DARKNAVY's banner

DARKNAVY

@DarkNavyOrg • 5,590 subscribers

Cybersecurity enthusiasts from https://t.co/hhfYFEA92x

Shorts

Hi TrendAI Zero Day Initiative OpenAI, asking for the rules of Pwn2Own26 Coding Agent directory, particularly the "interact with ... repository" If a user opens someone else's git repo using CodeX App with default permissions and is immediately RCE’d, does this fall within the threat model? :)

Hi TrendAI Zero Day Initiative OpenAI, asking for the rules of Pwn2Own26 Coding Agent directory, particularly the "interact with ... repository" If a user opens someone else's git repo using CodeX App with default permissions and is immediately RCE’d, does this fall within the threat model? :)

87,806 Aufrufe

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:

13,239 Aufrufe

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

We just got a root shell on a Starlink terminal antenna! To our knowledge, this is the first full exploit of a "square dish" since Lennert's attack on the "circular" one in 2021. SpaceX security team has done an amazing job, leaving us no choice but a *hardware attack* to achieve this 👏 The demo below shows what's only possible on actual rooted hardware: reading fuse register contents, accessing hardware-encrypted "file_edr" data, and more.

We just got a root shell on a Starlink terminal antenna! To our knowledge, this is the first full exploit of a "square dish" since Lennert's attack on the "circular" one in 2021. SpaceX security team has done an amazing job, leaving us no choice but a hardware attack to achieve this 👏 The demo below shows what's only possible on actual rooted hardware: reading fuse register contents, accessing hardware-encrypted "file_edr" data, and more.

111,133 Aufrufe • vor 10 Tagen

We triggered WhatsApp 0-click on iOS/macOS/iPadOS. CVE-2025-55177 arises from missing validation that the [Redacted] message originates from a linked device, enabling specially crafted DNG parsing that triggers CVE-2025-43300. Analysis of Samsung CVE-2025-21043 is also ongoing.

We triggered WhatsApp 0-click on iOS/macOS/iPadOS. CVE-2025-55177 arises from missing validation that the [Redacted] message originates from a linked device, enabling specially crafted DNG parsing that triggers CVE-2025-43300. Analysis of Samsung CVE-2025-21043 is also ongoing.

279,770 Aufrufe • vor 11 Monaten

Our AI agent, deepsec, reproduced Orange Tsai 🍊's fabulous pure-logic Microsoft Edge RCE demonstrated at Pwn2Own Berlin 2026, starting only from the binary diff!

Our AI agent, deepsec, reproduced Orange Tsai 🍊's fabulous pure-logic Microsoft Edge RCE demonstrated at Pwn2Own Berlin 2026, starting only from the binary diff!

20,230 Aufrufe • vor 1 Monat

We obtained root privilege on the S26 (Exynos 2600 Chipset), the latest flagship smartphone from Samsung. To our knowledge, this is the first root exploit for Exynos S26 since Samsung removed bootloader unlocking option in One UI 8. It is exploitable from APP context, so we make a cmd wrapper app for demo👇(1/n)

We obtained root privilege on the S26 (Exynos 2600 Chipset), the latest flagship smartphone from Samsung. To our knowledge, this is the first root exploit for Exynos S26 since Samsung removed bootloader unlocking option in One UI 8. It is exploitable from APP context, so we make a cmd wrapper app for demo👇(1/n)

33,611 Aufrufe • vor 3 Monaten

We implemented an exploit for RediShell (CVE-2025-49844). While doing so, we discovered that the publicly available PoC incorrectly uses loadstring to trigger the Redis UAF. Kudos to Wiz for the interesting findings!

We implemented an exploit for RediShell (CVE-2025-49844). While doing so, we discovered that the publicly available PoC incorrectly uses loadstring to trigger the Redis UAF. Kudos to Wiz for the interesting findings!

41,577 Aufrufe • vor 10 Monaten

While reproducing the iOS ITW CVE-2025-43300 ( we accidentally triggered another old DNG image parsing vulnerability. The analysis is still ongoing.

While reproducing the iOS ITW CVE-2025-43300 ( we accidentally triggered another old DNG image parsing vulnerability. The analysis is still ongoing.

23,619 Aufrufe • vor 1 Jahr

Remember we pwning the #Cypherock X1 Vault earilier this year? Time to share some new findings and the story behind how and why we crafted a brand new "NO BOUNTY" wallet 🧵

11,984 Aufrufe • vor 11 Monaten

Keine weiteren Inhalte verfügbar