Embedded security, reverse engineering and software exploitation
Joined August 2021
- Tweets48
- Following196
- Followers307
- Likes110
Krzysztof Okupski retweeted
New exploit: “xor dword [0xf80c2094], 1<<22”
Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.
github.com/xoreaxeaxeax/skit…
Krzysztof Okupski retweeted
You can read a detailed technical report on the software vulnerabilities and exploits discovered by Claude Mythos Preview here: red.anthropic.com/2026/mytho…
Krzysztof Okupski retweeted
Player weaponized_autism (@droogie1xp) has won the Phrack CTF!
CTF is 2 binary exploitation challenges containing realistic vulns across 2 different targets. It began on Aug 7 and remained unsolved until now. So 1337 😎
Keep playing - all who finish will get a special prize!
ALT Player weaponized_autism won the Phrack CTF
Krzysztof Okupski retweeted
You can now jailbreak your AMD CPU! 🔥We've just released a full microcode toolchain, with source code and tutorials. bughunters.google.com/blog/5…
Krzysztof Okupski retweeted
📣 Exciting news for aspiring vulnerability researchers - a selection of our internal VR Development Program training resources are now available on GitHub!
Check them out at github.com/interruptlabs/VRD…
These ones are on software development: programming in C and Python.
Krzysztof Okupski retweeted
Signal’s encryption is irrelevant to the discussion. The real problem with sharing Top Secret data over Signal is not the security of the app, it’s the security of the phone. And mobile phones are not secure against state level threat actors.
Krzysztof Okupski retweeted
Evilginx Pro phishing framework for red teams is launching in just 5 days! 😲
Here is a short demonstration of how easy it is to deploy a new phishing server, without ever leaving your terminal window.
Learn more about Evilginx Pro here: evilginx.com
Krzysztof Okupski retweeted
The AMD #Sinkclose exploit has been published for the #ekoparty presentation @exminium @IOActive @ekoparty => github.com/IOActive/Platbox/…
Krzysztof Okupski retweeted
"AMD Sinkclose: Universal Ring -2 Privilege Escalation" dictada por @kiqueNissim y @exminium I Sala E - MainTrack #EKO2024 🔥
Krzysztof Okupski retweeted
Recordings of the #HEXACON2024 talks have been uploaded to our YouTube channel 🎬
youtube.com/playlist?list=PL…
See you next year!
Krzysztof Okupski retweeted
New blog post: Tales from the Call-Gate: An SMM Supervisor Vulnerability
labs.ioactive.com/2024/10/ta…
@kiqueNissim
Our talk on AMD Sinkclose got accepted at Ekoparty! I'll see you all there 🍺ekoparty.org/agenda/?s=09
@kiqueNissim #EKO2024
Krzysztof Okupski retweeted
AMD Sinkclose: Universal Ring -2 Privilege Escalation by IOActive
#HEXACON2024
Krzysztof Okupski retweeted
Looking forward to presenting my research tomorrow @hexacon_fr !
An awesome welcome from the Hexacon team! It's a pleasure to be back again 👍
@hexacon_fr
Krzysztof Okupski retweeted
The slides for the AMD #Sinkclose were uploaded to #defcon media server: media.defcon.org/DEF%20CON%2…
Krzysztof Okupski retweeted
At Defcon tomorrow, researchers will reveal a flaw in hundreds of millions of AMD chips they call "Sinkclose," which would let hackers root into some of the most privileged portions of a computer to install virtually undetectable, unfixable malware. wired.com/story/amd-chip-sin…
