Tuấn Linh

Tweets are my own. Work at @starlabs_sg

[starlabs @starlabs_sg]

We're super stoked to publish this post. A huge shoutout to our former intern, @rainbowpigeon_ who poured his heart & soul into this 7-8 months ago. It took us a bit to polish it up but we're incredibly proud of him. Dive in & let us know what you think!
https://t.co/7YsHPq1EdL

[starlabs @starlabs_sg]

We are publishing less here now. But here is a recent post by @Tuan_Linh_98 & lots of guidance by @cplearns2h4ck

https://t.co/mdnnxhQv8E

[starlabs @starlabs_sg]

Please be careful of fake STAR Labs SG employee. Another one spotted again

https://t.co/SrVQ6K83lv

[starlabs @starlabs_sg]

Think you’ve got what it takes to pop shells and snag your ticket to... @REverseConf and @offbyoneconf ? 😏
https://t.co/Bof9oxLd6z

[Tuấn Linh @Tuan_Linh_98]

@cut_elim It's not even that good but somehow became standard everywhere lol

[Tuấn Linh @Tuan_Linh_98]

@cut_elim :( leetcode everywhere...

[NCC Group Research & Technology @NCCGroupInfosec]

Blog: Bypassing software update package encryption – extracting the Lexmark MC3224i printer firmware (part 1) - by @cvisines - https://t.co/COuI9lIub2

[Tuấn Linh @Tuan_Linh_98]

@__x86 @starlabs_sg Yeah, I was inspired by that tool. Too bad they stopped updating the repo so I created my own😄

[cts🌸 @gf_256]

The source code for Winnie, our new Windows fuzzer is now publicly released! Please enjoy the new Windows fork-server :D https://t.co/s5jme3B7Yj

[c3xp1r @c3xp1r]

Tried out CVE 2020-22204 with @PTDuy and @CurseRed at @starlabs_sg and had tons of fun trying to get a reverse shell while trying to get the meta-data of a malicious DjVu file with ExifTool.

[Faith 🇧🇩🇦🇺 @farazsth98]

Made a writeup for b64lib from S4CTF. Was a very good challenge written by @ptrYudai, very very subtle bug, and fortunately not a heap note :D

Most of the credit goes to the god @RBTree_ for spotting the bug that let us leak libc

https://t.co/1LuMjJw3TW

[starlabs @starlabs_sg]

Monday Blues? We have a new blog post, "You Talking to me?" by @CurseRed
https://t.co/GmoYvO1fkn
with some inputs from @Creastery and some editing work from Frances.
We hope it might be interesting for some of you.

[Alexander Popov @a13xp0p0v]

My write-up covering #Zer0Con2021 talk!

Four Bytes of Power: exploiting CVE-2021-26708 in the Linux kernel
https://t.co/GLukmZ7b1y

#Zer0Con2021 slides: https://t.co/rIOnakyr7A

PoC exploit demo video: https://t.co/2ceeuiffq6

Enjoy!

[inanc @inancgumus]

`testing.F` is coming soon. F is short for fuzz(ing).

Helps us to find hard-to-spot bugs in code automatically. This technique had found 200+ bugs in Go stdlib before.

Learn more?
https://t.co/TjgvrrFvbN by @katie_hockman

#golang

[ESET Research @ESETresearch]

While you’re updating #IDAPro to v7.6, take a minute to update #IPyIDA to v1.6, which now supports recent versions of the IPython kernel. Thanks to @zerotypic and all contributors who made this possible! https://t.co/P0meRT1ytT #IDA #IDAPython #ESETresearch cc @idatips 1/2

[Adrian Colyer @adriancolyer]

I'm pausing #themorningpaper for the time being. It's been a hugely rewarding project, and I'd like to say a massive thank you to everyone who supported and encouraged me in it over the years. Find out more here: https://t.co/310mUEzOH2

[NDSS Symposium @NDSSSymposium]

We welcome @Qualcomm to the #NDSS2021 as one of our Silver Sponsors. Want to support a leading, global #security conference? Find out more about our sponsorship opportunities: https://t.co/wWDJrawJ8l

[hk @harsh_khuha]

i hacked,
babyrop, sice-sice-baby, flippidy, and sourceless-rust-wasm-pwn, from #dicegang2021 ctf held over weekend,
the tasks were hard and nice. @dicegangctf
https://t.co/ga7eAsmtjU

[Runa Sandvik @runasand]

"6 of 24 0-days exploits detected in-the-wild [in 2020] are closely related to publicly disclosed vulnerabilities. Some of these 0-day exploits only had to change a line or two of code to have a new working 0-day exploit." https://t.co/MoVC8r7eGW

[Duc Phan @flyingpassword]

Hi everyone who have been following my account. I would like to let you know of a situation I am in right now. Words cannot say how I am confused, frightened and stressed out. I assume you all have heard of the campaign targeting security researchers.