Taidh

Penetration Tester at VNPT Cyber Immunity | Cyber Security Reseacher | Redteam | SRT Member | Bug Bounty Hunter

[Taidh @taidh_]

I experimented with using Claude through MCP as a reverse engineering assistant alongside JADX and IDA Pro to analyze a Mitel MiCollab CVE.

The result was surprisingly effective for patch analysis and root cause identification.

Full write-up:
https://t.co/rFfq6hRcX9

[slonser @slonser_]

Recently found a bypass in DOMPurify in certain cases. Today, versions 3.0.10 and 2.4.8 were released, fixing the issue.
Documented the problem here: https://t.co/qINFoNP4uF
Thanks to mario of @cure53berlin for excellent communication! #DOMPurify #security

[Janggggg @testanull]

MS finally replys to our email and allow us to public more details about the Auth bypass and Code Injection chain in SharePoint, which was used in Pwn2Own Vancouver 2023.
Here is the (not-so) fully working PoC for that:
https://t.co/kj6decsL4S
Have a nice weekend! ;)

[Volexity @Volexity]

If you are attending #BSidesChicago, don't miss @attrc's talk, Hunting For Credential Dumping Attacks In Modern Windows Environments, Nov 10 @ 1:00PM (Note the new time!). The full conference schedule is here: https://t.co/etUkLBh9LQ

#memoryforensics #dfir

[TrendAI Zero Day Initiative @thezdi]

Announcing #Pwn2Own Vancouver 2023! #Tesla returns with a new Steam VM escape category. #Windows DNS & ISC BIND are new. macOS return in the LPE category and much more. 7 categories total with more than $1,000,000 in cash and prizes. Read the details at https://t.co/Uk4f7AlDth

[Taidh @taidh_]

My Twitter Interaction Circle

Generate yours at https://t.co/jOTHBTqmKa

⠀

[Taidh @taidh_]

@n3mohb Here is the analysis of CVE-2022-39396, hope you guys like it 😙

https://t.co/hymKICPI1M

[Taidh @taidh_]

I have successfully reproduced CVE-2022-39396 causing RCE on Parse Server with @n3mohb and another of my friend 🫶

Ref: https://t.co/WAiC88LxZi

[Taidh @taidh_]

@VietPetrus @n3mohb Sẽ sớm public nha :v

[mgeeky | Mariusz Banach @mariuszbit]

☢️ I'm so excited - just issued my first blog post☢️
As promised - sharing my @WarConPL slides deck on:

https://t.co/mynQW0aXsF

Power of positive feedback made me publish them during my first day of holidays (●'◡'●)

Let me know if you like it 🔥

[Taidh @taidh_]

@loknop @hxpctf oh cool solution, but can you share a script to generate this code?

[st98 @st98_]

SECCON CTF 2021 writeup - st98 の日記帳 - コピー https://t.co/akm1PW6u39 書きました

[Jas502n @jas502n]

#LOG4J2-3201

https://t.co/phflmujPva

https://t.co/DT7gH7Rapc

[Taidh @taidh_]

@orange_8361 oh NO NO NO lol 🤣

[Taidh @taidh_]

Finished 3st in HITCON 2021 with my team ♥

[PZ Read @PZRead]

Source and official solutions of ACSC 2021 #ascs_asia #ctf
https://t.co/haPYEjIa6U

[Janggggg @testanull]

Just published detailed analysis of Microsoft Exchange Deserialization to RCE (CVE-2021-42321), which's also found exploited in Tianfu Cup.
English version from @peterjson
PoC is not provided,
Have fun!
https://t.co/H9Q2Q5Gbpw

[RIVER @wugeej]

GitLab ExifTool DjVu1 RCE (CVE-2021-22205)

1. Generating the payload. This generates a DjVu image named attack.jpg

2. Sending the payload. Any random endpoint will do.
curl -v -F 'file=@attack.jpg' http://[Victim]/$(openssl rand -hex 8)

https://t.co/ovTDurAVJV

[wvu @wvuuuuuuuuuuuuu]

Full details on the CVE-2021-40539 exploit chain.