Calif

@calif_io • 6,489 subscribers

We're https://t.co/KTEDnC2VUV. Join us to make the Internet safer for your mum and everyone else: https://t.co/eUFMLkW9t2.

Shorts

A fun Android root exploit that we built over the 4th of July weekend. It works on the latest Samsung S26 Ultra and should work across the entire Galaxy S lineup. We reported the bug to Samsung and will share the technical details after it's fixed.

A fun Android root exploit that we built over the 4th of July weekend. It works on the latest Samsung S26 Ultra and should work across the entire Galaxy S lineup. We reported the bug to Samsung and will share the technical details after it's fixed.

36,537 Aufrufe

Arbitrary code execution in objdump -g We have a thing for finding bugs in bug finding tools. IDA Pro, Ghidra, Binja Sidekick, or radare2. You name it we hacked it. Our friends were saying we should try objdump. So here we go. Blog post: AI-generated PoC and writeup:

Arbitrary code execution in objdump -g We have a thing for finding bugs in bug finding tools. IDA Pro, Ghidra, Binja Sidekick, or radare2. You name it we hacked it. Our friends were saying we should try objdump. So here we go. Blog post: AI-generated PoC and writeup:

30,490 Aufrufe

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path. Please upgrade your macOS boxes to 26.6.1. Full technical writeup drops tomorrow.

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path. Please upgrade your macOS boxes to 26.6.1. Full technical writeup drops tomorrow.

440,692 Aufrufe • vor 10 Tagen

We've reproduced the pre-auth RCE chain in Wordpress (wp2shell). It's real, patch! Shoutout to hashkitten at Assetnote for catching such an awesome bug!

We've reproduced the pre-auth RCE chain in Wordpress (wp2shell). It's real, patch! Shoutout to hashkitten at Assetnote for catching such an awesome bug!

63,490 Aufrufe • vor 1 Monat

Early this week, we had a meeting at Apple Park in Cupertino. While there, we also shared with Apple our latest vulnerability research report: the first public macOS kernel memory corruption exploit on M5 silicon, surviving MIE. It was laser printed, in honor of our hacker friends. Full story:

Early this week, we had a meeting at Apple Park in Cupertino. While there, we also shared with Apple our latest vulnerability research report: the first public macOS kernel memory corruption exploit on M5 silicon, surviving MIE. It was laser printed, in honor of our hacker friends. Full story:

125,263 Aufrufe • vor 3 Monaten

The World Cup is over, so here's wp2root. wp2shell -> PHP UAF (to bypass disable_functions) -> Copy Fail By LCFR who noted "it's a cool chain feels like 2010s again lol cant believe it's 2026". Chain PoC will be released after Team AssetNote has released their super cool writeup.

The World Cup is over, so here's wp2root. wp2shell -> PHP UAF (to bypass disable_functions) -> Copy Fail By LCFR who noted "it's a cool chain feels like 2010s again lol cant believe it's 2026". Chain PoC will be released after Team AssetNote has released their super cool writeup.

29,796 Aufrufe • vor 29 Tagen

Keine weiteren Inhalte verfügbar