HackSys Team retweeted
My research blog about #JSCeal is finally out! It was quite a journey. I hope you will like it! // #V8 #bytecode #malware #deobfuscation
#JSCeal didn't give up its secrets willingly.
Following our #BlackHat2026 talk, we're releasing Breaking the Seal: our research on statically deobfuscating compiled, obfuscated #V8 #malware.
Inside: the methodology, the open-source toolkit, and the malware capabilities recovered along the way.
research.checkpoint.com/2026…
HackSys Team retweeted
Slides from my today's talk at #BlackHatUSA2026 : "Breaking the Seal: Static Deobfuscation of Compiled #V8 JavaScript Bytecode #Malware" : speakerdeck.com/hshrzd/break… // #BHUSA #BlackHat2026
Replying to @FAMASoon @HackSysTeam
Here are the slides for my Scudo talk yesterday for the MobileHackingLab Con: github.com/3sjay/talks/blob/… it has two extra slides I haven't addressed in my talk. One describing two common misconceptions and one showing the shuffle count for each class.
HackSys Team retweeted
Started a blog series on writing a minimal ARM hypervisor from scratch — boots as a UEFI app, claims EL2, identity-maps everything through Stage 2.
Chapter 0 just dropped: ARM vs x86 virtualization, UEFI internals, EDK2 setup, first app at EL2.
0xabe.io/hypervisor/arm/2026…
HackSys Team retweeted
The slide is available now: github.com/ThomasKing2014/sl… . Thanks for the fantastic conference @POC_Crew. Happy New year.
HackSys Team retweeted
Slides from @st424204 & @Peterpan980927 's talk at @codeblue_jp is now live!
“AI Accelerated Exploiting: Compromising MTE-Enabled Pixel from DSP Coprocessor.”
Slides: github.com/star-sg/Presentat…
HackSys Team retweeted
While y’all discounting your mediocre courses, @zerodaytraining is doubling down on my pro offers:
- Foundations + Hypervisor = Escape Bundle (new)
- Foundations + Browser = Remote Bundle (new)
- Foundations + Hypervisor + Browser = Elite Bundle (new)
That’s a full roadmap from zero to zero day engineer.
Winter Bundles are here ✨🎄✨
Bundles are one of our most requested features.
Today, we've put together our best self-paced trainings
to keep one's head cool on Christmas
and well into 2026.
Limited availability through mid January
Details: zerodayengineering.com/winte…
HackSys Team retweeted
Watch XOR’s talk CUDA de Grâce: Owning AI Cloud Infrastructure with GPU exploits
Kernel + driver bugs aren’t just a LPE problem, they’re a cloud problem. With the explosion of AI in the cloud, NVIDIA’s GPU drivers have become a valuable attack surface
youtu.be/Lvz2_ZHj3lo
HackSys Team retweeted
My HEXACON talk video is out! It covers a small race condition in the Linux kernel’s io_uring. I recommend watching it at 1.25× speed since I’m still not great at speaking 😅
youtube.com/watch?v=Ry4eOgLC…
Here is the slide!
u1f383.github.io/slides/talk…
HackSys Team retweeted
Bug Tamer: Turning Limited Heap Overflow into Full VMware Escape by Yongkang Jia & Xiao Lei
powerofcommunity.net/2025/sl…
HackSys Team retweeted
Made a pwn challenge for this year’s HITCON CTF, which required participants to bypass PAC, BTI, and deal with relative vtables. Here’s the write-up:
bruce30262.github.io/hitcon-…
Check it out if you're interested🙂
HackSys Team retweeted
I posted a short blog about how a Samsung GPU vulnerability (CVE-2025-21479) can be leveraged for an LPE on affected devices
xploitbengineer.github.io/CV…
HackSys Team retweeted
It’s time to publish the blog post about the bug that won at P2O Berlin 2025. Enjoy!
With this post, I mark my last moment as a researcher at @oobs_io. I’m moving on to a new place for a fresh start.🔥🦎
oobs.io/posts/four-bytes-one…
HackSys Team retweeted
Recently attended an amazing Windows Kernel Exploitation training at @_c0c0n_ by @HackSysTeam's Ashfaq Ansari! 🔥
Ashfaq was an incredible trainer - made complex kernel concepts easy to grasp. Also won the CTF! 🏆
Big thanks to Ashfaq and HackSysTeam! 🙏
HackSys Team retweeted
Bidding farewell to one of the last Windows kernel address leaks, CVE-2025-53136 (KASLR bypass). Sometimes, even patches can open new doors for exploitation.
crowdfense.com/nt-os-kernel-…
HackSys Team retweeted
Check out our newest blog about how we took advantage of a WebGPU feature to turn an integer underflow bug into an arbitrary read in Chrome’s WebGPU. This bug was fixed by Google long ago, but our ticket is still restricted.
qriousec.github.io/post/oob-…
by @lanleft_ + @__suto
HackSys Team retweeted
Last weekend, I participated in corCTF and solved the Android Pwn challenge - corphone. It was a great challenge, and I learned a lot from it.
Here's my write-up :)
u1f383.github.io/android/202…
HackSys Team retweeted
My new article: "Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel"⚡️
I tell a bug collision story and introduce my pet project kernel-hack-drill, which helped me to exploit the hard bug that received @PwnieAwards 2025
a13xp0p0v.github.io/2025/09/…



























