Moritz Sanft @stdoutput
security software engineer, ctf @fluxfingers @[email protected] msanft.foo Germany Joined March 2019-
Tweets1K
-
Followers1K
-
Following791
-
Likes4K
📅#BlackAlps26 FRIDAY AM PROGRAM incl. @stdoutput from @EdgelessSystems S. Duc from @Adnovum M. Vaitsman & D. Taler from @varonis & @FrenchYeti #MultiTaintAnalysis #ConstantTimeVerification #0Day #PQCMigration #M365CopilotAbusing Don't miss it lnkd.in/eB4pEf9S
@thorstenball I have recently thought about this, and currently think that 1) holds true at least for lower-level software that building (testing, ...) is costly for an agent. Think security-critical OS parts, etc. - I believe 2) to be true for pretty much the whole rest of the stack.
@thorstenball You should be accurate. This is not standard roast-chicken flavor, but "Poulet im Chörbli" (roast-chicken in a basket). You need to account for the basket.
@AmpCode if I report a bug through the "report bug" form, it'd be great to get some feedback on if / where I'll be notified if the bug is fixed, needs further input, etc.
@thorstenball grr, gotta complain at cleanshotx then :p
@ProgrammerDude @HSVSphere there are far easier ways to backdoor just about any package in nixpkgs unfortunately
@es3n1n realtired might be some good lingo
A fun gadget I found recently! The .NET JIT compiler makes sure there are no rwx pages by using a memfd, but that turns file writes into straight shellcode execution 🐚
Shellcode execution as a service! To exploit an argument injection in Jellyfin, we searched and found a gadget in the .NET runtime to turn file writes into code execution. Learn about the bug and this new technique: sonarsource.com/blog/jellyfin-… #appsec #security #vulnerability
The video recording of our talk is live now: youtube.com/watch?v=xmhxPZ… The slides can be found here: docs.google.com/presentation/d… Enjoy!
SELECT shell FROM postgres: Digging up a 20-year-old bug for ZeroDay.Cloud by @pspaul95 and @stdoutput
@carste1n That one indeed is a gem. You’ve got good taste;)
@ifsecure Any chance you could share the slides? Thanks for the great talk!
SELECT shell FROM postgres: Digging up a 20-year-old bug for ZeroDay.Cloud by @pspaul95 and @stdoutput
We @wiz_io just launched zeroday.cloud - a community for vuln researchers, by vuln researchers. Feat. writeups for PostgreSQL and MariaDB RCEs (@xint_official, @pspaul95 & @stdoutput) Stay tuned for the bug tracker and upcoming events. Big things coming soon 👀
Our writeup of our ZeroDay.Cloud Postgres exploit is live. We think it's a pretty neat bug and the exploitation was really fun, so check it out!
The secret's out.🤫 Introducing THE ZERODAY.CLOUD COMMUNITY 👾 Inside: • 0-day vuln deep dives from @xint_official, @stdoutput, @pspaul95 & more... • Access to events & a network of world-class hackers • CTFs with prizes Join now :)
Trying to get some new folks onto the AI for security research Discord server: discord.gg/sVy9ahuEv Feel free to share with your peers in the field!🤖🐛
Luca @atmosole
10K Followers 715 Following Helped 15,000+ people to make money through software Building the No. 1 Amazon Arbitrage Suite @profitpathapp
michael @m_chael
17K Followers 2K Following
dharmey @Dharmey747
684 Followers 472 Following 22 | Developer @profitpathapp, prev @FlareAIO @EscapeNotify
OOS @oos_n
672 Followers 120 Following @ScriptingTool | @Infinitysupply_ | @ratelimitrunner | @ScriptingMailS
sockjig @sockjig
26K Followers 3K Following I talk about sneakers here and on The Sockjig Sneaker Podcast. Size 12. The game is the game.
DreyAnd @dreyand_
2K Followers 506 Following 20yo, Bug Bounty, SR @spearbit @zenith256 & CTF w/@ProjectSEKAIctf
Shubham Sharma @perrythehacker
22 Followers 224 Following On a journey to become a world class vulnerability researcher. Learning systems. Chasing 0-days. Sharing the journey ↓
pan @mox0A
2 Followers 90 Following
Mia 👼 @daintypixie689
42 Followers 445 Following
Zero Science Lab @zeroscience
1K Followers 2K Following Macedonian Information Security Research And Development Laboratory
El-Mayo @El_Mayo39
5 Followers 805 Following
Peter Logan @authpeterlogan
478 Followers 5K Following 🐬 Flipper Zero tips & education 📖 Hack Like A Pro With Flipper Zero ✍️ Author Peter Logan 🔗 Book link below
Abdo belalmi @BelalmiAbdo
8 Followers 760 Following
ds @dss6pe
1 Followers 38 Following
Shift @Shiftreduce
3K Followers 2K Following
Amine Elmaataoui @aminealmaataoui
326 Followers 6K Following Graduate of Robin Sharma Nation Academy https://t.co/f4RH5BvIdn
Abdur rahman rafi @Abdurrahmanraf6
14 Followers 2K Following
bugsploiterr @systempwn3d
31 Followers 2K Following
Jeremy C. @Jerrawik
19 Followers 8K Following
caqri @caqriertekin
54 Followers 3K Following
krxsh0x @krxsh0x
4 Followers 122 Following
Peter @peter_clowncs
216 Followers 2K Following (wannabe) security researcher & reverse engineer Learning VR at @starlabs_sg | CTFs with @r3kapig
Aleksandre Khokhiashv... @skkhokho
400 Followers 864 Following Security @osec_io; Playing CTFs with @Water_Paddler (pwn/rev); Teaching OS and Security at Free University of Tbilisi;
Openflaw @Openflaw0
17 Followers 3K Following
V1km4n__ @V1km4n__
32 Followers 2K Following CTF|Software Developer|Linux|Python|Bash|Server Administrator|Network 🤖
Vikas Kathuria @kathuriavikas99
61 Followers 3K Following Wannabe Ninja, Djoker fan ▪︎ SWE by day ▪︎ Prev @zscaler
born0monday @born0monday
2 Followers 30 Following Independent VR with a background in engineering and red teaming. I take software apart and write up what I find.
mrd4hir @mrd4hir
4 Followers 176 Following
Ha @Ha84826416
100 Followers 5K Following
who3ver_momo @m01e_exp
152 Followers 1K Following
codecolorist@infosec.... @CodeColorist
6K Followers 1K Following
i @The15thProphet
44 Followers 1K Following
bdcd @bdcdhm3z
8 Followers 649 Following
Jason Holt @offpol
319 Followers 2K Following baseball R&D @nationals / was: code hacker @washingtonpost
Luca @atmosole
10K Followers 715 Following Helped 15,000+ people to make money through software Building the No. 1 Amazon Arbitrage Suite @profitpathapp
Drerman @drermancooks
2K Followers 295 Following shoes & anything that sells - bulk buyer / Drerman#0001 / Drerman F&F
michael @m_chael
17K Followers 2K Following
Flare @FlareAIO
65K Followers 9 Following The Most Advanced Sneaker & Retail Software I We help personal shoppers & business owners level up their business. Purchase: https://t.co/NQ7H5mNH0M
sockjig @sockjig
26K Followers 3K Following I talk about sneakers here and on The Sockjig Sneaker Podcast. Size 12. The game is the game.
Lifecoach Dealo @Dealo_RU
12K Followers 382 Following
DreyAnd @dreyand_
2K Followers 506 Following 20yo, Bug Bounty, SR @spearbit @zenith256 & CTF w/@ProjectSEKAIctf
Taisic Yun @taisic_
449 Followers 44 Following Security Researcher of @theori_io & @xint_official | DEF CON & Pwn2Own & v8CTF Winner | USENIX | Korea Univ. | KAIST | MMM & TheDuck CTF
Yves Bieri @yves_bieri
778 Followers 415 Following AI Researcher @xint_official 👨💻 Pwn2Own 2023-26 👾 CTF with PPP 🖥
Paulos Yibelo @PaulosYibelo
9K Followers 452 Following security researcher , pv @pwn_ai , haxor 🗺🦉/, I haxor everything I touch.. sandboxes, ai, web/offsec research Disclaimer: I speak for my self
TheYellowDanger 🏴�... @TheYellowDanger
3K Followers 1K Following Libertär-kapitalistischer Carnivore, Petrolhead/Tempoaktivist, superstraight+, Toxic Grumpy Old Man, Pronoun: fuck/off, Nautors Swan Addict. Boersenspieler
enscribe @enscribe
598 Followers 187 Following Design “engineer” https://t.co/L0D4QW8c7E | @osec_io @projectsekaictf @malta_ctf Business: [email protected]
hugeh0ge @hugeh0ge
3K Followers 412 Following have been playing CTFs as binja leader (DEFCON Finals'14 '16 '18 '20 '22-'26; Google Finals'17) and competitive programming also(ICPC WF'19 '20)
Duc Phan @flyingpassword
774 Followers 917 Following 🇻🇳 number 1. I like making you uncomfortable with my unpopular opinions. My opinions are my dog's, btw. So if you want to argue, argue to my dog.
Peter @peter_clowncs
216 Followers 2K Following (wannabe) security researcher & reverse engineer Learning VR at @starlabs_sg | CTFs with @r3kapig
Joel Eriksson @OwariDa
8K Followers 4K Following Offensive security researcher and entrepreneur -Kernels, browsers and all that jazz- Also: - AI/ML/DL - AR/VR/XR - CTFs (pwn/re/crypto) + Cicada 3301, Boxen etc
Bruce Dang @brucedang
5K Followers 1K Following Sweeping the floor at https://t.co/CM8ErzxC5z (we are hiring). Previously at Microsoft/Veramine/Apple. author of Practical Reverse Engineering.
Brian Pak @brian_pak
4K Followers 206 Following ai + security + alpha CEO @theori_io / @xint_official → building the world's best AI hacker 9x DEF CON CTF winner CMU CS '11 | founded PPP & MMM
𝗥𝗬𝗔𝗡 𝗦... @withzombies
3K Followers 1K Following "im not distilled! im not distilled!!", i continue to insist as i slowly shrink and transform into a prompt
V4bel @v4bel
4K Followers 153 Following Independent Vuln. Researcher / Pwn2Own Berlin 2025, 2026 / Google kernelCTF 0-day / Google kvmCTF 0-day / Pwnie Awards 2025, 2026
T. @trendytofu
986 Followers 669 Following something something Cyber, something something security something.
Cristofaro Mune @pulsoid
2K Followers 792 Following In between Physics & Computing. Fault Injection, TEEs, IoT & anything else challenging my curiosity. Founder at Raelize (@raelizecom)
East River Source Con... @erscio
1K Followers 19 Following Building blocks for human and machine collaboration.
skull @brutecat
9K Followers 412 Following security @google. 21. i run a blog @ https://t.co/cBW6gzSS5u
REcon @reconmtl
18K Followers 709 Following REcon: Annual reverse engineering and security conference held in Montreal.
Pwnie Awards @PwnieAwards
12K Followers 24 Following An annual awards ceremony celebrating and making fun of the achievements and failures of security researchers and the wider security community.
Heather Adkins - Ꜻ ... @argvee
15K Followers 1K Following VP Security @Google, Co-Author "Building Secure and Reliable Systems" @r00t0wns, Medieval Historian
Thomas H. Ptacek @tqbf
37K Followers 635 Following Don't look at me sideways. Don't even look me straight on.
Steve Weis @sweis
16K Followers 3K Following Software engineer at @anthropicai interested in cryptography, security, privacy, and machine learning.
The Consensus @theconsensusdev
1K Followers 35 Following Research, data, and tools for experienced programmers. https://t.co/HmSEGzG8Ol
William Bowling @wcbowling
6K Followers 421 Following Head of Assurance at @zellic_io, a.k.a vakzz when doing bug bounties and CTFs with @pb_ctf - https://t.co/9bjECLAwXg
Filippo Roncari @f_roncari
2K Followers 632 Following Curious guy with a long-time passion for zero-days. CTO @prdgmshift. Prev: research director @■, co-founded @truel_it & more. Opinions are my own.
Karsten @gr4yf0x
995 Followers 1K Following @gr4yf0x.bsky.social @[email protected] aka K³; Physicist now mostly interested in security stuff
Nadim Kobeissi @kaepora
26K Followers 237 Following Applied cryptographer. Mainly working in the cryptography auditing industry, but sometimes venturing back into academia.
Jazzy @ret2jazzy
6K Followers 1K Following solving problems @zellic_io @v12sec and challenges @pb_ctf
Chris Lattner @clattner_llvm
95K Followers 156 Following Building beautiful things like Mojo🔥 and MAX @Modular, lifting the world of production AI/ML software into a new phase of innovation. We’re hiring! 🚀🧠
codecolorist@infosec.... @CodeColorist
6K Followers 1K Following
David Cramer @zeeg
36K Followers 770 Following fractional executive, full time founder @sentry https://t.co/quHCKoHZtu like whisky? @peated_app
Nick Frichette @Frichette_n
7K Followers 2K Following Staff Security Researcher @datadoghq | DEF CON/Black Hat main stage speaker | Created https://t.co/QGWMJjuBzE
Atum @Atuml1
342 Followers 122 Following Fundamental Security Lead at @XuanwuLab, views are my own| AI enthusiast,AI security expert | Co-founder of @r3kapig | Blackhat, DEFCON, CCS, S&P, EuroS&P, AAAI
stuxf @stuxfdev
603 Followers 342 Following co-founder and ceo @verialabs (yc f25) | hack things @smiley_ctf
Amp @AmpCode
29K Followers 64 Following Amp is the coding agent and development environment that runs anywhere and everywhere.
Jenny Qu @GuanniQu
2K Followers 1K Following safely merging w machines • previously 0days via RL @Pebble_bed • ctf player @SquidProxyLover • RL for math @caltech • she/they • DMs open
sahuang @sahuang97
4K Followers 823 Following Founder @ProjectSekaiCTF | Security Research & AI @osec_io | Ex Software Engineer @Microsoft | Maimai & Chunithm 虹レ
Harsh Jaiswal @rootxharsh
28K Followers 1K Following Co-founder and research @hacktronai | auditing at @cure53berlin | prev @zomato @vimeo @pdiscoveryio @httpvoid0x2f
Oren Yomtov @orenyomtov
6K Followers 3K Following security researcher; RSAC, Black Hat, and DEF CON (2 times) speaker
Josselin Feist @Montyly
5K Followers 1K Following Working on blockchain security & program analysis. Ex @trailofbits. Contributing to @Aave securityYou might like
