73696e65

In our final ksmbd research post, @73696e65 provides a detailed walkthrough for exploiting a local privilege escalation vulnerability. If you're interested in learning more about exploitation on modern systems - check it out! blog.doyensec.com/2025/10/08/ksm… #doyensec #appsec #security

📢It's here! Part 2 of Norbert Szetei's (@73696e65) research into ksmbd. See how customized fuzzing & the appropriate sanitizers led to discovering 23 Linux kernel CVEs, including use-after-frees & out-of-bounds reads/writes. blog.doyensec.com/2025/09/02/ksm… #doyensec #appsec #security

Several members of the #doyensec team are here in Berlin 🇩🇪attending @offensive_con this weekend! Ping us or just say "hallo" in person, if you'd like to talk #appsec or grab a coffee. We're looking forward to some amazing talks! #offensivecon #security

Our @73696e65's latest research has resulted in at least 1⃣5⃣ CVEs in ksmbd🤯, including multiple use-after-frees, bounds checks, type confusion and overflows‼️ Check it out today! #ksmbd_linux_security_research_2" target="_blank" rel="nofollow noopener">doyensec.com/research.html#… #doyensec #appsec #security #linux

@dvyukov @Doyensec Any thoughts on this?

@Doyensec @73696e65 Good work! Any plans to upstream this work? Contributions to syzkaller are welcome. We can also discuss malloc problem, I assume malloc per se is not needed here. syzkaller does use memory in other ways.

In the latest Doyensec research, our Norbert Szetei (@73696e65) takes a closer look at the SMB3 Kernel Server (ksmbd) component of the Linux kernel. Check it out today & learn what he found, which led to multiple CVEs! #Doyensec #Appsec #Security #Linux blog.doyensec.com/2025/01/07/ksm…

@dvyukov @Doyensec Another thing, we decided to patch the signature for authentication, but some rudimentary implementation could be written Syzkaller pseudo-syscall, too, I guess. Hence, even if we share our code and grammar (we plan to do that soon), it would involve a custom kernel build.

@dvyukov @Doyensec We are open to discussing this, but several issues currently prevent us from doing so. For instance, we rely on the patched version of ksmbd in Linux (by appending procid to packets), as the kernel workers process them, and we lose the tie with the original process.

@a_denkiewicz is it time to dive into pwn.college now? I can imagine earning a blue belt feels way cooler than capturing a screenshot, right? :)

I guess this will have to serve as a certificate :) I really enjoyed the mission 2 challenges - highly recommended.

The latest coordinated disclosure from our researchers (Norbert Szetei @73696e65 & Viktor Chuchurski @viktorot) details a SQLi and DoS via Prototype Pollution in #TypeORM! Time to update! More details: #83" target="_blank" rel="nofollow noopener">doyensec.com/research.html#… #doyensec #TypeScript #Electron #NodeJS #appsec

@stamparm congrats! 🥳

Our latest blog post takes the pain out of VirtualBox device driver fuzzing. We provide all the details necessary along with custom code patches to get you started! Check it out here: blog.doyensec.com/2022/04/26/vbo…

Can you survive a nuclear war? Yes, you can. As long as you are not in the physical blast zone your main goal is to create distance between yourself and the radiation and then wait it out. 220308 Episode 51 Nuclear War PUBLIC @Chris_Martenson:2/220308-episode-51-nuclear-war-public:e" target="_blank" rel="nofollow noopener">odysee.com/@Chris_Martens…

@_jsoo_ Take care, I hope you get well soon sir.

Our new blog post is out! @73696e65 talks about his journey fuzzing Javascript engines with state of the art tools. We explore Dharma before setting up @5aelo's Fuzzilli, modifying it, and collecting CVEs in JerryScript blog.doyensec.com/2020/09/09/fuz… 🐛#fuzzing #fuzzilli #dharma

The Biggest Ideas in the Universe! Informal videos in which I try to explain big ideas one by one. Here is the announcement and intro video: preposterousuniverse.com/blog/2020/03/1…

Fuzzilli v0.9.1 is out: github.com/googleprojectz… Many thanks to everyone who helped make this release possible! :)

We put together our very own "Awesome" list on GitHub about @electronjs security! A frequently-updated repo with presentations, bug write-ups, and all kinds of content to help during Electron security testing github.com/doyensec/aweso…

Google recently awarded $10k for an exotic stored XSS on Google Scholar using polymorphic images. Another “magic” show performed by our own @lorenzostella! Read how on our latest blog post: blog.doyensec.com/2020/04/30/pol… #xss #bugbounty #magic

Norbert @73696e65 wrapped up his first #DoyensecResearch week with a nice bug in Django - a SQL injection in GIS functions (CVE-2020-9402) djangoproject.com/weblog/2020/ma… #Django #infosec

We have been busy lately...so it's about time to welcome @73696e65 for joining the @Doyensec team! 🙂 Welcome onboard Norbert!