0xcalico.medium.com/how-ctfs-landeโฆ








