muffinx (@_muffinx) header
muffinx (@_muffinx) profile picture

Security Researcher @_setuid0_

/lib/modules/$(uname -r)
Joined November 2018
Photo by muffinx (@_muffinx)Photo by muffinx (@_muffinx)Photo by muffinx (@_muffinx)Photo by muffinx (@_muffinx)Photo by muffinx (@_muffinx)Photo by muffinx (@_muffinx)Photo by muffinx (@_muffinx)Photo by muffinx (@_muffinx)Photo by muffinx (@_muffinx)Photo by muffinx (@_muffinx)
A *massive* thanks to our trainer @_muffinx and our coach Miro (no Twitter) for all your support before and during the competition and making it happen! ❤
1
1
1
3
Just testing something @SHC_Challenge #GenshinImpact
1
I'm happy to present...D-LINKGATE - A Preauth RCE to Root Chain on D-Link DAP-2020 devices found by @_muffinx and me. Patch your devices ASAP (suid.ch/research/DAP-2020_Pr…) #CyberSecurity #VulnResearch
5
8
D-LINKGATE - A Preauth RCE to Root Chain on D-Link DAP-2020. Patch your devices ASAP suid.ch/research/DAP-2020_Pr…
Meet our first-place winner! @_muffinx receives one-month premium access to Hacktory, merch, and a ticket to the Hacktivity conference
1
2
2
Our #CTF begins... now! Go: quest.hacktory.ai/ 🏆Prizes 𝟭𝘀𝘁 𝗽𝗹𝗮𝗰𝗲 - one-month premium access to Hacktory, merch (T-shirt, pin), a ticket to @hacktivityconf 𝗣𝗹𝗮𝗰𝗲𝘀 𝟮-𝟯 - premium access to Hacktory, merch 𝗣𝗹𝗮𝗰𝗲𝘀 𝟰-𝟭𝟬 - premium access to Hacktory
1
4
9
This just blows my mind. From a chip encased in silicon, stripping each layer away until you see the ROM and then using 50x magnification you can see the binary 0 and 1s. @akacastor this is nerd pr0n and a half
14
210
11
761
Zeek Community CTF by @Zeekurity was really fun! A splunk instance, CTFd and some nice IR challs, loved it :) Zeek is a great help with CTF .pcap's #ctf #zeek
1
1
13
I accidentally got an exposed docker service (CTFd) running during #RuCTFe, I had a good laugh when I saw a few minutes ago someone registered as "Bushwhackers" on my CTFd (maybe the real Bushwhackers?) @RuCTFe Loved the CTF :)
1
3
Oh yeah and congrats to Bushwhackers to win my CTF during #RuCTFe xDDDDDD
We just published Release #2 featuring the officialy approved X-Forwarded-For HTTP Header Injection and a #pit starter guide for new participants. Get it on suid.ch #Evoting #Cybersecurity #Bugbounty
You can now download our #security reports of the swiss evoting system, including a code injection #vulnerability from our website suid.ch #EVoting #Cybersecurity #BugBounty
muffinx retweeted
So bounties for solutions to the Birch and Swinnerton-Dyer conjecture, Hodge conjecture, Navier–Stokes existence and smoothness, P versus NP problem, Poincaré conjecture, Riemann hypothesis, and Yang–Mills existence and mass gap are now worth less than an iOS RCE 0day. Yikes.
1
15
3
54
muffinCTF: Congratulations to our winners! 🥇Mrmaxmeier: 1'021'715 points 🥈explo1t: 896'065 points 🥉sunscan: 877'896 points Good job guys, you played strategically. My colleague xorkiwi will contact you for a small prize! :D And for everyone else, also good job!!! =)
1
1
muffinCTF: At 14:00 the winners of muffinCTF will be announced! :D
1
muffinCTF: ⛳️🎄Hackvent Day 23 Flag 🎄 (muffinCTF Day 3) released. :)
muffinCTF: Hackvent Day 22 Flag (muffinCTF Day 2) released! :D