Jeffxx

Researcher at @TrapaSecurity
Member of chroot,
Member of HITCON and 217 ctf team.
Focus on mobile and IoT security.

[L4ys @_L4ys]

I’ll be at CODE BLUE tomorrow. Check out our Cyber Range Exercise if you’re interested, and feel free to come say hi if you want to chat

https://t.co/PMyIoD16O0

[Jeffxx @Jeffxx_Chao]

@dada56746 欸我很多 你要嗎

[HITCON @HacksInTaiwan]

[HITCON Cyber Range 2024! Registration Countdown: 5 Days Left]

✨Attention cybersecurity elites! HITCON Cyber Range 2024 registration closes in 5 days!✨
Are you ready for Taiwan's most extreme blue team security challenge?
Don't miss out on this year's event designed for corporate blue team experts — HITCON Cyber Range!

📊Highlights of this competition:
🔵Opportunity to challenge for the title of strongest blue team
🟠Immersive experience in real enterprise attack and defense scenarios
🟣Compete head-to-head with top companies
🟡Master advanced security investigation techniques, lead the field
🟢Network with industry elites, broaden your horizons

This competition offers an excellent opportunity to enhance your company's cybersecurity capabilities and unleash your team's potential! The ultimate challenge to forge an unbreakable blue team!

Are you ready to accept the challenge? Register now and become a leader in cybersecurity defense!

📅 Event Schedule:
🚩 Qualifier Round (Online): July 26, 2024 (Friday) 10:00 - 23:59 (GMT+8), a total of 14 hours
🏆 Final Round (Onsite): October 30, 2024 (Wednesday) 10:00 - 16:00 (GMT+8), a total of 6 hours

🛎️ Registration Information:
🔸 Register here: https://t.co/tTS8rOmwAD
🔹 Qualifying Round Registration Deadline: July 17, 2024 (Wednesday) , 23:59 (GMT+8)
🔸 Qualifications Review Notification Date: July 19, 2024 (Friday)
🔹 Contact Email: [email protected]

#HITCON #CyberRange #CybersecurityCompetition #BlueTeam #CyberSecurity

[TRAPA Security @TrapaSecurity]

Demo video out for Zyxel VPN Pre-Auth RCE (CVE-2023-28771)
No extra config or web access needed, exploitable via WAN.
More details will be released, patch your device ASAP.
https://t.co/QpBfIomzzU

[TRAPA Security @TrapaSecurity]

We have reported a critical Pre-Auth RCE in Zyxel VPN Firewall (CVE-2023-28771)

The device can be exploited as soon as it connects to the internet, without any additional configuration.

Patch your Zyxel devices as soon as possible.

https://t.co/OYpMwg8Q6i

[Jeffxx @Jeffxx_Chao]

@dada56746 因為你還在前期都沒道具沒裝備（？ 後期可以湊各種神奇組合打怪

[Jeffxx @Jeffxx_Chao]

Q: How long do you take to find the vulnerbilities?
atdog: couple of minutes

[TrendAI Zero Day Initiative @thezdi]

Confirmed! The team of @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity used a command injection bug to take over the #NETGEAR router and get root. They win $5,000 and 1 Master of Pwn point.

[Jeffxx @Jeffxx_Chao]

Lucky draw!

[TrendAI Zero Day Initiative @thezdi]

Success! The team of @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity were able to get a root shell on the Western Digital NAS. They head off to the disclosure room to provide all of the details.

[TrendAI Zero Day Initiative @thezdi]

The next attempt will see @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity target the Western Digital My Cloud Pro. They start at 1200 Eastern (UTC-4). It's the 1st NAS entry in #Pwn2Own history! #P2OTokyo

[Jeffxx @Jeffxx_Chao]

Incredible backdoor & guessing CTF

[Jeffxx @Jeffxx_Chao]

@astarasikov I have tried to fake the usb event state to make the usb device directly write code segment. But the structure is too complicated and I am more familiar with heap exploitation. So I choose to exploit the heap. Is your way like this?

[Jeffxx @Jeffxx_Chao]

Here are my slides for my #BlackHat Talk: Breaking Samsung's Root of Trust: Exploiting Samsung S10 Secure Boot

https://t.co/An06bgtX76

#BlackHat2020

[Jeffxx @Jeffxx_Chao]

@orange_8361 s/god/cook/

[Jeffxx @Jeffxx_Chao]

Special thanks to @atdog_tw @seanwupi

[Jeffxx @Jeffxx_Chao]

@daydreamcattw 被咬到好幾次

[Jeffxx @Jeffxx_Chao]

Begin to use twitter haha!