Varik

@D4RK7ET

Software Engineer | CTF Player | PWN/REV

Armenia

varik.dev

Replies Reposts Media

Varik
@D4RK7ET
Jun 19
Been exploring WebKit/JSC exploitation and wrote up a step-by-step walkthrough - from a caged OOB bug to cage-free arbitrary R/W with diagrams + a lab you can build. varik.dev/blog/jsc/jsc-e… #WebKit #JavaScriptCore #BrowserExploitation #exploitdev #pwn
JSC Exploitation Primitives - Part 1: From One OOB to Cage-Free Arbitrary R/W
From varik.dev
Varik
@D4RK7ET
May 13
PoC for CVE-2026-2005 - PostgreSQL pgcrypto Heap Overflow Exploit github.com/var77/CVE-2026… #CVE20262005 #PostgreSQL #pgcrypto #Exploit #PoC #pwn
GIF
1
Varik
@D4RK7ET
Apr 11
Went from "V8 exploitation seems unachievable" to solving all 9 @pwncollege V8 challenges. Wrote a guide on getting into browser exploitation if you already have classic pwn knowledge.
V8 Exploitation: From Libc Pwn to Browser Bugs
From varik.dev
1
Varik
@D4RK7ET
Mar 9
Recently pwned NFTDRM on HTB - a QEMU escape ranked insane Wrote a post on setting up a proper debug environment for QEMU PCI device exploitation. No exploit spoilers. varik.dev/blog/htb/nftdr… #CTF #PWN #QEMU #HackTheBox
Setting Up a Debug Environment for QEMU PCI Device Exploitation
From varik.dev
1
Varik
@D4RK7ET
Aug 22, 2024
Besides the deep dive we have built a JSON parser for HNSW indexes and interactively visualized index pages entirely in the browser using pglite. Check out the blogpost and play with the index parser yourself! #PostgreSQL #postgres #pgvector #hnsw #pglite
Lantern
@lanterndb
Aug 22, 2024
We did a deep dive into how pgvector stores HNSW indexes in Postgres. Read more from Varik below ↓ lantern.dev/blog/pgvector-…