rui (@fdiskyou) header
rui (@fdiskyou) profile picture

BJJ Black Belt. Type Confused. calc||GTFO. Retired @OpenBSD committer, former @ProjectHoneynet researcher, once @exploitdb core team (OG)

Segmentation fault
Joined March 2011
shut up and hack
15
rui retweeted
I would like to congratulate the organizers of the 2026 Cybersecurity Awareness Month for putting together a truly spectacular event
35
696
32
4,685
97,148
rui retweeted
btw now would be a good time to build the new hackcoza/milw0rm/exploit-db that doesn't suck and is correctly maintained/curated. throw a shitton of clank and compute at it for e2e verification of all hax. community notes/dispute system for QA etc. etc.
2
6
28
1,940
next time you're thinking about researching the linux kernel (@linuxfoundation), remember that someone on the receiving end of your report might talk about you like this: in one of the threads, kernel maintainer "Peter Zijlstra" decides to call the ZDI team "monkeys" there's a longer argument about how ZDI submits reports, whether they should include patches, and how fixes get tested. fair enough, have that discussion but how does insulting the people reporting vulnerabilities help? i thought the kernel's code of conduct was something everyone on these lists was expected to follow sad to see people spoken to like this while trying to help improve linux security. crime scene: lkml.iu.edu/2610.2/16616.htm… lkml.iu.edu/2610.2/16917.htm…
15
16
2
158
21,054
So, who’s around?
⚡️ Escal8 Singapore is officially kicking-off! ⚡️ The energy is unmatched as the next generation of cybersecurity talent gathers to learn, compete, and push boundaries. Get ready for next-level hacking, hands-on challenges, and game-changing ideas. 🇸🇬💻🔒 Let's see who climbs to the top! 🚀 #ESCAL8 #initg #GoogleSingapore #CyberSecurity #Hackathon bughunters.google.com/blog/e…
133
rui retweeted
/goal find all php2shell github slop repo’s and synthesise them into a universal weapon of mass cyber destruction my bad wrong window
3
3
33
1,626
Bluetooth sync is supposed to import your contacts. But Joshua Foote (@BoredPentester) had a different idea, and it became a path to root on a Kenwood DNR infotainment unit. Amazing how much you can get from one of the less scary looking Bluetooth profiles, PBAP (phonebook access). #theSAS2026
3
13
974
GitLab CVSS 10 is actually a positive signal, things are returning to normal
1
3
85
7,447
Friends ask: “You’re a consultancy with no product, why STAR Labs?” Today’s my answer: 5 RCEs on Pixel 10 & 11, all patched by Google, from a team you could fit round 1 table. We don’t sell a box. We break the unbreakable and tell you how. 👇
What a rollercoaster. 7 weeks, 5 RCEs on Pixel 10 & 11, all officially patched by Google today. Chuffed to bits. The bounty won’t have us popping champagne, but popping Chrome? That we can do all day. The real payout was always the patch. Demo 👇
11
16
1
143
11,046
Atrophy is a choice. Machines play chess better than we do, but we still play and reap many benefits from it. Let AI perform tasks, but never stop challenging your mind, or yourself.
We created gyms because modern day work no longer required physical activity. Without exercise, our muscles atrophy. I predict we’ll need gyms for our brains too, once AI starts doing our knowledge work.
74
677
41
4,757
144,638
One of mine and my team (once they update/correct the credits)🔥. You may want to patch 👀
We have issued immediate guidance for CVE-2026-107406 in NetScaler ADC and NetScaler Gateway: bit.ly/4rWRBz4 We strongly urge affected customers to review the advisory and upgrade impacted NetScaler instances to the recommended versions as soon as possible.
1
1
9
576
Zip's (team-teso) long lost ssh1-crc32 exploit was found (xt 😘), (PLUS hellkit, 7350statd, 7350qpopper, icmp-tunnel, shellcode, lkm-work, and much more). 🚰 LEAKING phrack 73 article NOW (@phrack ): github.com/hackerschoice/tea… 🤘🤘🤘
4
56
5
179
17,452
I work with cool people 🔥 @boredpentester
Exploit Confirmed! @BoredPentester successfully exploited Lexmark CX532adwe in the Printers category with 1 collision and 2 zero-days for a net total of $4250 and 1.25 Master of Pwn points #Pwn2Own
3
32
2,677
Success!! Tim Becker (@tjbecker) and Yves Bieri (@yves_bieri) of Xint (@xint_official) just remotely exploited the targeting Google Pixel 10! Stay tuned for confirmation if they will secure the total of $300,000 and 30 Master of Pwn points!
10
26
3
294
27,502
Exploit Confirmed! @BoredPentester successfully exploited Lexmark CX532adwe in the Printers category with 1 collision and 2 zero-days for a net total of $4250 and 1.25 Master of Pwn points #Pwn2Own
5
1
68
6,596
5
30
127
10,613
🕶️ BETTER THAN JAMES BOND! @freddo_1337 & @kiddo_pwn took us behind the scenes with their engrossing presentation: 🎯 “No Time to Pwn2Own: Exploiting After the Draw” Real-world experience, serious exploitation, a story that kept the audience glued to the #𝐎𝐁𝟏𝟐𝟎𝟐𝟔 stage!
4
25
2,264
I’m around. Looking for a VR position? US/London/Singapore? Let’s talk.
⚡ TOMORROW, WE BREAK THINGS >>#OB12026 IS READY! See you tomorrow! @offbyoneconf 2026 setup at the Grand Copthorne Waterfront Hotel Singapore.
3
6
1,979
BJJ is great for problem solvers. Do it for a few years and you can spend the rest of your life solving problems. Things like: why can’t I look left today. Or, huh, I’m pretty sure I could use a pen yesterday. Highly recommend it.
7
5
2
58
13,217
⚡ We’re excited to welcome 𝐉𝐏𝐌𝐨𝐫𝐠𝐚𝐧𝐂𝐡𝐚𝐬𝐞 as a Bronze Sponsor of #OB1𝟐𝟎𝟐𝟔! 🙏 We’re grateful for their support of the security research community & excited to have them as part of 𝐎𝐁𝟏 𝟐𝟎𝟐𝟔 . 🎟️ merch.starlabs.sg/products/o…
1
14
883