Nguyễn Đình Biển

CTF player (aka d3s34) at hsvcs.

CSSLP - Application Security Engineering (aka biennd4) at Viettel Cyber Security.

[Tanya Janca | Shehackspurple @shehackspurple]

Thoughts!?!?!??!?!?!?!?!?

[VCSLab @vcslab]

Rock on🤘🤘🤘
It is interesting to hear the legendary stories surrounding the rocks here.
#Pwn2Own #Ireland #MasterOfPwn

[VCSLab @vcslab]

Wrap on Day 2, we got 8 more points for 2 entries: Sonos speakers and HP printers. We continue to hold the top 1 Master of Pwn, keep it up 💪💪💪

[VCSLab @vcslab]

Good start for the first time onsite, there were a few nervous moments but it was well controlled. Thanks @thezdi for the support 🙏🙏🙏
P/s: actually the points are 16, not 13

[TrendAI Zero Day Initiative @thezdi]

Success! @hoangnx99, @rskvp93, and @_q5ca from Team Viettel (@vcslab) used a 2-bug chain in their attempt against Microsoft Teams. They earn $75,000 and 8 Master of Pwn points.

[VCSLab @vcslab]

Now we are back with 2 entries. Come on!
https://t.co/c3vmDYrJGv

[Adam Langley @BuildHackSecure]

No matter what I throw at @enricocavalli he always wins! Awesome hacker!

[TheZDIBugs @TheZDIBugs]

[ZDI-23-111|CVE-2022-29843] (Pwn2Own) Western Digital MyCloud PR4100 DDNS Response Processing Command Injection Remote Code Execution Vulnerability (CVSS 7.5; Credit: rskvp93 and biennd4) https://t.co/LrFwzbc4ji

[VCSLab @vcslab]

Oracle EBS Unauth RCE #CVE-2022-21587 analysis from our researchers @vudq16 @_q5ca @hoangnx99 https://t.co/WTC2eyx0uf

[VCSLab @vcslab]

SAML ShowStopper from our researcher @_l0gg. Any software not only Manageengine that uses old version of xmlsec and xalan should take care it seriously. @_l0gg will show a technique by using DocumentHandler to defeat xslt transformer. #CVE-2022-47966 https://t.co/vlbERGVNi4

[VCSLab @vcslab]

A critical one, update as soon as possible.

[Pham Khanh @rskvp93]

I learned a lot about internal Powershell working when I go through TabShell bug #CVE-2022-41076. Here is the detail https://t.co/lJb7OjPzMj. And a few problems still there and may be need more investigation. with @_q5ca, @hoangnx99

[VCSLab @vcslab]

How to attack S7commplus protocol of Siemens PLC in SCADA environment. Our team member @Nobey98 shares his research on S7commPlus protocol, algorithm and show a demonstration to control a PLC device:
https://t.co/GpKBduB3dH
https://t.co/gjGHcWHtOY
https://t.co/7Cg0Chs2Sk

[Pham Khanh @rskvp93]

MSRC released the patch for our "TabShell" vulnerability (https://t.co/5vlDHIlX02). This is a nice bug chain to RCE Exchange on-premises, Exchange Online, Skype for Business Server (may be SFB Online+Teams too but can't find its powershell remote endpoint) with @_q5ca @hoangnx99

[TrendAI Zero Day Initiative @thezdi]

@rskvp93, @huyna89, @hoangnx99, @_q5ca, @ngcaobaolong from Team Viettel (@vcslab) celebrates their successful SOHO SMASHUP pwn at #P2OToronto with a little 🍾🍾 !! #Pwn2Own

[VCSLab @vcslab]

We have another full win entry. Congrats the team. Hope the last our SOHO entry got lucky 🔥🔥🔥

[Nguyễn Đình Biển @biennd279]

🔥🔥🔥

[TrendAI Zero Day Initiative @thezdi]

On the first win of Day 3 of #P2OToronto, @biennd279 and @rskvp93 from Team Viettel (@vcslab) used a command injection on a WD NAS to help add a little extra holiday decoration to the venue! This nets the team another $20K and 4 MoP points! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Team Viettel (@rskvp93, @_q5ca, @hoangnx99 from @vcslab) with another win! #P2OToronto #Pwn2Own

[bugcrowd @Bugcrowd]

Researcher Spotlight 🔦

Security Engineer, Redteam, and #bugbounty #hacker! 🚨

@haxor31337 💬
https://t.co/8e9xzPuEvS

[TrendAI Zero Day Initiative @thezdi]

@hoangnx99, @KmaHaToan, @QuangHV99 from @vcslab achieves a 2-bug successful attack at #P2OToronto. #Pwn2Own