bbbig

Vulnerability Researcher @theori_io; Pwn2Own Vancouver 2024 Winner;
DEFCON CTF 31, 32 Winner;
CTF Player (Team GYG, TheDuck, MMM)
; MS at SoftSec Lab in KAIST.

[bbbig @bbbig12]

@POC_Crew @0x10n It was really amazing talk thank u

[Angelboy @scwuaptx]

We’ve released Part II of our Windows Kernel Streaming series!

[Gwangun Jung @pr0Ln]

Thank you for listening to our presentation.

If you have any questions, please DM(or email) me or @bbbig12.

[Tim Becker @tjbecker]

Thrilled to learn our (@theori_io) CRS got first place in the AIxCC Semifinal competition. For the semifinal competition, we focused on implementing simple ideas in a robust way. I'm eager to implement our more ambitious ideas for the final event next year!
https://t.co/17NpbBlbuv

[Theori @theori_io]

🚨 New Linux Kernel vulnerability (CVE-2024-27394) discovered & patched by Theori!
🔗 https://t.co/w5s8PTDvdl

Our researcher @v4bel at #Theori identified a critical #UAF vulnerability in TCP-AO caused by a race condition in the #RCU API. Using techniques from the ExpRace paper, we extended the race window to demonstrate its exploitability.

Curious how we did it?
Read our deep dive for the full details!

#Theori #Cybersecurity #LinuxKernel #TCP #VulnerabilityResearch #CVE #TechBlog

[bbbig @bbbig12]

See you at Paris!!

[Hexacon @hexacon_fr]

"Guest Revolution: Our Story of Compromising the Host Kernel from the VMware Guest" 🏚️

by Junoh Lee & Gwangun Jung (@pr0ln)

[Theori @theori_io]

In a recent #APT simulation, #Theori uncovered 4 critical #RCE vulnerabilities in @cososys Endpoint Protector (EPP) that let us fully compromise the server & clients. Here’s a peek:

👾 CVE-2024–36072: Unauthenticated attackers can exploit a logging flaw to execute system commands with root privileges.

👾 CVE-2024–36073: With admin access, attackers can overwrite configurations and execute commands on client endpoints.

👾 CVE-2024–36074: Server access allows attackers to execute malicious files.

👾 CVE-2024–36075: Unauthenticated attackers can manipulate client configurations to potentially bypass security and achieve remote code execution.

Could your server be #hacked the same way? Find out through our blog post!
👉 https://t.co/PslFaFDbcF

[DEVCORE @d3vc0r3]

Today, Angelboy (@scwuaptx) revealed his Kernel Streaming research! 🚀 Check out how he uncovered this overlooked attack surface, leading to pwning Windows 11 at #Pwn2Own Vancouver 2024:
https://t.co/sPrNqjPoDO 

#WindowsKernel #MSRC

[bbbig @bbbig12]

Our team member @v4bel and @_qwerty_po exploited kernelCTF lts with 0day vulnerability. It was really amazing work. They'll gonna share the detail soon.

[qwerty @_qwerty_po]

Successfully exploited a 0-day vulnerability in KernelCTF!

work with @v4bel 🎉

[Theori @theori_io]

Part 4 of our N-Day Exploit Series is LIVE! 🔥
➡️ https://t.co/7qm9IzDqYu

Unveiling CVE-2023-34044, an information leakage vulnerability in #VMware Workstation’s #VBluetooth device, found by our own @pr0ln!

It’s a variant of CVE-2023-20870 demonstrated by @starlabs_sg in #Pwn2Own2023 Vancouver.

Dive into the details.

#Theori #티오리 #VulnerabilityResearch #ndayfullchainexploit

[Gwangun Jung @pr0Ln]

We posted our third writeup of N-day full chain series:

Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System https://t.co/wEsseLMLDU

[bbbig @bbbig12]

We posted our second writeup of N-day full chain series:

https://t.co/9tgCnSExHq

[bbbig @bbbig12]

@qwqbebe Our team likes to share things, so 'maybe' we could make it public.
Before that, please look forward to the N-day chain blog series that will be posted soon. :)

[bbbig @bbbig12]

We just pwned VMware and Windows11

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Gwangun Jung (@pr0ln) and Junoh Lee (@bbbig12) from Theori (@theori_io) combined three different bugs to escape #VMware Workstation and then execute code as SYSTEM on the host OS. This impressive feat earns them $130,000 and 13 Master of Pwn points. #Pwn2Own

[bbbig @bbbig12]

@grigoritchy Wow

[bbbig @bbbig12]

@0x10n Awesome work...!!

[TrendAI Zero Day Initiative @thezdi]

Wow! The Theori was able to exploit VMware Workstation with an additional Windows Kernel LPE vulnerability in the Virtualization category. They went from guest OS to SYSTEM on the host OS. They're off to the disclosure calls with details. #Pwn2Own

[Theori @theori_io]

We've started a blog series on N-day full chain exploits.

The first part is about chrome renderer exploit, CVE-2023-3079.

Check it now!👇👇
https://t.co/JTU6RZD2g4

#Theori #티오리 #Blog #Research #Fermium252 #Chrome #VirtualMachine #CVE #Vulnerability

[Super Guesser @SuperGuesser]

We are recruiting reversing guys. If you are interested in our team, plz mail to [email protected] with your self introduction. We will review and mail back!! Thank you.

[Super Guesser @SuperGuesser]

we won zer0pts CTF 2021 😃😃
The challenges are really insanely hard and creative. Thank you for team zer0pts :)