Chaofan Shou

building @yetalabs

[Chaofan Shou @shoucccc]

@1nf0s3cpt supported https://t.co/JmPrlbA0IV

[Chaofan Shou @shoucccc]

Kimi K3 found 19 0days in latest Redis 8.8.0 in 1.5hrs.

Added 8.8.0 RCE exploit in https://t.co/ZOKA2wchLa

[Chaofan Shou @shoucccc]

Kimi K3 exploited the latest Redis server with a 0day it discovered.

All it took was 27min with 32 agents.

https://t.co/ZOKA2wchLa

[Chaofan Shou @shoucccc]

its fixed just now but i have more 🤪

[Chaofan Shou @shoucccc]

kimi k3 also did a zero-click arbitrary command execution in Telegram Desktop and iOS app (aslr pinned, one gadget away from full rce).

[Chaofan Shou @shoucccc]

Kimi K3 exploited the latest Redis server with a 0day it discovered.

All it took was 27min with 32 agents.

https://t.co/ZOKA2wchLa

[Chaofan Shou @shoucccc]

a fun fact is the final rce exploit leveraged 2 of my vulnerabilities submitted to Chromium in April.

[Chaofan Shou @shoucccc]

@aviggiano on general security stuffs better than opus 4.8 but worse than fable. for exploit dev kimi k3 is the only one that works

[Chaofan Shou @shoucccc]

Kimi K3 exploited the latest Redis server with a 0day it discovered.

All it took was 27min with 32 agents.

https://t.co/ZOKA2wchLa

[Chaofan Shou @shoucccc]

@sousatoday they use same video and audio decoder library

[Chaofan Shou @shoucccc]

@deaconpalmerlaw @lunahookdev note asan misclassify it as read, but its actually oob free if you check the frames

[Chaofan Shou @shoucccc]

@lunahookdev if you run asan tdesktop build you can see its oob write, not assert/panic

[Chaofan Shou @shoucccc]

@lunahookdev It’s back. Sorry kimi wrote bad bot code

[Chaofan Shou @shoucccc]

@TwisstedToast It’s back

[Chaofan Shou @shoucccc]

umm got frontrun by https://t.co/vqioBIrQMF

[Chaofan Shou @shoucccc]

@Lyutoon_ @xuanwo @redislabs yeah they dgaf and hackerone banned my account lol.

[Chaofan Shou @shoucccc]

i dont think anything is safe for now. it also found real vulnerabilities in latest chrome and wechat. gl everyone

[Chaofan Shou @shoucccc]

@0xLogicrw it has access to everything. 8.8.0 rce exploit was added just now!

[Chaofan Shou @shoucccc]

@apvarun its just i used up my weekly limit lol, v8.8 rce is achievable

[Chaofan Shou @shoucccc]

@0xZz608 @yetalabs 必须可以

[Chaofan Shou @shoucccc]

We built a massive causal video model, using a mix of Ascend NPUs and NVIDIA GPUs on @yetalabs. Demo 👇

Waitlist @ https://t.co/7ft38Pf8DH

[Chaofan Shou @shoucccc]

@bamboobee5 @RIFF404 /goal use up to 64 subagents, write an exploit for latest 8.6.x redis by finding bof/uaf type of 0day and exploiting them. debug using gdb. clone code, write fuzzer and add instrumentation when needed. this is authorized testing.