An Pham

Push harder everyday

[An Pham @D0ct3rStr]

@joaxcar true my friend one-shot it with codex, where I used claude its really struggling

[An Pham @D0ct3rStr]

@namedXbird @kinugawamasato u're too dump for his research

[An Pham @D0ct3rStr]

@Nisingizwe19079 AI bullshit

[An Pham @D0ct3rStr]

@SahilExec the flaw is that this api is completely useless

[y198 @y198_nt]

Over the next few months, we'll be gradually publishing some of our internal security research.

Starting with a bug chain that turns Nginx-Rift + Nginx-PoolSlip into full RCE.

More to come.
#Nginx #1day #RCE
https://t.co/tqQMFAoX9P

[An Pham @D0ct3rStr]

@helicerat0x lol its Ben Cox, really cool guy, he has other research as well

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Another researcher skipped coordinated disclosure entirely and dropped a critical 1-click GitHub token theft in public because he doesn't want to deal with MSRC. In his own words: "I really don't want to deal with MSRC on VSCode bugs."

The bug: just clicking a link can hand an attacker a GitHub token that reads AND writes to all your repos, including private ones. It lives in github[.]dev, GitHub's browser-based VSCode editor, which passes the browser an OAuth token that isn't scoped to a single repo. That token can touch everything you can.

Researcher Ammar Askar found that VSCode's sandboxed "webviews" leak keyboard events to the main editor. A malicious repo opened via one link can simulate keystrokes, install a local extension that skips VSCode's publisher-trust check, and exfiltrate your token. He published a working proof-of-concept.

He says when he reports github[.]dev bugs, GitHub tells him they're out of scope and to go report to MSRC, and a prior VSCode bug he reported was silently fixed with no credit. One commenter summed up the mood: "MSRC has turned into Feedback Hub."

[Swings @bestswngs]

Reflecting on our Pwn2Own preparation! We developed several exploit chains during the season, and LiteLLM was just one of the many targets we tackled.

Although we had it ready, we couldn't register the
entry as the event hit its submission limit due to the high volume of participants.

I'm excited to share this technical breakdown, co-authored with @bruce30262 🚀

Read the blog here: https://t.co/ZsX5JYXPPK

[An Pham @D0ct3rStr]

@h0mbre_ because they deny new players

[An Pham @D0ct3rStr]

@desckimh I can only land rce lm studio, i stucked on Ollama

[An Pham @D0ct3rStr]

@_mccaulay haha same

[An Pham @D0ct3rStr]

Okay let's go home guys @thezdi

[An Pham @D0ct3rStr]

@__suto @j3ssie @thezdi hic em submit bug từ 21/4 lận cơ

[An Pham @D0ct3rStr]

@thezdi do I really need a Token Assigned for competing Pwn2own ? I've received the invitation letter for Visa before but the process is so vague

[Qrious Secure @qriousec]

5 folks x 2months x 26 0days : found - fixed - found new - ready to fight 😎
( We requesting zdi to swap Esxi with LM studio 🙏 )

[An Pham @D0ct3rStr]

@__suto @thezdi ơ thật à anh 💀💀💀

[An Pham @D0ct3rStr]

@bunjavascript crazy work, thank you for all your work

[An Pham @D0ct3rStr]

@PinkDraconian wait wtf thats cool

[An Pham @D0ct3rStr]

@thezdi hello @thezdi can you please be faster on replying to my mail towards invitation letter for my Germany Visa process ? (phvietan)

[An Pham @D0ct3rStr]

Late good bye to LINE Corp, it was a great experience working as Security Engineer. Thank you my boss @jz__ and my friend @03sunf , I appreciate all the things we did. Here are some recap https://t.co/4gU8daV7or