We are so back! Shellphish

I'm proud to announce that myself and Ati Priya Bajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org Please follow our workshop account ACM SURE Workshop and RT it for visibility :).

Super fun to talk with John Hammond and my teammates lukas Fabio about our system ARTIPHISHELL, the AI Cyber Challenge (AIxCC), and LLMs! youtu.be/TQFDqsgPKdY?si…

Hello hackers! Another pwn.college semester ends, continuing Arizona State University's American Cybersecurity Education Institute's never-ending quest to revolutionize the way hackers learn to become productive members of the cybersecurity community. Read on to learn what this means for students and Capture the Flag! 🧵

What does it mean to be a hacker? This semester, I taught a hacker history and culture class, which was a blast. In one assignment, my students paid tribute to the classic Phrack Zine Pro-Phile -- a small bio on a famous hacker. Check out their pieces: cse194.mahaloz.re/prophiles.html

Poll! What ANSI color types does your terminal support? "\x1b[1;31m3bpp+attr\x1b[m \x1b[91m4bpp\x1b[m \x1b[38:5:196m8bpp\x1b[m \x1b[38;2;255;0;0m24bpp\x1b[m" Reply with screenshot of the output of this string + add OS/terminal versions E.g. Ubuntu 24.04.2LTS, Konsole 23.08.5

We've reached a huge milestone in terms of Paged Out! prints - they are now available in the first online bookstore with global shipping: lulu.com/search?contrib… There are 4 versions there - a normal one and 3 "sponsorship" ones if you want to donate a bit more to the project.

This is interesting. I exploited and reported this kernel bug at pwn2own in March last year and it got patched after more than half a year in Oct. And to this day, there is no mention that it is exploitable. Btw, the patch only reduces race window. github.com/torvalds/linux…

[plz RT for range] A soft DEADLINE for article submissions for Issue #7 of Paged Out! has been set: 30 June 2025 We're looking for articles on literally everything that's computer related, technical, and nerdy. As always: 1 page limit :) More info: pagedout.institute

Paged Out! #6 — now in print Two editions: 🟢 Regular 💎 Sponsor Edition — full-back badge in Gold, Platinum or Diamond Same content. Different legacy. 👉 lulu.com/spotlight/page… #PagedOut #printondemand #opensource #techzine

We're super stoked to announce the release of our new podcast: "pwn.talk"! Hosted by Connor Nelson , [email protected] , Adam Doupé , and robwaz, we'll dig into everything pwn.college!

The code for building and updating the ARVO dataset, a collection of over 5000 memory safety vulnerabilities in open source software, is now open source! Link in reply :)

Almost out of time to submit! We're looking for all cutting-edge research in the area of reversing and understanding software. Join us in changing the status quo of understanding programs.

pwn.college is an education platform for students (and other interested parties) to learn about, and practice, core cybersecurity concepts in a hands-on fashion. pwn.college

Going to DEF CON?! We'll have 9500 print copies of Phrack, and Sunday @ noon Battle Programmer Yuu Richard Johnson and @chompie will be on main stage! info.defcon.org/content/?id=60…

Hello hackers! Excited for @DEFCON tomorrow? Make sure to stop by DEFCON Academy, a brand new community effort to provide a path for everyone to LEARN TO HACK. Read on for the details! 🧵

Standing room only at @x3ero0’s @DEFCON Academy talk about Getting into CTF!

Players still have a chance to solve my challenge pwn/WIC and claim a 200$ bounty. #CVE_2025_50165 #SekaiCTF

my first one🤪

It's been about a week since we completed DARPA's AIxCC, where we came in 5th and had the most accurate autonomous patching system in the competition. In the coming days, I'll be describing how we achieved it on the patching side. Stay tuned. Our CRS: github.com/shellphish/art…