f00fc7c800 (@f00fc7c800) / X

Pinned

Nov 11, 2025

I know people wait for me to post material from this year pwnctf.ro :)) wait a little longer the videographer hasn't finished editing yet. Anyways I would like to announce that we officially organise second edition next year :) . We have some preliminary dates :)

zdi decided not to buy it so here it is ,

GitHub - SpiralBL0CK/Remote-buffer-overflow-over-wifi_stack-in-wpa_supplicant-binary-in-android-1...

Cooking…

Hello twitter, since it's christmas and everybody get's a present I thought of giving one too: I finish part one of analysing browser process up to the point where we have the renderer starting , how you can attach to it and where to bp to debug it. Enjoy github.com/SpiralBL0CK/Br…

f00fc7c800

@f00fc7c800

Jul 14, 2024

pwn.college is qwel but so is this cs4401.walls.ninja

I strongly recommend checking this if chrome is in your interest:githubmemory.com/repo/fuzzheade… and also this githubmemory.com/repo/fuzzheade… and also zon8.re

f00fc7c800

@f00fc7c800

Jul 16, 2023

ohh wow didn't even knew this exists: phi1010.github.io/2020-09-14-bge… cool Binary Heap Exploitation on OP-TEE

phi1010.github.io

BGET Explained

Binary Heap Exploitation on OP-TEE (1/2)

maybe ppl like this one better tbh.. github.com/SpiralBL0CK/po… tho this is just a rough skeleton needs testing (maybe ppl will want to build upon this) eventually will turn it into eop, for now just a dos(code untested). EoP strat is literally 1:1 with this idafchev.github.io/blog/wrmsr/

poc-for-CVE-2020-13519-still-under-construction-/dos.c at main · SpiralBL0CK/poc-for-CVE-2020-135...

windbg.exe chrome.exe -G -o --renderer-startup-dialog --no-sandbox --wait-for-debugger-children=renderer --renderer-process-limit=1 --allow-pre-commit-input --allow-sandbox-debugging and .childdbg 1 in case you want to debug a renderer :)) and a tone of patience

f00fc7c800

@f00fc7c800

Sep 30, 2024

i know ppl still wait for the chain on realtek driver. it's coming have some patience... In meantine just tested this works fine .. CVE-2024-45383 poc

GitHub - SpiralBL0CK/CVE-2024-45383: poc for CVE-2024-45383

Found my first 0day yesterday, will publish video and details little bit later today

Ok so as promissed working exploit for CVE-2021-3345. Soon after i sleep and rest a little the blogpost incoming :) . Mom we did it we recreated stuff from whoami :)