Jiantao Li

Security Researcher @starlabs_sg , playing CTF with @r3kapig

[starlabs @starlabs_sg]

Ever wondered what happens when you pickle a mailbox? 🥒📬
(No, it’s not a recipe, it’s a vulnerability.)
Our team breaks down CVE-2025-20393 in a new deep dive post covering root cause, internals & exploitation details
https://t.co/VLx4amr7J9
Written by @CurseRed & @bestswngs

[starlabs @starlabs_sg]

🖨️ Brother, can you spare us a root shell?
We were ready for Pwn2Own but they patched it on the LAST DAY of registration 😭
Hope you enjoy this new blog post from us.
📖 https://t.co/TpVeBDHDWj

[TrendAI Zero Day Initiative @thezdi]

📢 Confirmed! dmdung (@_piers2) used a single OOB access bug to exploit the @Sonos Era 300 smart speaker. In doing so, he earns $50,000 and 5 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Confirmed! @starlabs_sg used a heap based buffer overflow to exploit the @CanonUSA imageCLASS MF654Cdw. They earn themselves $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OIreland

[starlabs @starlabs_sg]

The interns spent almost two months on this. Congratulations to @hi_im_d4rkn3ss @gerrard_tai @KaligulaSec Lin Zewei and Tan Ze Jian

[starlabs @starlabs_sg]

Recently our co-worker, @CurseRed found and reported some bugs in OnlyOffice while on a pentest engagement.
We are always preparing organisations to protect against the ever-evolving threat of cyber attacks.

[starlabs @starlabs_sg]

Lost in Translation: Apache Vulnerabilities That Don’t Count (Literally)
Found a few bugs in Apache projects in 2024 - SSRF in Pony Mail Foal & RCE on whimsy\.apache\.org
Fixed but no CVEs
Sharing is Caring: https://t.co/XHfDoAKbZC
Found by @CurseRed & former intern Devesh.

[chiefpie @cplearns2h4ck]

Some of my bugs are patched in this month's patch tuesday, including the ones I used for Pwn2Own Berlin 2025.

CVE-2025-50167 Race UAF in Hyper-V

[shubs @infosec_au]

I hope everyone got some rest after @DownUnderCTF this weekend. My colleague @hash_kitten wrote up a blog post on a novel technique for SQL Injection in PDO's prepared statements, required to exploit the “legendary” challenge, which only got one solve: https://t.co/ep3oa9898x

[starlabs @starlabs_sg]

CASE CLOSED: CVE-2025-29824
0 public samples, 0 information
Suspect: Windows CLFS driver
Crime: UAF leading to Privilege Escalation
Status: ACTIVELY EXPLOITED ITW
Investigation: Debugged and documented
Case files: https://t.co/Ig6RbvhLmZ
Done by our intern, Ong How Chong

[starlabs @starlabs_sg]

One of our current intern, @goatmilkkk shared his Chrome-atic escape adventure using CVE-2024-30088
Epic obstacles documented in it too!
https://t.co/pZH3WgQG91

[r3kapig @r3kapig]

🎉 Last weekend we participated in bi0sCTF 2025 as r3kapig and secured first place! 🥇 Huge thanks to @teambi0s for organizing such an amazing competition! 🙏 Congratulations to @ProjectSEKAIctf for second place 🥈 and @thehackerscrew1 for third place 🥉

[starlabs @starlabs_sg]

When life gives you tangerines🍊
Intern Lin Ze Wei's task: Port a 2-bug exploit to Pixel 6 Pro
Problem: One bug "doesn't work"
Solution: Make it work with 1 bug

Sometimes the best research comes from working with what you think you have
https://t.co/bPqxoxaAGz

[starlabs @starlabs_sg]

After 6 months of responsible disclosure, proud to announce our team discovered 13 (mostly exploitable) vulnerabilities in Samsung Exynos processors! Kudos to @st424204, @n0psledbyte, @Peterpan980927 & @rainbowpigeon_
CVE-2025-23095 to CVE-2025-23107
📍 https://t.co/Fk4mE0HVeY

[starlabs @starlabs_sg]

"Why is my exploit taking 10 minutes?"
*checks logs*
*sees 10,000 kernel warnings*
"...oh" 💡

Fresh Friday night read: our intern, Tan Ze Jian, on Mali exploitation - sometimes the fix is simpler than you think!
https://t.co/kIe2DTgFOU

[TrendAI Zero Day Initiative @thezdi]

Confirmed!! Dung and Nguyen (@MochiNishimiya) of STARLabs used a TOCTOU race condition to escape the VM and an Improper Validation of Array Index for the Windows privilege escalation. They earn $70,000 and 9 Master of Pwn points. #Pwn2Own

[Jacob Soo @_jsoo_]

Big shoutout to @hi_im_d4rkn3ss & @gerrard_tai for flying over & represent us
To our 1st-timers Gerrard @cplearns2h4ck @MochiNishimiya for the awesome work
To @n0psledbyte & @st424204 for guiding the next gen & @_piers2 @bruce30262 who are part of it
Lets continue trying #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Outstanding! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG used a single integer overflow to exploit #VMware ESXi - a first in #Pwn2Own history. He earns $150,000 and 15 Master of Pwn points. #P2OBerlin

[TrendAI Zero Day Initiative @thezdi]

Nicely done! Billy (@st424204) and Ramdhan (@n0psledbyte) of STAR Labs used a UAF to perform their Docker Desktop escape and execute code on the underlying OS. They earn $60,000 and 6 Master of Pwn Points.

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Chen Le Qi (@cplearns2h4ck) of STARLabs SG combined a UAF and an integer overflow to escalate to SYSTEM on #Windows 11. He earns $30,000 and 3 Master of Pwn points. #Pwn2Own #P2OBerlin