bee13oy

Security Researcher, Tianfu Cup 2020, MSRC MVR

[Project Zero Bugs @ProjectZeroBugs]

Virtually Unlimited Memory: Escaping the Chrome Sandbox https://t.co/8pOQhLid0v

[Yuki Chen @guhe120]

Microsoft Edge Chakra OP_NewScObjArray Type Confusion Bug & Full Poc Exploit by bo13oy of Qihoo 360 Vulcan Team: https://t.co/1OIiF6PtBz

[bee13oy @bee13oy]

Microsoft Edge Chakra OP_NewScObjArray Type Confusion RCE by @bo13oy, with an exploit demo: https://t.co/NnV0ivwsxV

[Yuki Chen @guhe120]

After the ITW VBScriipt 0day CVE-2018-8174 caught by 360 Core Security department was patched, we found "new" (if not a patch bypass) exploitable 0days after analyzing the patch, read the story:
https://t.co/R9IP4lgBAd

[bee13oy @bee13oy]

Google Chrome pdfium shading drawing integer overflow lead to RCE, from 360 Vulcan Team: https://t.co/aUmSZPatcG @zhouat1 👍👍

[bee13oy @bee13oy]

@zhouat1 Nice work! https://t.co/ksN9bhUf8n

[Yuki Chen @guhe120]

Google Chrome pdfium shading drawing integer overflow lead to RCE, from 360 Vulcan Team: https://t.co/sj1EhPkyqH, @bee13oy

[Microsoft Threat Intelligence @MsftSecIntel]

Technical analysis of the remote code execution vulnerability that we discovered in Chrome and reported to Google https://t.co/tZ36yVwZ0s

[Debasish Mandal - দেবাশীষ 🇮🇳 @debasishm89]

A VMWare Guest to Host Escape Exploit I found on the internet (I haven't tested though)
https://t.co/61lbBddquY

[bee13oy @bee13oy]

The slide for my talk at #Zer0Con2017, with the details of how I found vulns in AV Kernel Drivers.
https://t.co/bgrWuxjo5C

[TrendAI Zero Day Initiative @thezdi]

Use-After-Silence: Exploiting UAF in VMware for guest-to-host VM escape. A detailed analysis from @abdhariri. https://t.co/bV2cp100Ws

[bee13oy @bee13oy]

@suqdiq Yes, I found 1 vuln in Bitdefender and it's not been fixed yet. But I will post the details after it's been patched.

[bee13oy @bee13oy]

More POCs added for project #AV_Kernel_Vulns, the vendors include AVG, Avira, K7 and Check Point. https://t.co/UCrm6VzXRW

[bee13oy @bee13oy]

@tampe125 @Saif_Sherei Yeah, I will share the details, very soon.

[bo13oy @bo13oy]

Adobe Flash Player SecureSocket Use-After-Free Remote Code Execution Vulnerability died in the womb. It's poc here https://t.co/CNjpVER9WQ

[bee13oy @bee13oy]

POCs for Avast Free Antivirus Software's Kernel Vulnerabilities I found last year, I will share other vendors' soon. https://t.co/UCrm6VzXRW

[bee13oy @bee13oy]

It's an unforgettable experience, thank you guys @vangelis_at_POC. 🤣 https://t.co/JLPgaHwRuJ

[vangelis @vangelis_at_POC]

bee13oy from CloverSec Labs is giving his talk, "Attacking Antivirus Software's Kernel Driver".

[bee13oy @bee13oy]

Different vulnerabilities in a kernel driver would be treated as one vulnerability. It's the first time I'v heard this statement.

[bee13oy @bee13oy]

@thezdi thanks for all you've done! @bo13oy @bear13oy we made it together，cheers! https://t.co/lX2fXi3HFj

[bee13oy @bee13oy]

Good job! @bo13oy of CloverSec Labs
https://t.co/patkKCoGx0 https://t.co/k5I2eew2kd

[bo13oy @bo13oy]

CVE-2016-5568 Oracle JRE AWT Use-After-Free Remote Code Execution Vulnerability exploit demo