MinhCuong

[TrendAI Zero Day Initiative @thezdi]

That's a wrap on #Pwn2Own Toronto 2023! We awarded $1,038,250 for 58 unique 0-days during the event. Congratulations to Team Viettel (@vcslab) for winning Master of Pwn with $180K and 30 points. We'll see you at Pwn2Own Automotive in Tokyo next January.

[TrendAI Zero Day Initiative @thezdi]

Success! Synacktiv was able to execute a heap-based buffer overflow in the kernel triggered via WiFi and leading to RCE against the Wyze Cam v3. They earn $15,000 and 3 Master of Pwn points. #Pwn2Own

[0xor0ne @0xor0ne]

Linux debugging, profiling and tracing training
Very cool course by @bootlincom

Slides: https://t.co/OxmADoTOEH
Lab exercises: https://t.co/3Irhh332w1
Lab material (.tar.xz): https://t.co/psVOfoxSbW

#Linux

[SinSinology @SinSinology]

Bypassing #SecurePoint UTM’s Authentication (CVE-2023-22620) by @MrTuxracer

https://t.co/DrhBBx2HWC

[TrendAI Zero Day Initiative @thezdi]

Highlights from Day 3 of #Pwn2Own Toronto: Team Viettel vs the Canon printer

[ϻг_ϻε @steventseeley]

I highly recommend the training class “Hunting Zero-Days in Embedded Devices” by @pedrib1337 and @RabbitPro. I had a blast!

[TrendAI Zero Day Initiative @thezdi]

@rskvp93, @huyna89, @hoangnx99, @_q5ca, @ngcaobaolong from Team Viettel (@vcslab) celebrates their successful SOHO SMASHUP pwn at #P2OToronto with a little 🍾🍾 !! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

On the first win of Day 3 of #P2OToronto, @biennd279 and @rskvp93 from Team Viettel (@vcslab) used a command injection on a WD NAS to help add a little extra holiday decoration to the venue! This nets the team another $20K and 4 MoP points! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Another full win for team Viettel!
#Pwn2Own #P2OToronto

[TrendAI Zero Day Initiative @thezdi]

Claroty Research was able to execute a chain of 3 bugs (2x Missing Auth for Critical Function and an Auth Bypass) attack against the Synology DiskStation DS920+ in the NAS category. They earn $40K and 4 Master of Pwn points. #Pwn2Own #P2OToronto

[TrendAI Zero Day Initiative @thezdi]

Starting Day 2 of #P2OToronto in style with a full win! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Team Viettel (@rskvp93, @_q5ca, @hoangnx99 from @vcslab) with another win! #P2OToronto #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

@hoangnx99, @KmaHaToan, @QuangHV99 from @vcslab achieves a 2-bug successful attack at #P2OToronto. #Pwn2Own

[Công Thành Nguyễn @ExLuck99]

SOHO entry bugs get killed during registration.
Am I sad? Yes
Can I do anything? No
😂😂😂😂😂😂
https://t.co/EdXykyqKH7

[0xor0ne @0xor0ne]

Blogpost by @TalosSecurity about vulnerabilities in TCL LinkHub Mesh Wi-Fi system.

https://t.co/Y1TxhxSUGY

#iot #embedded #infosec #cybersecurity

[0xor0ne @0xor0ne]

A few years old but still a super interesting case study of Wi-Fi stack
exploitation by Gal Beniamini.
The case of Broadcom chipsets.

Part 1: https://t.co/gy5Sb3SvBm
Part 2: https://t.co/O7hAQqNv4q
Part 3: https://t.co/UMlWTKHdM4

#wifi #80211 #infosec #cybersecurity #hacking

[MinhCuong @Nobey98]

@TheMoonCarl Whyy is everyonee silent about thiss???

https://t.co/rCGUbawY1p .

[MinhCuong @Nobey98]

@TheMoonCarl Coins public GİVE is LİVE🚀

50k bnb🐋

https://t.co/ieGBvIyCy7 .

[MinhCuong @Nobey98]

@ic3sw0rd Hi friend, Can I ask how you unpack the firmware? Thank you