Hacking Team 3

bugmaxxing

[Hacking Team 3 @ht3labs]

HT3 was mid jestergooning when a group of Vendors came and spiked our Cortisol levels 😭

Is Ignoring the Vendors while munting and mogging printers more useful then RCE ghidrafishing in the Pwn2Own?

[Hacking Team 3 @ht3labs]

New blog post!

Local LPEs for QNAP Qfinder Pro / QSync / QVPN

https://t.co/8gtlwEHLuy

[Hacking Team 3 @ht3labs]

@pixiepointsec @flyingpassword Great analysis guys ;)

[Hacking Team 3 @ht3labs]

they're taking our name and using it for no good :(

[Boris Larin @oct0xor]

The HackingTeam is back! New name, new malware, new exploits https://t.co/B7l4wpqByH

[Hacking Team 3 @ht3labs]

who up eugening they whatsapp? 👀

[Hacking Team 3 @ht3labs]

sorry no #Pwn2Own entry this year we were busy feeding our swine

[Hacking Team 3 @ht3labs]

We're proud to announce that we've splashed out on an office so we can work together towards Master of Pwn!

[TheZDIBugs @TheZDIBugs]

[ZDI-25-622|CVE-2025-25268] (Pwn2Own) Phoenix Contact CHARX SEC-3150 Configuration Service Missing Authentication Vulnerability (CVSS 8.8; Credit: HT3 Labs (@ht3labs)) https://t.co/7x8LCiatRW

[TheZDIBugs @TheZDIBugs]

[ZDI-25-621|CVE-2025-25269] (Pwn2Own) Phoenix Contact CHARX SEC-3150 DHCP Configuration Command Injection Remote Code Execution Vulnerability (CVSS 8.8; Credit: HT3 Labs (@ht3labs)) https://t.co/boD2bPEkhx

[Hacking Team 3 @ht3labs]

@daaximus Nothing is truly free.

[Hacking Team 3 @ht3labs]

New blog post is out! We did some Windows reverse engineering here. Enjoy!

https://t.co/CvJy2NwCoA

[Hacking Team 3 @ht3labs]

Writeups are literally just hastily written markdown files converted to HTML, so typos and weird grammar might exist.

Most importantly, they have full exploit code.

[Hacking Team 3 @ht3labs]

Our blog is live! Here's our QNAP exploit from Pwn2Own Ireland

https://t.co/fRtlpaicql

[Hacking Team 3 @ht3labs]

Our blog is live! Here's our BeeStation exploit from Pwn2Own Ireland

https://t.co/auHYJ2WFun

[Hacking Team 3 @ht3labs]

Our blog is live! Here is our Phoenix Contact exploit from Pwn2Own Automotive 2025

https://t.co/VUBFmDw0s0

[Hacking Team 3 @ht3labs]

Autistic VR people are full of exploits, you just need to roll them. Team productivity is up 500%

[Hacking Team 3 @ht3labs]

What we spent our Pwn2Own money on:

[Hacking Team 3 @ht3labs]

You missed us in S tier

[Zia @Zia__Rashid]

Something our VR group thought up

[TrendAI Zero Day Initiative @thezdi]

Confirmed! The folks from @ht3labs used a missing authentication bug combined with an OS command injection to exploit the Phoenix Contact CHARX. Their 2nd round win nets them $25,000 and 5 Master of Pwn points.

[TrendAI Zero Day Initiative @thezdi]

In their #Pwn2Own debut, the team from HT3 Labs (@ht3labs) exploited the Phoenix Contact CHARX SEC-3150. They were nice enough to make Zed an honorary member, too. They head off to the disclosure room to explain themselves. #P2OAuto