Maxwell ꓘ Dulin (Strikeout)

@Dooflin5

Seattle/Centralia, WA

maxwelldulin.com

Born 1996

Replies Reposts Media

Pinned
Maxwell ꓘ Dulin (Strikeout)
@Dooflin5
Jan 6, 2025
I taught a killer training of glibc malloc heap exploitation for several years. After some effort, the content is now open source and mostly ready to consume! Half of the videos are posted for the course. 🔥
GitHub - bvcyber/glibc_heap_exploitation_training: The resources for glibc Malloc heap exploitation...
From github.com
6
Maxwell ꓘ Dulin (Strikeout)
@Dooflin5
Sep 8
Jeff does wayyy cooler things than me but still always shares my stuff anyway. Thanks for the support 🫶
Jeff Schroeder
@SEJeff
Sep 8
From @Dooflin5, a coworker of mine. A browser port of hash_extender for hash length extension attacks: mdulin2.github.io/HashExtenderBr…
1
Maxwell ꓘ Dulin (Strikeout)
@Dooflin5
Sep 3
@yaumn_ I loved your Dancing Queen CTF challenge on Cryptohack! It was a fun experience to learn the inner workings of ChaCha and to find plus exploit an implementation bug in it. One of the most educational and well-designed CTF challenges I've ever done. Thanks for making!
1
Maxwell ꓘ Dulin (Strikeout)
@Dooflin5
Sep 2
You can now run hash extension attacks from the browser! S/O to Ron Bowes for creating the C-based tool the port was built on: mdulin2.github.io/HashExtenderBr…
Maxwell ꓘ Dulin (Strikeout)
@Dooflin5
Aug 14
I vibe-coded a hash-length extension CTF challenge on a "signed" Hash(Secret||Msg) CTF challenge, commonly known as Yolo Hash. Over many iterations, it kept adding new bugs that led to simple bypasses. AI-written code is still super buggy. There are still many vulns to be found.