@k0st

Security/Hack. FLOSS security software contributor.

github.com/kost
Joined May 2008
  • Tweets11.8K
  • Following3.1K
  • Followers1.7K
131Media
ULX3S FPGA In stock soon @MouserElec @MouserElecEU Place backorder now to ensure you get one.
ULX3S front and rear view

ALT ULX3S front and rear view

2
3
2
46
3,107
Happy @MilanGabor doing intro into the first #BSidesMaribor
3
8
216
Today in #Maribor - first #BSidesMaribor about to kick off this hot Saturday!
1
8
5
674
kost retweeted
BalCCon@BalCC0nJun 26
Remainder: CFP Closes July 1st! - cfp.balccon.org/balccon2k26-… #cfp #balccon #balccon2k26 #hacking #cybersecurity @k0st @vyrus001 @travisgoodspeed @MilanGabor @elkentaro @herrmann1001 @kisasondi ….

BalCCon2k26

Schedule, talks and talk submissions for BalCCon2k26

cfp.balccon.org
1
11
14
1,520
seems like everything is set for first #bsidesmaribor
1
4
16
847
First #bsides #belgrade is ready to kick off. Excited to participate!
1
1
7
381
kost retweeted
OtterSec
@osec_ioMar 5
We recently achieved guest-to-host escape by exploiting a QEMU 0day. We’ll share details on a new technique leveraging the latest glibc allocator behavior and what we believe is a novel QEMU-specific heap spray/RIP-control primitive. Writeup coming next week.
36
180
13
1,451
74,746
Replying to @k0st
@k0st kicking of @BSidesZagreb! Pssst… It’s always DNS! #bsidesZagreb
2
8
274
See you at @BalCC0n !
BalCCon@BalCC0n4 Sep 2025
#BalCCon2k25-Against the current is just around the corner on 19| 20| 21 September 2025!You don’t want to miss: @travisgoodspeed @MalwareUtkonos @gannimo @herrmann1001 @joegrand @GMahovlic @Th3PeKo @micko_mame @k0st …Secure your spot now at : 2k25.balccon.org/tickets/ #BalCCon
2
6
685
GitHub - cisagov/decider: A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework. github.com/cisagov/decider

GitHub - cisagov/decider: A web application that assists network defenders, analysts, and researc...

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework. - cisagov/decider

github.com
73
1
278
14,436
The entire 3rd-edition of @rossjanderson's "Security Engineering" is available free as PDFs now! cl.cam.ac.uk/archive/rja14/b…
3
119
5
239
32,198
See you in Zadar this week!
BSides Zadar@BSidesZadar5 Sep 2024
[SPEAKER ANNOUNCEMENT] BSides Zadar welcomes @k0st! Vlatko will uncover unique strategies in his talk: "Secrets of Password Cracking - Croatian Edition" 🗓️ Sept 13 | 📍 Hotel Kolovare, Zadar #BSidesZadar #CyberSecurity #BSides
Vlatko Kosturjak BSides Zadar

ALT Vlatko Kosturjak BSides Zadar

1
15
434
A great write-up on Linux process name stomping techniques from @haxrob h/t @thoughtb0x doubleagent.net/process-name…
1
80
4
241
20,639
Recommended Hacker wellness!
BalCCon@BalCC0n25 Jun 2024
Replying to @BalCC0n
@travisgoodspeed @ghidraninja @vanjasvajcer @k0st @vyrus001 @FuzzyAleks @ktemkin @obiwan666 @doctorow @elkentaro @carfucar @WillCaruana @maltman23 @ComplexEvo @gannimo @kurmus @UnaPibaGeek @sergeybratus @bojanz @JulienValiente
4
10
717
A 13 year old coded a botnet control framework that utilizes pastebin and github for control of hosts in red teaming… This makes the hacker in me so hopeful. Check out pastebomb when it’s dropped!
28
236
32
2,412
223,617
PoC Exploit Released for 0-day Windows Kernel of Privilege Vulnerability (CVE-2024-21338) : github.com/Nero22k/Exploits/… github.com/hakaioffsec/CVE-2… Details : hakaisecurity.io/cve-2024-21…
3
194
2
580
45,255
Btw, you don't need a Flipper Zero to "hack" dumb radio protocols. The piece of wire is enough. Check out how to receive and decode 433MHz radio signal just with a PC sound card.
41
902
117
4,102
443,239
Photos: @BSidesZagreb 2024 - helpnetsecurity.com/2024/03/… - @bojanz @infigois @advocatemack @GitGuardian @solardiz @k0st @Divertosecurity @mdecrevoisier @cocomelonckz @SrceHr #BSides #BSidesZagreb #cybersecurity #conferences #EU
4
1
8
4,911
Bluetooth vulnerabilities in Android, Linux, macOS, iOS and Windows can be exploited to pair an emulated bluetooth keyboard and inject keystrokes without user confirmation : github.com/skysafe/reblog/bl… credits @marcnewlin Slides : github.com/marcnewlin/hi_my_… CVE's : CVE-2024-0230 CVE-2023-45866 CVE-2024-21306
4
144
9
450
42,398
New blog post is out! Extracting the SecOC keys used for securing the CAN Bus on the 2021+ RAV4 Prime. icanhack.nl/blog/secoc-key-e… Research started all the way in 2022, but took many evenings of reverse engineering to get code execution. PoC: github.com/I-CAN-hack/secoc
8
88
2
309
39,216
Load more