splitline 👁️🐈⬛ がリツイート
splitline 👁️🐈⬛
338 posts
splitline 👁️🐈⬛
@_splitline_
@D3VC0R3 / CTF with ${cYsTiCk} / 友民党 / Tai-gi, zh-TW, en-US, es-PY / 🐈⬛
Tsu-lô-Kuān, Tâi-uân 参加日 Temmuz 2019
592 フォロー中1.4K フォロワー
splitline 👁️🐈⬛ がリツイート
What I’ve always found amazing about CTFs is that "flag is flag". Whether you found an unintentional solve or pwned the browser with n-day for a XSS challenge, it didn't matter.
I totally get the frustration of AI, but there is no solution other than accepting the change.
siunam@siunam321
I started playing CTFs in 2022, and LLMs definitely changed the **competitive** CTF scene a lot, especially since mid-2025. I also started using LLMs in late 2025. Yes, those models did one-shot many challenges, but what's the fun of slopping them? I learned absolutely nothing 🥲
English
splitline 👁️🐈⬛ がリツイート
splitline 👁️🐈⬛ がリツイート
splitline 👁️🐈⬛ がリツイート
A bit late, but I just published my blog post on bypassing Ubuntu’s sandbox! Hope you enjoy it!
u1f383.github.io/linux/2025/06/…
English
splitline 👁️🐈⬛ がリツイート
The blog post is the full version of my talk at 38c3.
It's about some vulnerabilities we found in libarchive and some interesting behaviors of libarchive that you don't want to miss.
My favorite part is it only took us 56 seconds to trigger a crash by AFL++.
DEVCORE@d3vc0r3
Our latest deep dive explores libarchive vulnerabilities under recent Windows 11 updates. 🔍🔓 Check out NiNi's (@terrynini38514) technical write-up for key insights and security implications. Read more here: devco.re/blog/2025/02/1… #VulnerabilityResearch #Cybersecurity
English
splitline 👁️🐈⬛ がリツイート
@dicegangctf @strellic This is just a rumor to make themselves feel better, CTFers doesn't have life and probably all single
English
splitline 👁️🐈⬛ がリツイート
🤘Congrats Orange(@orange_8361) and Splitline(@_splitline_) on making it to 2024 Top 10 Web Hacking Techniques!
Check out their groundbreaking research: portswigger.net/research/top-1…
English
I will drop one web challenge there 🐈⬛
ASIS-CTF@ASIS_CTF
🚨 Brace yourselves, hackers! 🚨 The #ASIS #CTF Finals 2024 are coming on December 28th! 💥 24 hours of non-stop hacking with mind-bending challenges that will push your limits. 🧠 Prepare for a thrilling ride - this is gonna be epic! #ASISCTF #CTF #Hacking
English
@TalBeerySec @orange_8361 @BlackHatEvents I read that before, it was quite interesting!
You’re right. Unicode normalization has always been a security concern, but I wouldn’t call it the core issue here. For me the root cause is still “Best-fit”. Unicode normalization is more of a broad bug category, like “injection”
English
@orange_8361 @BlackHatEvents @_splitline_ Do you know this work presented by Microsoft's Jonathan Birch @BlackHatEvents 2019?
i.blackhat.com/USA-19/Thursda…
Seems like the same(?) core issue applied to a different attack surface
English
Our talk at #BHEU is done! Hope you all enjoyed it. 😉 A detailed blog is on the way, but in the meantime, check out the pre-alpha website worst.fit for early access and the slides!
Huge thanks to @BlackHatEvents and my awesome co-presenter @_splitline_! 🐈
English
Our hackathon for that website Worst.Fit was done successfully 🥰
Orange Tsai 🍊@orange_8361
Our talk at #BHEU is done! Hope you all enjoyed it. 😉 A detailed blog is on the way, but in the meantime, check out the pre-alpha website worst.fit for early access and the slides! Huge thanks to @BlackHatEvents and my awesome co-presenter @_splitline_! 🐈
English
Cool findings 🐈⬛
Orange Tsai 🍊@orange_8361
Remember CVE-2024-4577, the PHP-CGI RCE bypass? Actually, the Best-Fit 'feature' also impacts non-CJK codepages such as locales in the Americas, Western Europe, Oceania, and more! @_splitline_ and I will share these cool findings at @BlackHatEvents! 🔥 Let's make argument injection great again! 😉 #worstfit-unveiling-hidden-transformers-in-windows-ansi-42637" target="_blank" rel="nofollow noopener">blackhat.com/eu-24/briefing…
English
splitline 👁️🐈⬛ がリツイート
Excited to share our research on Kernel Streaming! We discovered several vulnerabilities in it that we used at Pwn2Own this year.
Check it out: devco.re/blog/2024/08/2…
English
splitline 👁️🐈⬛ がリツイート
I created a Linux Kernel challenge “Halloween” for the HITCON CTF Qual 2024 :). Below are the official writeup for “Halloween” and the unofficial writeups for "v8sbx" and "reEscape". Enjoy it!
Halloween & v8sbx: u1f383.github.io/ctf/2024/07/16…
reEscape: u1f383.github.io/ctf/2024/07/18…
English
splitline 👁️🐈⬛ がリツイート
PHP just fixed one of my RCE vulnerabilities, which affects XAMPP by default. Check to see if you are affected and update now! 🔥
blog.orange.tw/2024/06/cve-20…
English
splitline 👁️🐈⬛ がリツイート
🎉 ACSC CTF 2024 has been started! 🚀 Have fun and happy hacking! 🖥️💻🔒
#ACSCCTF2024 #CTF #icc #ic3game
English