CTS

Highlights

• Zellic

  Co-founder and CEO of Zellic

  Zellic secures over $3B+ of on-chain value with a team of 30+ people

• perfect blue

  Founder of perfect blue

  The world's #1 security capture the flag (CTF) team in 2020 and 2021.

• GitHub

  CVE-2021-3156

  Proof of Concept (PoC) for CVE-2021-3156 (sudo heap overflow)

• GitHub

  How to exploit a vulnerable windows driver

  Exploit and Proof of Concept (PoC) for CVE-2020-15368

Security research posts

ndss-symposium.org

NDSS paper

WINNIE: Fuzzing Windows applications with harness synthesis and fast cloning.

github.com

Exploiting an ARM-only Race Condition

How to exploit a double free vulnerability in 2021. "Use-After-Free for Dummies".

Open source contributions

• Binary Ninja

  Binary Ninja is an interactive decompiler, disassembler, debugger, and binary analysis platform built by reverse engineers, for reverse engineers.

  • Website

• Winnie

  Winnie-AFL is a fork of WinAFL that supports fuzzing using a fork()-like API.

  • GitHub

In the press

youtube.com

CTS aka @gf_256 Talks About Hacking Smart Contracts, CTF, DEFCON and more!

vice.com

Meet the Vigilantes Who Hack Millions in Crypto to Save It From Thieves

As hackers keep targeting crypto and Web3 projects, white hat hackers are striking back.

cointelegraph.com

This AI Chatbot is Either an Exploiter's Dream or Their Nightmare

The crypto community has come across an AI-powered chatbot that can be used to audit smart contracts and expose vulnerabilities.