yongchuank

Security researcher @pixiepointsec | @yongchuank.bsky.social

[yongchuank @yongchuank]

Go try this out! Anything from @bluerust is gold!

[bluerust @bluerust]

🚀 We’ve open-sourced an alternative IDA Pro MCP server for AI-assisted reverse engineering!

Originally inspired by Duncan Ogilvie’s work, we've rewritten the codebase to support a stateless gateway, multi-instance routing, & an expanded tool suite. 👇 https://t.co/s8SY7JbVxE

[yongchuank @yongchuank]

@binjo The legend! 🙇‍♂️

[yongchuank @yongchuank]

@ga1ois Ouch.. that sucks. A series of unfortunate events, but it doesnt take anything away from the research put into it. Not even 1 bit, nor that 1 bit ❤️‍🩹

[yongchuank @yongchuank]

@SudoR00tMe @offensive_con Why? Its a painkiller! Speedy recovery, mate

[yongchuank @yongchuank]

@SudoR00tMe @offensive_con Ouch.. stay safe! Psst.. i hear beer and bratwurst helps in recovering 😉

[yongchuank @yongchuank]

💪💪💪

[yongchuank @yongchuank]

If u’re still on the fence, @Cloudlldb and team is awesome to work with!

[yongchuank @yongchuank]

This team never rest... :) And yes, 2026 will be great too bc @Cloudlldb is already all set for Lunar New Year (#0day债不过年)

[PixiePoint Security @pixiepointsec]

9% into 2026 and look what @cloudlldb already have... :)

[yongchuank @yongchuank]

All I want for x'mas is to read more awesome blog posts... Oh wait, x'mas came early; @flyingpassword doing a RCA on CVE-2025-29970!

[PixiePoint Security @pixiepointsec]

What better way to get into x'mas vibes than @flyingpassword dropping a BFS n-day (CVE-2025-29970) blog post! (Santa would approve :)) Merry X-mas!
https://t.co/Skmuu5rsU1

[yongchuank @yongchuank]

Can't help being impressed when @voix44er casually says he found some bugs, and shortly after, "ok, i've got stable rce... let's go for it" 😂

[PixiePoint Security @pixiepointsec]

And... hot on the heels will be @voix44er attempting the Philips Hue Bridge this week! All the best and have fun!

[yongchuank @yongchuank]

Another great work from the team! 💪🔥

[PixiePoint Security @pixiepointsec]

Looks like @__neverm0r_ and @b1thvn_ TyphoonPwn entry is patched this month as CVE-2025-55681... thanks @SecuriTeam_SSD for the fun experience!

[yongchuank @yongchuank]

When you asked if printing and pasting @pixiepointsec stickers randomly is a good marketing stunt, @voix44er says "waaaiiit a min, i have other (easier!) ideas on Wolfbox EV charger....." :) Personally I really enjoyed this post. Great work!
https://t.co/e7N3QEClm3

[PixiePoint Security @pixiepointsec]

If u think that Windows research is all we do, think again! In our first IOT blog, @voix44er details the Wolfbox EV charger setup, attack surface, his #Pwn2Own Automotive 2025 bug, exploitation, and best of all, displaying our name on it (in styleee...)!
https://t.co/orDhcbZv6b

[Cedric Halbronn @saidelike]

My next training will be at POC later this year @POC_Crew
An opportunity to become an exploit developer ⚒️ 💻🔥

https://t.co/3ZATiNig2O

[Interrupt Labs @InterruptLabs]

📣 Exciting opportunity in our iOS team for a Senior Vulnerability Researcher with experience in Apple platforms.

Remote or office based.

https://t.co/kxJpQCYNse

[PixiePoint Security @pixiepointsec]

Happy Friday! Our intern, @__neverm0r_ , discovered and reported a NPD due to race-condition in afd.sys. Wasn’t assigned a cve doesn’t mean it’s less interesting, right!?
https://t.co/m7HDVQd5pj

[yongchuank @yongchuank]

What better way to unwind for the week than to read about a afd.sys bug!? (Ok, maybe a cold beer is a close 2nd ;)) Good find, @__neverm0r_ !

[PixiePoint Security @pixiepointsec]

Happy Friday! Our intern, @__neverm0r_ , discovered and reported a NPD due to race-condition in afd.sys. Wasn’t assigned a cve doesn’t mean it’s less interesting, right!?
https://t.co/m7HDVQd5pj

[Jael Koh @_jaelkoh]

The video for my talk at @offensive_con with @saidelike is out! It was an absolute pleasure working with Cedric on this dream of mine!

https://t.co/ejcyfptcgf

[yongchuank @yongchuank]

@ga1ois @le_douds Or beer 🍺? Congrats!

[yongchuank @yongchuank]

@danis_jiang @0x140ce @ezrak1e @BlackHatEvents Looks like a great talk! Congrats!

[yongchuank @yongchuank]

Being co-worker with @_jaelkoh means I had a sneak peak to his part of the topic. Besides the technical details, there is also the emotional journey that lead to finding these bugs that most offensive security researchers could relate to. Definitely, imho, an interesting talk!

[PixiePoint Security @pixiepointsec]

Proud to see @_jaelkoh (with @saidelike) talking about undocumented internals of KTM, the bugs and exploits in 'Hunting for Overlooked Cookies in Windows 11 KTM and Baking Exploits for Them'. No ovens required for this recipe!