Twitxy
Saved
@j00ru's profile picture
View on X

j00ru//vx

@j00ru

(Mostly) Windows hacker & vulnerability researcher. Google Project Zero. @DragonSectorCTF
Switzerland j00ru.vexillium.org Joined April 2010
821 Following 37K Followers 1.3K Posts

Latest posts 5

j00ru//vx @j00ru
Congrats to the winners of this year's Dragon CTF, and the 5⃣ teams that solved my small Linux pwnable "Nim" challenge!

As usual, I've uploaded my write-up and exploit on GitHub: github.com/j00ru/ctf-task…
Dragon Sector @DragonSectorCTF Nov 28, 2021
Dragon CTF 2021 is officially over!
Congratulations to the winners:
1. Balsn (@balsnctf)
2. organizers (@0rganizers)
3. More Smoked Leet Chicken (@leetmore)
Thank you for playing - GG!
View quoted post on X
j00ru//vx @j00ru
Fixed this month: CVE-2021-26863, a race condition/use-after-free in win32k.sys demonstrating @tiraniddo's excellent Memory Access Trapping technique in Windows (googleprojectzero.blogspot.com/2021/01/window…). It was a fun exercise to do some auditing in search of the specific code pattern.
projectzero.google Windows Exploitation Tricks: Trapping Virtual Memory Access Posted by James Forshaw, Project ZeroThis blog is a continuation of my series of Windows exploita...
Project Zero Bugs @ProjectZeroBugs Mar 12, 2021
Windows Kernel win32k UAF of the PDEVOBJ object via a race condition in NtGdiGetDeviceCapsAll bugs.chromium.org/p/project-zero…
View quoted post on X
j00ru//vx @j00ru
Really loving this collaboration with font guru @abrax5, who knows typography inside out, far beyond just the exploitation-specific bits. So much potential for learning from each other 🤓 and finding some cool multi-browser memory corruption bugs in the meantime!
j00ru//vx @j00ru
GG! I pushed my Windows x64 pwnable binary together with a brief write-up and exploit code on GitHub: github.com/j00ru/ctf-task…
Dragon Sector @DragonSectorCTF Nov 22, 2020
The Dragon CTF 2020 is now over!

Congratulations to the winners:
🥇Perfect ⚔️ Guesser (@pb_ctf + @GuesserSuper)
🥈ALLES! (@allesctf)
🥉hxp (@hxpctf)

Thanks to all participating teams, and to our prize sponsor, @SumoLogic!

Full scoreboard: ctf.dragonsector.pl/?scoreboard
View quoted post on X
j00ru//vx @j00ru
The bug report is now public at bugs.chromium.org/p/project-zero…
j00ru//vx @j00ru Jul 13, 2020
For Samsung, there are new vulnerabilities in the custom Qmage codec fixed as SVE-2020-17675 (no CVE yet), which have similar severity to the Qmg bugs exploited in April. Full details in the P0 tracker are restricted until 90 days elapse under our 2020 disclosure policy trial.
View quoted post on X