bo13oy

Security Researcher

[Samuel Groß @5aelo]

Here are the slides from my #OffensiveCon19 talk about my approach for JavaScript engine fuzzing: https://t.co/ITeCL1D1gP My master's thesis (for which I developed the fuzzer) can be found here: https://t.co/hv5en0hmIT Thanks for the great conference @offensive_con! =)

[bo13oy @bo13oy]

@benhawkes @guhe120 crafted manually + fuzzing 😁

[bo13oy @bo13oy]

🤪

[Yuki Chen @guhe120]

Microsoft Edge Chakra OP_NewScObjArray Type Confusion Bug & Full Poc Exploit by bo13oy of Qihoo 360 Vulcan Team: https://t.co/1OIiF6PtBz

[bee13oy @bee13oy]

Google Chrome pdfium shading drawing integer overflow lead to RCE, from 360 Vulcan Team: https://t.co/aUmSZPatcG @zhouat1 👍👍

[bo13oy @bo13oy]

@BeginVuln Hi, mostly, I found them by fuzzing. :)

[bo13oy @bo13oy]

👏 https://t.co/mCrYv1aoFc

[bee13oy @bee13oy]

The slide for my talk at #Zer0Con2017, with the details of how I found vulns in AV Kernel Drivers.
https://t.co/bgrWuxjo5C

[bee13oy @bee13oy]

POCs for Avast Free Antivirus Software's Kernel Vulnerabilities I found last year, I will share other vendors' soon. https://t.co/UCrm6VzXRW

[bo13oy @bo13oy]

@z00kov @Ivanlef0u No cve number，the bug was fixed silently😂

[bo13oy @bo13oy]

Adobe Flash Player SecureSocket Use-After-Free Remote Code Execution Vulnerability died in the womb. It's poc here https://t.co/CNjpVER9WQ

[bo13oy @bo13oy]

Adobe Flash Patches（CVE-2017-3075, CVE-2017-3081, CVE-2017-3083, CVE-2017-3084）fix four of my bugs reported to them https://t.co/ZX3MfsKqlO

[bo13oy @bo13oy]

👏 https://t.co/7lTJUkZyiI

[vangelis @vangelis_at_POC]

bee13oy from CloverSec Labs is giving his talk, "Attacking Antivirus Software's Kernel Driver".

[bo13oy @bo13oy]

🤔 https://t.co/2KRifsyMiH

[bee13oy @bee13oy]

@thezdi thanks for all you've done! @bo13oy @bear13oy we made it together，cheers! https://t.co/lX2fXi3HFj

[bo13oy @bo13oy]

@_s7ylo No plan yet，Here's the details：https://t.co/JBsI3FnT4T

[bo13oy @bo13oy]

@aztec_36 Here's the details:https://t.co/JBsI3FFtWr

[bo13oy @bo13oy]

CVE-2016-5568 Oracle JRE AWT Use-After-Free Remote Code Execution Vulnerability exploit demo