Ikaring0 retweeted
Just dropped a new blog post! 🔥
blog.orange.tw/posts/2026-10…
Ikaring0 retweeted
My third @PwnieAwards trophy! Thanks all, and to my friends who grabbed it on stage for me! 🦄🏆
Ikaring0 retweeted
Don't worry @orange_8361, there are still people reading blog posts and articles from start to finish 😄 that was a beautiful exploit chain!
blog.orange.tw/posts/2026-10…
Ikaring0 retweeted
Noticing @momo5502 new PR for Sogen github.com/momo5502/sogen/pu… , I had a private patch for that but for KVM from a couple weeks ago! :)
IDA + Sogen + Linux/KVM backend
Ikaring0 retweeted
At today’s GEEKCON, a researcher demonstrated what I believe is the first remote full-chain exploit of a latest WELL-KNOWN drone.
Our Pwn2Own-style live competition never released vulnerability details on those success trials. Actually we did not even show the vendor’s name in plaintext.
However, a guy from that vendor called POLICE on-site to take the researcher out for “investigation”.
It’s extremely disappointing that in 2026, some still view security work from such a bad perspective.
Ikaring0 retweeted
Bro also flexed his no.1 standing on the crackmes.one scoreboard to try to land at a remote cybersecurity work, posted in a different discord server. He claimed to be from Japan, but I checked web log all his requests come from major Japanese VPN servers.
We just noticed and neutralized an unusual scam attempt from a user named NolanVeyrix. He used AI to solve all challenges in a short time and climbed to no.1 on the crackmes.one scoreboard, and then DM-ed RE beginners to offer remote control via AnyDesk
Ikaring0 retweeted
Using SendMessage with WM_SETTEXT, we can perform stealth injection and bypass EDR, even with high-end Endpoint Detection and Response systems 🛡️
Github: TwoSevenOneT/PhantomBuffer
#CyberSecurityAwareness #Pentesting #redteam
ALT PhantomBuffer edr evasion run success with high end EDR monitor
ALT FindTargetWindows ultility in PhantomBuffer bypass edr tool kit
Ikaring0 retweeted
The best practitioner (not lab) AI evals for offensive cybersecurity I follow myself:
1) The @dreadnode dreadindex. Evals al the way down to the vuln category level, and refusals accounting
dreadnode.io/research/dreadi…
2) @AikidoSecurity white-box but i've confirmed that it extends to dynamic testing well
aikido.dev/aikido-arena
3) BArena by @mdp_sec focused on bounty-like black box bugs.
blackboxarena.ai/
4) @mindfort 's nexbench has info downto the config of a model including thinking or effort setting, and cost per finding, which many omit.
mindfort.ai/blog/introducing…
Ikaring0 retweeted
发现最近朝鲜节点什么的热度很高于是再来炒一下冷饭😺
今年四月的时候发现某商家的朝鲜socks5打折，于是买了一个月做测试（不要去买了，早就下架了）
入口用的东京cdn77，出口在175.45.176.0/24这个段，上游4837。
可以访问B站、小红书，屏蔽抖音和小黑盒。
推特主页只显示"Korea"，不过给别人点赞的话Premium的分析页面能看到KP。Grok超时，Google和YouTube可以用基础功能，YouTube跟中国内地和澳门一样没有二字码角标，GPT不能用，Gemini404，Anthropic官网超时，甲骨文官网能打开但是被对面屏蔽。Steam商店能进但是注册页面打不开。屏蔽ip[.]skk[.]moe但是没屏蔽lab[.]skk[.]moe，测出来到cloudflare走ARN和DME。Disroot可以正常用。
不通光明网，也不能访问其他地方能看的.kp网站。三星官网和gov[.]kr超时。
另外某些人鹦鹉学舌发"Cloudflare的""WARP的IP"之前建议先查查我给的as号和ip段，当然你要是说Cloudflare把kcna和gov[.]kp收购了，那我只能顺从了🤓
Ikaring0 retweeted
Yuki Chen, few times tianfu cup winner, few pwnies here and there just for fun, switched to GLM recently. the outcome? he closed 23 MSRC vulnerabilities all found using GLM. after that Z.ai hired him on the spot to train their models for more advanced cyber offensive capabilities.
the legend says he is using Zcode as harness.
so yeah better models better harness, finding new vulnerabilities.
We have CyberGLM available on adverserial.ai which is based on GLM 5.3 with relaxed security guardrails + fine tuned for cyber - use it to find vulnerabilities and secure your networks.
we are offering it at $2/M input token the added premium on the token price comes from the confidential compute and true ZDR that comes with it that can be verified by any third parties, see adverserial.ai/confidential and verify.adverserial.ai
so yes very capable cyber security model, all with a Attested Zero Data Retention platform and ready to go.
wanna chat? [email protected]
Nice advertisement for GLM, I'm switching my bug hunting workflow to glm-5.3 now 😀
anthropic.com/research/glm-5…
Ikaring0 retweeted
Chromium VRP just raised reward amounts – after lowering it to near 0 earlier this year.
4x memory safety baseline, increased rewards for logic sandbox, and the fuzzer bonus is back (!)
Still no incentives to report the bugs that could pay 10x at comps...
Ikaring0 retweeted
Excited to share that #InfraHunter is now sponsored by @Huntio 🤝
Independent APT infrastructure hunting and malware research runs on good data, and Hunt.io has been a key part of that toolkit.
Thanks for backing the work.
🔗infrahunter.com
Ikaring0 retweeted
I and @__wgg__ will be speaking at OffensiveCon Tokyo 2026 on October 27–28.
If you’ll be there, feel free to join our session and say hello. See you in Tokyo.
Ikaring0 retweeted
I will be presenting my research at OffensiveCon Tokyo. See you in Tokyo.
Agenda for OffensiveCon Tokyo 2026 is live!
Explore the talks and plan your schedule now:
offensivecon.jp/agenda/2026.…
#OffensiveCon #Tokyo
