online · pwndojo
pwndojo
Notes on binary exploitation, reverse engineering, and security architecture — from breaking systems to defending them.
$ ▊
pwndojo — Security Engineering — pwndojo — Security Engineering
Latest postJul 24, 2026
Antares: The Machine That Reads Your Bugs
A CVE drops and you have three hundred files — which ones are affected? We pointed Cisco's open-weight Antares-1B at a real vulnerable repo (gorilla/websocket, CVE-2020-27813) and watched a one-billion-parameter model land on the right file within three commands and then spend eighteen more not realising it. This is the full trace, and the argument that comes with it: triage, not discovery, and why that distinction is the whole point.
18 min readread →
Live feed
00:01IParsed /proc/self/maps — 24 regions mapped
00:04ILeaked libc base — 0x7f3c2a400000
00:09WStack canary present — leaking via format string
00:13CRIP control achieved — ret2libc
00:17IROP chain assembled — 14 gadgets
00:21WNX + PIE enabled — info leak required first
00:26Itcache poisoning — arbitrary allocation primitive
00:31CShell popped — execve("/bin/sh")
00:34IReversing target — main @ 0x1189
00:38WFull RELRO — GOT overwrite blocked
00:43IFuzzing harness — 2,341 new paths
00:47CHeap overflow — chunk metadata corrupted
00:01IParsed /proc/self/maps — 24 regions mapped
00:04ILeaked libc base — 0x7f3c2a400000
00:09WStack canary present — leaking via format string
00:13CRIP control achieved — ret2libc
00:17IROP chain assembled — 14 gadgets
00:21WNX + PIE enabled — info leak required first
00:26Itcache poisoning — arbitrary allocation primitive
00:31CShell popped — execve("/bin/sh")
00:34IReversing target — main @ 0x1189
00:38WFull RELRO — GOT overwrite blocked
00:43IFuzzing harness — 2,341 new paths
00:47CHeap overflow — chunk metadata corrupted
Research
All notes →Stats
2posts
0research notes
No vendor hype.
Focus Areas
💥Binary Exploitation🔬Reverse Engineering🧠Memory Corruption⚙Exploit Dev🏗Security Architecture🔍Threat Detection