exp-sky

Senior Security Researcher, Pwn2Own 2017 Winner and Tianfu Cup 2018, 2019 Winner. MSRC top 100 2015-2019.

[exp-sky @ExpSky]

Pwn2Own 2017 Edge Browser Full Winner. 😏 https://t.co/titF82guTu

[TrendAI Zero Day Initiative @thezdi]

Another #P2O win! Tencent Security – Team Ether used an arbitrary write in Chakra & escape the sandbox w/ a logic bug in #Edge and earn $80K

[exp-sky @ExpSky]

@yuange75 可惜袁哥了

[Prof. Feynman @ProfFeynman]

Remove yourself from people and places where you don’t feel valued and respected.

[exp-sky @ExpSky]

@5aelo congratulations!

[exp-sky @ExpSky]

d914a8c49c950ef56310e738e3335731a45ac01a9bc919d3e4b6a9ed729329af

[vangelis @vangelis_at_POC]

iOS jailbreak demo in iPhone 12 Pro running latest iOS 14.2 by Liang Chen(@chenliang0817) at Singular Security Lab(@SingularSecLab)

Ask Liang Chen or SingularSecLab about the jailbreak and his talk directly.

[exp-sky @ExpSky]

👍

[vangelis @vangelis_at_POC]

iOS jailbreak in iPhone 12 Pro + iOS 14.2(latest) will be demonstrated on the 3rd day of #POC2020. This means iPhone 12 Pro + iOS 14.2 is not safe.

[exp-sky @ExpSky]

👍

[KEENLAB @keen_lab]

KeenLab released the latest 5G security research demo : https://t.co/IuWdBRYYPt

[exp-sky @ExpSky]

@s0uRc3_c0de @Chompie A lot of details are involved in technology, I plan to share my very stable use method later.
But because of national policy, I have no way to directly publish the attack code.
So I may only post a blog. 😅

[exp-sky @ExpSky]

@chompie achieved #SMBGhost CVE-2020-0796 RCE exploit,Stunningly good job! 👍
I can fully understand your pain as I spent a lot of time to test its stability and finally succeeded in exploiting SMBGhost RCE continuously. 😜

[exp-sky @ExpSky]

@chompie1337 @Chompie I haven't debug your use, but I feel that the technology we use should be similar.
It may just be a slight difference in some addresses and subsequent usage methods.

[exp-sky @ExpSky]

@chompie Tested your exploit code，but It shows "physical read primitive failed" in my testing environment which might relate to VMware Physical Address at 0x1000. 🤔

[Ryan Levick @ryan_levick]

Today we at Microsoft are excited to announce the pre-release version of the Windows Runtime Language projection for @rustlang pushing support for Rust on Windows forward! https://t.co/Ukj0CQ3aP5

[James Forshaw @tiraniddo]

New P0 blog post up. How a one line change in the Windows kernel broke the Windows Chromium sandbox (and thus Edge and Firefox at the same time). https://t.co/yY11guLOm8

[Prof. Feynman @ProfFeynman]

• Read everyday.
• Spend time with nature.
• Ask questions.
• Never stop learning.
• Don't pay attention to what others think of you.
• Do what interests you the most.
• Study hard.
• Teach others what you know.
• Make mistakes and learn.
• It's Okay to not know things!

[Ben Hawkes @benhawkes]

Project Zero blog: "SockPuppet: A Walkthrough of a Kernel Exploit for iOS 12.4" by Ned Williamson (@NedWilliamson) -- https://t.co/wgsRkOUf8L

[j00ru//vx @j00ru]

Are you interested in font security? I've just updated my BrokenType repository (https://t.co/t5QBfx4drE) with several new tools: font2pdf (embedding custom fonts in PDFs), a DirectWrite API testing harness and a Windows FontSub.dll loader. Enjoy :)

[Tetrane @tetrane]

Applying Timeless Analysis to the recent CVE-2019-1347: When a mouse over a file is enough to crash your system. Read our analysis and get your hands on the trace on our new demo platform. https://t.co/kUmTcSHNs6

[exp-sky @ExpSky]

Happy to successfully exploited Edge Browser + Sandbox Bypss at #TianfuCup ,and our Sandbox Bypass vulnerability can exploit Chrome Sandbox as well.

Details of the relevant vulnerabilities will be published at the appropriate time.

Credit goes to our team members. 👻

[TianfuCup @TianfuCup]

Congrats! All the three Edge exploits are confirmed to be success! Teams ddd @ExpSky and 360vulcan @mj0011sec both achieved RCE + sandbox escape, so each earned $55,000. Team .(dot) get $10,000 with RCE.