BitFriends

I just wrote my first exploit for a real-world kernel vulnerability. It is about CVE-2022-24122. I did some cross-cache UAF attack to corrupt modprobe_path. You need to know the kernel base to prevent an oops during the exploit process. Reliability isn't great 😅 maybe like 5%

With a slight delay, our team is proud to share that ARESx has won first place on m0leCon 2026 finals 🏆🇮🇹 thanks to @pwnthem0le for the great event and hope to see everyone next year! 🥳

With a slight delay we are proud to announce ARESx won Securinets finals 2025 in Tunisia 🎖️🎖️ Thank you @SecuriNets for hosting the ctf, here are some pics from the trip!!

For the weekend ARESx had the honor of attending mimic ctf 2025 Big thank you to @XCTF_League for organizing the event 🎖🎖 Hope to see you all next year!

We are proud to announce, ARESx placed 3rd on m0leCon CTF!!! 🏆🇮🇹 Thank you for hosting! @pwnthem0le Looking forward to see everyone in Turin!! #pwnthem0le

We are happy to announce that ARESx as part of @malta_ctf placed 8th in the #DEFCON CTF finals! It was very nice meeting everyone and competing against some of the best teams in the world! Huge thanks to @plainshift for the support given to the team! Photo dump:

We got 8th place in defcon! Working together onsite was great as always, also really enjoyed meeting our friends in the other teams 😁. Thanks @Nautilus_CTF for hosting <3

@TheTurdoligist @PhantomThorns @InternetH0F 8/10 ragebait

ZDI-CAN-27262 is a Linux kernel 0-day I reported recently that allows unprivileged users to escalate privileges to root. The vulnerability is a race condition leading to a UAF in the kmalloc-196 cache. It was introduced in v4.2-rc1 and has been present in the kernel for 10 years.

ARESx is actively recruiting for experienced CTF players! Join a DEFCON qualifying team in future competitions: shorturl.at/wI24S

... and the podium for m0leCon Finals CTF! Congratulations! 🚩

A bit late for a 2024 recap, but who cares. Had an amazing year and went to my first onsite finals 😋

5th world rank of ctftime in 2024 First time reached 1k ctftime weight point Hope we could do better in 2025!

Happy new year! Our 2024 Recap is here: - 6 CTFs won, including 2 DEFCON Prequalifiers - 1st meetup of ~80 members @ DEFCON - 19.5k mvms sent on Discord - Rank #2 global on CTFtime We're incredibly proud of all of our members and look forward to seeing everyone again next year!

1st place at HITCON CTF 2024 Finals! Many thanks to HIT for hosting an amazing event, and we’re all very excited to see everyone again at DEF CON CTF next year!

#justCTF24 in Poland was amazing 🤍❤️

finally had some spare time to publish the exploit code and a short explanation. you can see it here: b17fr13nds.github.io/posts/kernel_e…

@PitigoiD @ice___titan @freelyspeechy @emusworld84 @DelusionPosting Obviously, I was just mocking the replies above. A single example does not prove a theorem

@BitFriends1 @ice___titan @freelyspeechy @emusworld84 @DelusionPosting Not only that but any number that ends in 2 is divisible by 2.... lol.

@Hewhoishere @ice___titan @freelyspeechy @emusworld84 @DelusionPosting Yeah, but the video doesn't prove that. Only shows an example. The point of a full proof is to show that the theorem works for any measurements.

@BitFriends1 @ice___titan @freelyspeechy @emusworld84 @DelusionPosting Because of the theorem, you can do this with any size right triangle

@ice___titan @freelyspeechy @emusworld84 @DelusionPosting I only see one example for which this theorem works, but no proof. It's like saying "every number that ends with two is divisible by two because 12 is"

@freelyspeechy @emusworld84 @DelusionPosting The Pythagorean Therom.