#ROPChain
LightNews LightNews
retr0.id
someone asking grok to explain a twitter-repost of my switch 2 ropchain post
June 6, 2025 at 3:02 AM
senhorlinguica.bsky.social
David Buchanan conseguiu o chamado ropchain exploit no dia do lançamento do NSW2! Significa que ele conseguiu manipular a interface para fazer algo não autorizado.

Isso mostra que o console tem falhas para serem exploradas!

GRANDE DIA AMIGOS!
retr0.id David Buchanan @retr0.id · Jun 5
here's a framebuffer graphics demo (this has no practical purpose and I can't prove I'm not just like, playing a youtube video or something)
June 5, 2025 at 10:20 PM
alientinkaton.bsky.social
x.com/SwitchTools/... por desgracia link de twitter, pero es un inicio, ya andan corriendo apps homebrew en switch 2 muy resumidamente
SwitchTools on X: "First userland ropchain exploit on the Switch 2 Source: https://t.co/gLAAycocwX https://t.co/pqU1E09VOR" / X
First userland ropchain exploit on the Switch 2 Source: https://t.co/gLAAycocwX https://t.co/pqU1E09VOR
x.com
June 6, 2025 at 12:48 AM
sterophonick.wetdry.world.ap.brid.gy
they're ropchain exploiting me in the qrts
January 14, 2025 at 6:29 AM
thisisumr.bsky.social
We already have ROP exploits...

fixupx.com/SwitchTools/...
SwitchTools (@SwitchTools)
First userland ropchain exploit on the Switch 2 Source: https://bsky.app/profile/retr0.id/post/3lqtwrndzf22w
fixupx.com
June 6, 2025 at 3:07 PM
thinkronicity.ispost.ing
They're not making their best.
Or at least they are made worse.
~24hrs

#PWND #Exploit #ROPchain
June 7, 2025 at 2:17 AM
azuli.bsky.social
WELL, WELL, WELL, WHAT DO WE HAVE HERE?
David Buchanan achieved what's called "ropchain exploit" on Switch 2 launch day! That means he was able to manipulated the interface to make it do something unauthorized. That means the console has breaches to be exploited! The Switch 1 itself had this for some time (PegaSwitch) until it was fully cracked! GREAT DAY, COMRADES!
June 6, 2025 at 10:29 AM
oxfemale.bsky.social
Source attribution. #add_key #Bluetooth #CVE202427398 #HeapSpray #KASAN #KASLR #LinuxKernel #LinuxKernelExploitation #modprobe_path #RaceCondition #ROP #ROP(ReturnOrientedProgramming) #ROPChain #SCO #SLUBAllocator #SMEP
https://core-jmp.org/2026/05/cve-2024-27398-linux-bluetooth-sco-uaf-smep-bypass/
CVE-2024-27398: Exploiting a Linux Bluetooth SCO Use-After-Free with SMEP Bypass
A full walkthrough of CVE-2024-27398, a race-induced use-after-free in the Linux 6.8 Bluetooth SCO subsystem. The exploit races two connect() threads on the same SCO socket to orphan a delayed-work timer, reclaims the freed sock with add_key(), forges a valid DEBUG_SPINLOCK pattern in the spray payload, and uses an xchg eax, esp ; ret gadget to pivot the kernel stack into userspace — bypassing SMEP with pure ROP and overwriting modprobe_path to get root.
core-jmp.org
May 25, 2026 at 9:04 AM
handle.invalid
це було швидко
bluesky thread about switch 2 getting hacked on day 1 using userland ropchain exploit
June 6, 2025 at 5:47 AM