vudq16

Chief Food & Beverage Officer at u0K++ (@u0Kplusplus)

[TrendAI Zero Day Initiative @thezdi]

The Viettel Cyber Security (@vcslab) team ends their run with a collision. They use 2 bugs to exploit the TrueNAS Mini X. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OIreland

[TrendAI Zero Day Initiative @thezdi]

Confirmed! The @vcslab team combined 4 bugs - 2 in the router & 2 in the NAS - to going from the QNAP QHora-322 to the TrueNAS Mini X. Their combination of SQL injections and missing auth/exposed function bugs earn them $50K and 10 Master of Pwn points. #Pwn2Own #P2OIreland

[VCSLab @vcslab]

Oracle EBS Unauth RCE #CVE-2022-21587 analysis from our researchers @vudq16 @_q5ca @hoangnx99 https://t.co/WTC2eyx0uf

[VCSLab @vcslab]

SAML ShowStopper from our researcher @_l0gg. Any software not only Manageengine that uses old version of xmlsec and xalan should take care it seriously. @_l0gg will show a technique by using DocumentHandler to defeat xslt transformer. #CVE-2022-47966 https://t.co/vlbERGVNi4

[Nguyen Xuan Hoang @hoangnx99]

This was really a cool 2-bug chain which lead to RCE on Microsoft Exchange Server:
- https://t.co/WuEdu9dWVZ
- https://t.co/jsJplHfpaE
We also rced Exchange Online.
Great work from @rskvp93 <3 Follow him for upcoming blogs
#tabshell

[SecurityTrails, A Recorded Future Company @securitytrails]

It's Black Friday! 🎉

Get FREE recurring API credits if you like + retweet this tweet (must be following @securitytrails).

If we get up to 100 RTs everyone gets 100 recurring monthly API credits. If we get over 100 RTs, everyone gets the # of API credits in the amount of RTs.

[Dillon Franke @dillon_franke]

Excited to open-source "Route Sixty-Sink" today, a static analysis tool I've been working on to find elusive vulnerabilities in .NET applications.

Blog: https://t.co/vRWRcgQZeh

GitHub Repo: https://t.co/h4zS5volki

[u0K++ @u0Kplusplus]

Good luck to our founder 💪 @namnp5984

[Q5Ca @_q5ca]

Keep working and the rest will come :)

Thanks @msftsecresponse for great bounty program.

[Janggggg @testanull]

As promised,
Here is the detail and a part of PoC about the OAM Pre-Auth RCE (CVE-2021-35587)
It may require more work to get fully functional PoC,
Have fun with it!
cc @peterjson
https://t.co/N7zSCUOvWt

[Q5Ca @_q5ca]

We reproduced CVE-2022-24086 and learnt a lot.

#magento
@hoangnx99 @vudq16 @dieulink81

[PortSwigger Research @PortSwiggerRes]

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2021!

https://t.co/t3pMqnLt2T

[Nick Frichette @Frichette_n]

Hacking the Cloud has a pretty big update! We're using a better static site generator that will allow me to spend more time making content. Plus, it looks great!
https://t.co/WWAnsqdb5c

[Janggggg @testanull]

Just published detailed analysis of Microsoft Exchange Deserialization to RCE (CVE-2021-42321), which's also found exploited in Tianfu Cup.
English version from @peterjson
PoC is not provided,
Have fun!
https://t.co/H9Q2Q5Gbpw

[Quang Nguyen @sovietw0rm]

@_q5ca, @vudq16, @dieulink81 from @NcscVietnam
https://t.co/5asKAtcgKr
#CVE-2021-42321

[Thanh Nguyen @redragonvn]

Our Pre-Auth RCE exploit for Atlassian Confluence (CVE-2021–26084) was leaked after reporting it to @VMware. They have refused to admit the leak and ignored our emails.

https://t.co/cwainPWv9y

[Orange Tsai 🍊 @orange_8361]

A New Attack Surface on Microsoft Exchange! The series covers most of my Black Hat USA and DEFCON talks (with slides and video inside). More articles and vulnerabilities are coming soon!

https://t.co/lkup5hdyz9

[Joonas Loppi @joonas_fi]

New blog post: https://t.co/kQCBdU3t2R

[Masato Kinugawa @kinugawamasato]

Inspired by @garethheyes' CSP bypass in PayPal, for the first time in 4 years, I found again that JS resources added by CloudFlare could introduce a CSP bypass.

https://t.co/lKccCfTo8a

[PortSwigger Research @PortSwiggerRes]

alert() is dead, long live print() - by @albinowax and @garethheyes
https://t.co/qOrmG0f1ye