@arinerron

professional hobby enjoyer, formerly @v12sec @Zellic_io

 Austin, TX
aarones.au/
Joined June 2016
  • Tweets261
  • Following83
  • Followers1K
55Media
saw this goated license plate today
1
4
1
38
1,340
PinTheft Linux LPE Aaron Esau published an LPE exploit for a page double-free bug in the RDS zerocopy implementation, which can be turned into a page-cache overwrite through io_uring github.com/v12-security/pocs…
6
35
2,481
copilot @ github.com system prompt, if anyone's curious :P pastebin.com/raw/QxStUnVm
1
3
466
dump of the ability prompts: pr-reviewer: pastebin.com/raw/aAseRTRq pr-summary: pastebin.com/raw/H5W3sRRw pr-understanding: pastebin.com/raw/cRFHfEDu repo-overview: pastebin.com/raw/XiicYPSS stack-trace-debugging: pastebin.com/raw/rkZdKM59
1
2
312
this tweet aged well...
Brendan Dolan-Gavitt
@moyix30 Nov 2022
Replying to @moyix
One slight mistake here– it should be 36 A's, not 32. So we're still safe from AI hacking the planet.
2
303
2fe97c16b6e6011d968e3fc7bd067ec2926209482dc5127fc35832fa953610a4
1
1
3
1,262
more replies
62a3f631131ab43b42d6a9f8492fbbbc1e899a60189a72f29826be895ccd745f /home/aaron/fn2.zip
1
1
637
$ sha256sum ~/windows1.txt bb9099b8347b61c590a517ab9e683274e611925a7da93a9154783d2a65f1d830 /home/aaron/windows1.txt
119
if you use arch btw, this one's for you
V12
@v12secMay 19
linux LPE in rds kernel module
4
837
echo 'rxrpc decrypt-before-verify pagecache corruption' | sha256sum xitter.cf/v12sec/status/20558394…
aaron@arinerronMay 8
2fe97c16b6e6011d968e3fc7bd067ec2926209482dc5127fc35832fa953610a4
406
used the root RCE bug to patch the root RCE bug on mine :)
V12
@v12secMay 18
unauthenticated root RCE on TerraMaster TOS4 NAS appliances. (+free additional LPE) something light for sunday. bigger stuff this week! :-)
372
aaron retweeted
cts🌸
@gf_256May 15
honestly just blacklist all the kernel modules at this point
V12
@v12secMay 15
new fragnesia variant (unpatched)
5
37
1
538
36,106
aaron retweeted
Zellic
@zellic_ioApr 30
The core utilities that run every Linux system have been rewritten in Rust. We audited them. Before shipping uutils coreutils with Ubuntu 26.04, @Canonical commissioned Zellic for an external security audit. Two rounds, fixes contributed directly upstream. Full report below.
3
20
4
172
77,138
I'm glad tokens are basically free with subscriptions :p
1
1
1,555
aaron retweeted
cts🌸
@gf_256Feb 21
V12 is now live for open beta. It can: - Find valuable bugs - Generate working, runnable PoC - Generate patch and test the PoC against it In our testing during audits at Zellic, Zenith, and Code4rena we've been consistently impressed. Best of all: it's free. (Don't abuse it!)
pashov
@pashovFeb 20
Replying to @claudeai
Impressive. Very nice. Now do this, but for smart contracts
20
74
15
497
127,408
We took the second place! Many thanks @andykoo @push0ebp @arinerron @0xfrenchkebab for accepting me to the team, we wouldn't make it without all of you. Also appreciate the organization, it was top notch (despite the constant confetti rain)
Wonderland
@Wonderland20 Nov 2025
The Wonderland CTF was a blast! Huge congrats to all the teams, especially “STACK TOO DEEP”, “NADA ESPECIAL” and “SECSEE”. Oh, also: apply.wonderland.xyz 👉👈
1
3
1
32
7,212
cars are such a fun reversing target
6
470
The first step in replacement of my job by AI :0 Check out our state-of-the-art auto auditooor @zellic_io. I think nothing comes close in eliminating noise.
Zellic
@zellic_io25 Sep 2025
Bad auditors miss obvious bugs. We built an AI tool that finds them. Introducing V12: the only autonomous Solidity auditor that actually finds Highs and Criticals. We'll be releasing it for free. V12 finds Crits in Zellic audits, High/Mediums in Cantina, and a bug in Pendle.
3
377
master sushi enjoyooor @ret2jazzy
7
582
Load more