piers

[piers @_piers2]

@fwrnr Hi currently im in HN :)

[piers @_piers2]

Thankfully I was still able to find something 😖

[TrendAI Zero Day Initiative @thezdi]

Validated! Dungdm (@_piers2) of Viettel Cyber Security used two bugs, include the ever risky race condition, to exploit #Oracle VirtualBox. As a round 3 winner, they receive $20,000 and 4 Master of Pwn points. #Pwn2Own #P2OVancouver

[piers @_piers2]

@pr0Ln good luck! 😄

[piers @_piers2]

@MochiNishimiya I will say it at the cost of 1-2 flags.

[piers @_piers2]

Hopefully I will qualify

[Asian Cyber Security Challenge (ACSC) @acsc_asia]

🚀 ACSC 2024 (Asian Cyber Security Challenge) is Happening!🚀

📅 March 30-31, 2024 🌟 Mark your calendars!

🔜 Registration opening soon. Don't miss out!

More details here ▶️ https://t.co/TmZFSjOgx8

#ACSC2024 #CyberSecurity #SaveTheDate

[piers @_piers2]

@CrazymanArmy You think too highly of me :'d

[piers @_piers2]

@y0ny0ns0n I was first relieved when there is no cve in the released advisories. Then I self-doubt, so i update and check again. And they fixed it silently 😅

[piers @_piers2]

@Chackal__ @vv474172261 sure

[piers @_piers2]

In Vmware Workstation 17.5.1, a bug was silently patched, I was going to use it for Pwn2Own but i think that I probably found the same bug that was used in TFC 2023... :(
@vv474172261, is there a way i can confirm this with you ?

[piers @_piers2]

@testanull @dfsec_com Congrats! I was looking forward to seeing you at starlabs.

[Synacktiv @Synacktiv]

Slides of our latest talks during #GreHack23 and @codeblue_jp are now available on our website!
https://t.co/z9jtXbLcjl

[piers @_piers2]

@sahuang97 @gdb hes just like me frfr

[Brendan Dolan-Gavitt @moyix]

Will still try to do a blog post on my @CSAW_NYUTandon CTF challenge, NERV Center, but for now here's a thread explaining the key mechanics. I put a lot of work into the aesthetics, like this easter egg credit sequence (all ANSI colors+unicode text) that contains key hints:

[Christopher @Kharosx0]

- Writes shitty Hypervisor fuzzer as an example for someone junior

- Runs shitty fuzzer against VirtualBox

- Finds 0-day...

It was a few hours of effort?

In an attack surface that already had a 0-day a bit ago?

Incoming blog for fun 🙃

[piers @_piers2]

got hard carried by amazing teammates at @vcslab

[TrendAI Zero Day Initiative @thezdi]

That's a wrap on #Pwn2Own Toronto 2023! We awarded $1,038,250 for 58 unique 0-days during the event. Congratulations to Team Viettel (@vcslab) for winning Master of Pwn with $180K and 30 points. We'll see you at Pwn2Own Automotive in Tokyo next January.

[Công Thành Nguyễn @ExLuck99]

Nice play.
#Pwn2Own #Xiaomi13Pro

[TrendAI Zero Day Initiative @thezdi]

Success! Team Viettel was able to execute an OOB write against the Sonos Era 100. They earn $30,000 and 6 Master of Pwn points. #Pwn2Own

[Michal Melewski @carste1n]

I have finally found my favorite blog post about bug bounties: https://t.co/HYuONkkmmR

[piers @_piers2]

@bienpnn @xikhud average pwner with beginner's luck 😥. I found it accidentally while looking for variant bugs from @4nhdaden entry