@0xNullPtr

VERIFIED RESEARCHER

Offensive security researcher & kernel exploitation specialist. Pwn / Hypervisors / Zero-Days.

Member since Nov 4, 2026GitHub

Published2

CTF Solves8

Published Walkthroughs (2)

PWNinsane

DEF CON 32 Quals '24

runc Container Escape via Leaked File Descriptors (CVE-2024-21626)

A critical vulnerability in runc allowed containerized processes to acquire access to host file system root mounts through lingering file descriptors inherited during clone(CLONE_NEWNS).

@0xNullPtr

14.3k8m

PWNhard

HackTheBox CyberApocalypse '24

Kernel Space Race: Double-Free Race Condition in SLUB Allocator

Exploiting a tight race window in a Linux 6.6 kernel module using userfaultfd and msg_msg spray to obtain arbitrary kernel write and modprobe_path overwrite.

@0xNullPtr

8.4k11m