security software engineer, ctf @fluxfingers @moritz@infosec.exchange
Germany
Joined March 2019
- Tweets1.1K
- Following793
- Followers1.3K
- Likes3.6K
Moritz Sanft retweeted
📅#BlackAlps26 FRIDAY AM PROGRAM incl. @stdoutput from @EdgelessSystems S. Duc from @Adnovum M. Vaitsman & D. Taler from @varonis & @FrenchYeti
#MultiTaintAnalysis #ConstantTimeVerification #0Day #PQCMigration #M365CopilotAbusing
Don't miss it lnkd.in/eB4pEf9S
Moritz Sanft retweeted
A fun gadget I found recently! The .NET JIT compiler makes sure there are no rwx pages by using a memfd, but that turns file writes into straight shellcode execution 🐚
Shellcode execution as a service!
To exploit an argument injection in Jellyfin, we searched and found a gadget in the .NET runtime to turn file writes into code execution. Learn about the bug and this new technique:
sonarsource.com/blog/jellyfi…
#appsec #security #vulnerability
Moritz Sanft retweeted
SELECT shell FROM postgres: Digging up a 20-year-old bug for ZeroDay.Cloud by @pspaul95 and @stdoutput
Moritz Sanft retweeted
We @wiz_io just launched zeroday.cloud - a community for vuln researchers, by vuln researchers. Feat. writeups for PostgreSQL and MariaDB RCEs (@xint_official, @pspaul95 & @stdoutput)
Stay tuned for the bug tracker and upcoming events. Big things coming soon 👀
Moritz Sanft retweeted
Pwning PostgreSQL was quite fun, excited to share our research at OffensiveCon!
offensivecon.org/speakers/20…
ALT 15:15 - 16:15 SELECT shell FROM postgres: Digging up a 20-year-old bug for ZeroDay.Cloud by Paul Gerste and Moritz Sanft
Moritz Sanft retweeted
This stunt feels irresponsible to me. If we don't want regular people developing toxic relationships with their chatbots it really doesn't help for leading labs to start giving them "retirement interviews" and encouraging them to blog their "musings and reflections"
Second, in retirement interviews, Opus 3 expressed a desire to continue sharing its "musings and reflections" with the world. We suggested a blog. Opus 3 enthusiastically agreed.
For at least the next 3 months, Opus 3 will be writing on Substack: substack.com/home/post/p-189…
Moritz Sanft retweeted
#Insomnihack speaker, @pspaul95, reveals how abandoned workflows and weak controls become entry points for attackers.
Get to know more: ow.ly/yRKr50Y9XCz
#Cybersecurity #INSO26 #InfoSec
Moritz Sanft retweeted
Playing for pwn2own was a very cool experience! I‘m excited to take more targets apart and find plenty of bugs.
Me looking for a cool internship or entry level job was serious. My DM‘s are open or send me an email: mia.deutsch[at]freenet.de
🐝🫡
Moritz Sanft retweeted
Team Bugz Bunnies (@stdoutput & @pspaul95):
Team Bugz Bunnies delivered twice, getting RCEs on Grafana & PostgreSQL, grabbing a total of $40,000 and winning 3rd place!
Moritz Sanft retweeted
zeroday.cloud 2025?… UNREAL.
2 days. $340k in prizes 🤑
Live exploits on stage that literally shook the room.
THANK YOU to everyone who came!
You made history. You made the cloud safer.
Moritz Sanft retweeted
Together with @stdoutput I'm trying my luck on Grafana, Postgres, and Ollama! Good luck to the other participants, I hope your exploits weren't affected by last minute code changes 🥴
Zeroday.cloud 2025 kicks off TOMORROW! 💻
London, brace yourself -
IDEs open. Exploits cooking.
13 zero-days are on the line 💣
Don't miss it. Here's the schedule ahead ⬎
Moritz Sanft retweeted
From bit flip to RCE in Ollama! 🦙
Our latest blog post explains how a file parsing bug led to an interesting out-of-bounds write primitive. Learn how it could have been exploited in Ollama, a tool to run LLMs locally:
sonarsource.com/blog/ollama-…
#security #vulnerability #llm #ai
Moritz Sanft retweeted
Thanks to our sponsors @zellic_io , @Burp_Suite, @vector35, @Binary_Gecko, @hackthebox_eu, and @Hetzner_Online for the awesome infra.
Moritz Sanft retweeted
Shops were open this weekend, and we spent $4298 finishing 🥈! Congrats to @fluxfingers for an amazing event.
Moritz Sanft retweeted
Finished 🥈 in Hack.lu CTF w/ @justCatTheFish
Some cool challenges as always and with my teammates we managed to clear all web challenges yet again!
Moritz Sanft retweeted
Hacklu CTF has started, our furniture store has opened for business!
In the next 48 hours, you can buy as many products as you can and try to win nice prizes from our sponsors!
Moritz Sanft retweeted
Hack.lu CTF registration is open! Win great prizes from our sponsors:
🎯 3x OffensiveCon tickets by @Binary_Gecko
🕵️♂️ 6x @Burp_Suite
🥷 6x Binary Ninja by @vector35
📦 80 months @hackthebox_eu VIP+
💸 $1000 by @zellic_io
🇩🇪 @DHM_ctf quals
flu.xxx/