kqx

A technical writeup on a 0day vulnerability I reported inside V8, Chrome’s JS engine

Cheesing challenges running on QEMU TCG from v9.1 on with this 0day

rev challenge that I wrote for TRX CTF Quals 2026

real mode challenge that I wrote for TRX CTF Quals 2026

kernel pwn challenge that I wrote for TRX CTF 2026

A V8 exploitation challenge I authored for TRX CTF Quals 2026

A V8 exploitation challenge I authored for TRX CTF Quals 2026

kernel pwn challenge that I wrote for TRX CTF Quals 2026

kernel pwn challenge authored by FizzBuzz101 I first-blooded at DiceCTF Quals 2026

A technical writeup on a 0day vulnerability I reported inside SpiderMonkey, Firefox’s JS engine

Colliding hashes and confusing types for fun and profit

kernel pwn challenge that we first-blooded at backdoor CTF 2025

Learn how to cheese kpwn challenges running on a Ubuntu 24.04 container using a nday on QEMU

Exploiting a pretty broken JS-engine

kernel pwn challenge authored by ptr_yudai that we first-blooded at ASISctf 2025

uarch challenge authored by FizzBuzz101 I first-blooded at corctf 2025

This post is about exploiting IOPL privilege escalation using QEMU’s Firmware Configuration (fw_cfg) device.

Reviving an old linux novel technique to bypass SMAP through an unimplemented x86 feature in QEMU’s TCG

kernel pwn challenge that I wrote for TRXCTF 2025

kernel pwn challenge that I wrote for TRXCTF 2025

Novel technique I found in the linux kernel useful to exploit restricted dirty pagetable scenarios in a completely reliable and leakless way, through a new kind of “Oriented Programming”.

Writeup for the kernel pwn challenge that I wrote for ToH CTF 2025.