An Pham

Push harder everyday

[An Pham @phvietan]

@thedawgyg we got Nightmare Eclipse for Apple lol

[An Pham @phvietan]

@S1r1u5_ @LiveOverflow thats greattt congratzz

[An Pham @phvietan]

@for_N5R1 as I remember they fixed on the websocket endpoint need a secret key to trigger the plugin download. That was around May not sure what is the current state

[An Pham @phvietan]

Better late than never. I published my writeup on Pwn2Own Berlin May 2026 on LMStudio RCE chain (fixed long time ago) https://t.co/n1UudvLBAp 👀👀👀

[An Pham @phvietan]

changed blog post to https://t.co/eEDO0Ubidk

[An Pham @phvietan]

On LINE CTF 2023, I was the author of challenge 'another secure store note'. The challenge was mainly about Firefox web client-side attacks and was solved by 7/477 teams. Here is my full writeup and my thoughts https://t.co/wnmE3y5Gxx
#linectf

[An Pham @phvietan]

@CaidoIO thank you so much for the mode of opt-out of scope traffic out of project 🫡🫡🫡 this is goat

[An Pham @phvietan]

@thsottiaux damn let them cook

[An Pham @phvietan]

@ethical_h4ck3r_ looks like skyrim shouts

[An Pham @phvietan]

@CaidoIO able to delete a request traffic with request_id
- so that can use in workflow node
- can use in plugin
so that can minimize the project size 'cause my project is so so big

[An Pham @phvietan]

@CaidoIO able to create custom httpql column that support string and number, defined via workflow or custom column ui creation with column name, a javascript for onRequest or onResponse then can filter with httpql

[An Pham @phvietan]

@0xacb this would be a interesting ctf challenge haha thx

[An Pham @phvietan]

@jorfolle you should see how fucked up the VNmese gov these days

[An Pham @phvietan]

@0xLupin great article, thank you for your pov

[An Pham @phvietan]

@_sy1vi3 sorry to say this but jeopardy style CTF is heavily affected by AI and you have no way to ban people from using LLM. Even if you look at their script, they can just use LLM then try to modify the code to look real. I remember there's a team working towards post-LLM era CTF

[An Pham @phvietan]

@calif_io @lcfr_eth always top-notch ❤️

[An Pham @phvietan]

@joaxcar true my friend one-shot it with codex, where I used claude its really struggling

[An Pham @phvietan]

@namedXbird @kinugawamasato u're too dump for his research

[An Pham @phvietan]

@Nisingizwe19079 AI bullshit

[An Pham @phvietan]

@SahilExec the flaw is that this api is completely useless

[y198 @y198_nt]

Over the next few months, we'll be gradually publishing some of our internal security research.

Starting with a bug chain that turns Nginx-Rift + Nginx-PoolSlip into full RCE.

More to come.
#Nginx #1day #RCE
https://t.co/tqQMFAoX9P