@rootconorg goon & CFP Reviewboard, @hacknotcrime advocate, contributed some msf code, F&AM #badgelife #carhacking #ADDVulcan
Philippines
Joined October 2011
- Tweets20.2K
- Following6.1K
- Followers5.7K
- Likes12.8K
Pinned Tweet
Two vulnerabilities in Advantech were found by our team during the SPIRITCYBER-24 IoT / OT Hackathon in Singapore: CVE-2025-48466 and CVE-2025-48470.
Our Poc for CVE-2025-48470: github.com/shipcod3/CVE-2025…
Advisory: csa.gov.sg/alerts-and-adviso…
Jay Turla retweeted
My take on turning the ESP32-S31 into an SDR: up to 40 MS/s at 8-bit, VITA-49 over gigabit Ethernet, straight into gqrx.
github.com/alphafox02/s31-sd…
Jay Turla retweeted
Let's talk about the php2shell situation 24h later...
youtube.com/watch?v=SP7y1h0l…
Jay Turla retweeted
Guys I do sometimes prompt like… “find me a crit, make no mistakes” but only because I have 70+ thoroughly researched and defined skills for my custom harness…
Jay Turla retweeted
Andy Nguyen (@theflow0) presents at #TheSAS2026 on how he hacked the PS5 hypervisor (twice, with two amazing bugs!) and got Linux running on the console, with Steam games playable on it!!! 🤯
Jay Turla retweeted
Alfie CG (@alfiecg_dev) dissects the SPTM bypass used in Coruna (it also exploits AGX and uses more obscure hardware registers 👀) #TheSAS2026
Jay Turla retweeted
Are bug bounties dead in 2026?
Not even close. @simonkoeck just found an RCE in Google.
A Flask session cookie on developers.google.com was signed with a secret key, and that same key let him forge a session into deserializing a malicious pickle payload, straight to code execution across Google's dev sites.
Google paid him $90,000.
Bug bounties aren't dead. You just need the mindset to look for angles nobody else has checked yet.
I wrote a full guide on how to start (or come back to) bug bounties in 2026
Link below, plus Simon's write-up. 👇
Jay Turla retweeted
All my friends in India
Positive Hack Talks soon in Goa
By @PTsecurity_EN / @ptsecurity
For all who interested in cybersecurity talks , amazing talks
Totally completely free
Now you can apply , if you have a nice talk you can apply as well
All from here
phtalks.pt.community/goa?fbc…
Or you can chat directly to @amoshkov
#Cybersecurity #bugbounty #infosec #goa
Jay Turla retweeted
What was that. @rootconorg was straight-up WILD.
That moment when your camera roll has almost nothing that's appropriate to post 😅
See you next year, ROOTCON. SHOT SHOT SHOT!
Jay Turla retweeted
LET'S GO INDIA! 🇮🇳 #PHTalks is coming back: Goa, Dec 10!
CFP is OPEN: talks, community stand-ups, villages. Grassroots communities are VERY welcome!!
Speakers: travel & stay on us. Entry is free.
Beach resort, chill vibes... and sunset:
phtalks.pt.community/goa
Jay Turla retweeted
New RC20 Talks Video
AI Assisted C2 Development by Gabriel Cruz (meaty)
youtube.com/watch?v=_PC4XT4V…
Go check them out!
#ROOTCON20 #Archives #AIAssistedC2
Jay Turla retweeted
OpenWrt One WB receive-only SDR. MT7981 Wi-Fi radio taps raw 14-bit IQ @ 40 MSps, streams VITA 49 over 2.5GbE to a browser spectrum/waterfall. Flashable release + one-command setup. v0.1
feedback and critique welcome:
github.com/alphafox02/openwr…
Jay Turla retweeted
In a few minutes I will be giving a talk on deobfuscation at the Virus Bulletin conference in Seville. If you are hanging out at #VB2026, come watch it to learn some new things about IDA!
Jay Turla retweeted
W00t!! It took three attempts and lots of drama, but HaeJung Yang (@haehaeYang) of Out of Bounds (@oobs_io) successfully exploited Dynamo in the AI Infrastructure category. Once they regain their breath, they head off to the disclosure room to provide details. #Pwn2Own
Jay Turla retweeted
We're hiring an FPGA & embedded engineer to join our hardware team. Can you make a CAN core from scratch in VHDL?
Email [email protected] with cool projects you've built!
Jay Turla retweeted
The full schedule for #Pwn2Own Ireland 2026 is now live! You can find it at zerodayinitiative.com/blog/2…. And check out pwn2own.zerodayinitiative.co… for live leaderboard updates throughout the day. #P2OIreland
Jay Turla retweeted
It seems that many Samsung Galaxy S26 & Pixel 10 bugs have been submitted to Pwn2Own this year. There are a lot of Koreans too. Good luck to all participants.
👀👀
Pixel 10 Remote : 3 exploits
Pixel 10 USB : 1 exploit
Samsung Galaxy S26 Remote : 7 exploits
zerodayinitiative.com/blog/2…