0Dr3f (@0Dr3f) header
0Dr3f (@0Dr3f) profile picture

0Dr3f

@0Dr3f

Vulnerability Research & Exploit Development 💻

0dr3f.github.io
Joined September 2022
  • Tweets52
  • Following110
  • Followers423
7Media
Photo by 0Dr3f (@0Dr3f)Photo by 0Dr3f (@0Dr3f)Photo by 0Dr3f (@0Dr3f)Photo by 0Dr3f (@0Dr3f)Photo by 0Dr3f (@0Dr3f)Photo by 0Dr3f (@0Dr3f)Photo by 0Dr3f (@0Dr3f)
Created a blog post explaining physical memory primitives, how they can be exploited and how we can abuse the address translation mechanism to access any memory on a system as well as inject code into any process. 0dr3f.github.io/Demystifying…

Demystifying Physical Memory Primitive Exploitation on Windows

In this blog post, we dive in the world of physical memory primitives and how the right primitives can be abused to access process memory as well as inject code, all without opening handles.

0dr3f.github.io
2
81
228
20,775
We are 31 hours into #flareon, where usually the first handful top reversers would've solved the challenge. 200 people have now solved it using LLMs.. I expected LLMs to solve flareon, not that it'd do it in about an hour. Beating any human reverse engineer on this planet.
1
206
Pew, just came back to work from the long journey. Thanks everyone for making another great success on #Zer0Con2024! Wish you all safe travel back home and most importantly take a good rest! We will be around at the @offensive_con, if you are there, let's grab a drink 🙌
Image from POC_Crew (@POC_Crew)
Image from POC_Crew (@POC_Crew)
Image from POC_Crew (@POC_Crew)
Image from POC_Crew (@POC_Crew)
8
4
60
13,293
Arrived at #Zer0Con, see you guys there!
Image from 0Dr3f (@0Dr3f)
11
835
I'll be over at #Zer0Con2024 the upcoming month. If anyone wants to talk windows kernel, security in general, or just hang out let me know!
4
727
Finally managed to retrieve all the flags and pass the #OSEE exam! Thanks @offsectraining, @Blomster81, and @_sickn3ss_ for this great learning opportunity and fun (but exhausting) exam!
Image from 0Dr3f (@0Dr3f)
17
12
256
20,654
And that wraps up AWE from @offsectraining. Thanks @Blomster81 and @_sickn3ss_ for this amazing training. Time to continue this journey towards becoming an #OSEE.
Image from 0Dr3f (@0Dr3f)
2
8
105
14,756
Short post on exploitation of (as of today) unpatched vulnerabilities CVE-2023-38352 and CVE-2023-38353. 0dr3f.github.io/2023/09/10/H…
2
4
9
1,907
If the Windows Internals were a person, that person would be called @codemachineinc. Just finished the amazing Windows Kernel Rootkit Techniques training by T.Roy at @BlackHatEvents. Would highly recommend this to anyone interested in the Windows kernel! #BHUSA #BlackHat2023
Image from 0Dr3f (@0Dr3f)
1
1
10
1,761
I've created a post exploiting the HEVD driver arbitrary overwrite on a modern Win10 (22H2). I used a single gadget to take control over the stack in order to eventually execute shellcode in the kernel. Check it out here 0dr3f.github.io/2023/07/14/H…
4
17
1
33
4,262
Excited to have confirmed my seat in the upcoming Advanced Windows Exploitation (#OSEE) training by @offsectraining in Dallas. See you guys there!
1
1
12
6,137
Looks like I'll be heading to @BlackHatEvents & @defcon after all. If anyone wants to break stuff together hit me up! #BHUSA #DC31
1
1
610
Are #flareon9 scoreboard release and medal shipments still happening or did we collectively decide to just wait for #flareon10? Any news @Mandiant ? It has been months of pretty much radio silence...
Image from Washi (@washi_dev)
5
6
1
51
12,848
#flareon9 is finally over.. Already looking forward to next year 🔥 Thanks to the FLARE team!
Image from 0Dr3f (@0Dr3f)
1
8
Load more