Vitaly Nikolenko

Pro-tip: Write a Claude skill for arXiv (e.g. using the pip package) and actively query the latest research papers as part of your workflow #themoreyouknow

anyone in Seoul with a rooted s21/exynos device I could borrow for an hour? I’ll buy you dinner / drinks :)

@natashenka depends on ur social skills ..

The world never says hello back

Thank you @offbyoneconf !

@offbyoneconf 2025 conference week starts today! Chrome (Renderer) Exploitation on Android training by @vnik5287 is at room Ocean 3, Level 2 at Pan Pacific Singapore. offbyone.sg/trainings/vita…

@zhero___ @Hacker0x01 I just got a free big mac voucher too

this is so cool! Hexacon champagne

I had my laptops, phones inspected before many times but never had my stuff actually taken away from me

wtf just had 2x laptops, 4x pixel 7 test devices, 25x kernel debug adapters, uart cables, pcb boards and usb drives seized in Abu Dhabi on my way to Hexacon. the only explanation they gave me is “you have too many cables”!

Registrations for the Linux kernel exploitation training are now closed duasynt.com/training_regis…. The class is full but you can join the waiting queue in case there are any cancellations 8 seats left for the advanced version duasynt.com/training_regis…

Tickets for Android kernel security at @hexacon_fr in Paris are now available for purchase hexacon.fr/trainer/nikole… you can reach me on their discord channel if there are any questions

🎁Stumbled upon a leaked Android kernel LPE 0-day but don't know how to adapt it? @vnik5287 will teach you everything you need to know about the Android kernel. ➡️hexacon.fr/trainer/nikole… 📆 30/09-03/10 2024 📍Espace Vinci, Rue des Jeuneurs, Paris

Next advanced Linux kernel exploitation training will be 24 - 26 June duasynt.com/training_regis… Registrations are now open

@spendergrsec Android/arm64

@vnik5287 Was gone already years ago, what's new? :)

rip addr_limit

If samloader returns `400 Client Error: Bad Request for url …` accessing Samsung’s server, add the user agent string to samloader/versionfetch.py

@alexjplaskett @tehjh @Chompie don't really follow Linux distributions anymore but checked recently ubuntu 20.04 and 22.04 and both have vm.unprivileged_userfaultfd=1 by default

🔥 3/ userfaultfd technique is dead on most Linux distros due to vm.unprivileged_userfaultfd. Fuse has come through as a good replacement for this technique. @tehjh mentions in 2016 and still applicable today. e.g graplsecurity.com/post/iou-ring-… by @chompie and willsroot.io/2022/01/cve-20…

🔥 1/ In the last 6 months working on Linux kernel bug hunting/exploitation there has been a number of key resources which have been super useful (coming from a macOS/Windows background) to understand the state of things in 2022 🚀. Here's a short🧵 to recognise this + thoughts:

Android bionic dlopen is not re-entrant/recursive. spawning a new thread in the constructor seems to work but probably not safe..

@kciredor_ online. though not sure about the timezone yet

@vnik5287 Great! Will it be online?

@vnik5287 hi Vitaly, I was wondering if you have an ETA for a new Linux kernel exploitation training?