
@rootconorg goon & CFP Reviewboard, @hacknotcrime advocate, contributed some msf code, F&AM #badgelife #carhacking #ADDVulcan
Philippines
Joined October 2011
- Tweets20.2K
- Following6.1K
- Followers5.7K
- Likes12.8K
Jay Turla retweeted
My take on turning the ESP32-S31 into an SDR: up to 40 MS/s at 8-bit, VITA-49 over gigabit Ethernet, straight into gqrx.
github.com/alphafox02/s31-sd…
Jay Turla retweeted
Let's talk about the php2shell situation 24h later...
youtube.com/watch?v=SP7y1h0l…
Jay Turla retweeted
Guys I do sometimes prompt like… “find me a crit, make no mistakes” but only because I have 70+ thoroughly researched and defined skills for my custom harness…
Jay Turla retweeted
Andy Nguyen (@theflow0) presents at #TheSAS2026 on how he hacked the PS5 hypervisor (twice, with two amazing bugs!) and got Linux running on the console, with Steam games playable on it!!! 🤯
Jay Turla retweeted
Alfie CG (@alfiecg_dev) dissects the SPTM bypass used in Coruna (it also exploits AGX and uses more obscure hardware registers 👀) #TheSAS2026
Jay Turla retweeted
Are bug bounties dead in 2026?
Not even close. @simonkoeck just found an RCE in Google.
A Flask session cookie on developers.google.com was signed with a secret key, and that same key let him forge a session into deserializing a malicious pickle payload, straight to code execution across Google's dev sites.
Google paid him $90,000.
Bug bounties aren't dead. You just need the mindset to look for angles nobody else has checked yet.
I wrote a full guide on how to start (or come back to) bug bounties in 2026
Link below, plus Simon's write-up. 👇
Jay Turla retweeted

Godfather Orwa 🇯🇴@GodfatherOrwaOct 20
🇯🇴!
JordanConnected via United States App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
All my friends in India
Positive Hack Talks soon in Goa
By @PTsecurity_EN / @ptsecurity
For all who interested in cybersecurity talks , amazing talks
Totally completely free
Now you can apply , if you have a nice talk you can apply as well
All from here
phtalks.pt.community/goa?fbc…
Or you can chat directly to @amoshkov
#Cybersecurity #bugbounty #infosec #goa
Jay Turla retweeted

Godfather Orwa 🇯🇴@GodfatherOrwaOct 12
🇯🇴!
JordanConnected via United States App StoreLocation may be affected by a proxy or VPN.Account-level information, not a live location or per-post device.
My First Article, if you like it retweet ♥, ill do more ♥
Jay Turla retweeted
What was that. @rootconorg was straight-up WILD.
That moment when your camera roll has almost nothing that's appropriate to post 😅
See you next year, ROOTCON. SHOT SHOT SHOT!
Jay Turla retweeted
LET'S GO INDIA! 🇮🇳 #PHTalks is coming back: Goa, Dec 10!
CFP is OPEN: talks, community stand-ups, villages. Grassroots communities are VERY welcome!!
Speakers: travel & stay on us. Entry is free.
Beach resort, chill vibes... and sunset:
phtalks.pt.community/goa
Jay Turla retweeted
New RC20 Talks Video
AI Assisted C2 Development by Gabriel Cruz (meaty)
youtube.com/watch?v=_PC4XT4V…
Go check them out!
#ROOTCON20 #Archives #AIAssistedC2
Jay Turla retweeted
OpenWrt One WB receive-only SDR. MT7981 Wi-Fi radio taps raw 14-bit IQ @ 40 MSps, streams VITA 49 over 2.5GbE to a browser spectrum/waterfall. Flashable release + one-command setup. v0.1
feedback and critique welcome:
github.com/alphafox02/openwr…
Jay Turla retweeted
In a few minutes I will be giving a talk on deobfuscation at the Virus Bulletin conference in Seville. If you are hanging out at #VB2026, come watch it to learn some new things about IDA!
Jay Turla retweeted
W00t!! It took three attempts and lots of drama, but HaeJung Yang (@haehaeYang) of Out of Bounds (@oobs_io) successfully exploited Dynamo in the AI Infrastructure category. Once they regain their breath, they head off to the disclosure room to provide details. #Pwn2Own
Jay Turla retweeted
The full schedule for #Pwn2Own Ireland 2026 is now live! You can find it at zerodayinitiative.com/blog/2…. And check out pwn2own.zerodayinitiative.co… for live leaderboard updates throughout the day. #P2OIreland
Jay Turla retweeted
It seems that many Samsung Galaxy S26 & Pixel 10 bugs have been submitted to Pwn2Own this year. There are a lot of Koreans too. Good luck to all participants.
👀👀
Pixel 10 Remote : 3 exploits
Pixel 10 USB : 1 exploit
Samsung Galaxy S26 Remote : 7 exploits
zerodayinitiative.com/blog/2…
Jay Turla retweeted
And just like that, twenty is in the books.
For a few days, we filled Clark with hackers, ideas, experiments, questionable decisions, new friendships, old stories, blinking badges, packed rooms, and exactly the kind of chaos we’ve learned to love.
To everyone who came through the doors of ROOTCON 20—thank you.
Whether this was your twentieth ROOTCON or your first, you brought something to the con. You asked questions. You shared knowledge. You met people. You tried something new. You stayed curious. And somewhere between the talks, villages, contests, hallway conversations, parties, and late-night hacking, you became part of this chapter of ROOTCON.
To our Goons: you absolute legends.
Months of preparation became two very long days of moving, fixing, coordinating, improvising, and making sure the show kept going. Much of what you do happens where nobody sees it, and that’s exactly why everything works.
To our speakers, trainers, villages, contest crews, partners, sponsors, and everyone who helped us put this thing together—thank you for trusting us with your time, knowledge, and support.
Twenty editions is a hell of a milestone. But the number isn’t what matters most. It’s the community that somehow keeps finding its way back.
The gear is packed. The halls are quiet again. The con hangover is real.
ROOTCON 20 is over. The community isn’t.
Stay curious. Stay weird. Keep hacking.
We’ll see you on the next one.
ROOTCON ❤️ you!

























