zbleet

Bug Hunter

[zbleet @zblee_]

@azraelxuemo so sad😭

[offensivecon @offensive_con]

#OffensiveCon25 videos are now up!

https://t.co/aRzmXS7iPA

[DEVCORE @d3vc0r3]

Our latest deep dive explores research on Windows Kernel Streaming.

Check out Angelboy’s (@scwuaptx) write-up for key insights and analysis.

Read more here: https://t.co/tx4ywZS3YT

#VulnerabilityResearch #Cybersecurity #WindowsKernel #OffensiveCon

[zbleet @zblee_]

@azraelxuemo ddw

[zbleet @zblee_]

@azraelxuemo Congratulations!

[TrendAI Zero Day Initiative @thezdi]

Outstanding! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG used a single integer overflow to exploit #VMware ESXi - a first in #Pwn2Own history. He earns $150,000 and 15 Master of Pwn points. #P2OBerlin

[Off-By-One Conference @offbyoneconf]

@cq674350529 & @zblee_ from Codesafe Team & TianGong Team, QI-ANXIN Group presenting super cool paper-𝐏𝐚𝐭𝐜𝐡 𝐃𝐢𝐟𝐟𝐢𝐧𝐠, 𝐘𝐨𝐮 𝐀𝐫𝐞 𝐌𝐲 𝐒𝐰𝐨𝐫𝐝! 𝐀 𝐃𝐞𝐞𝐩 𝐃𝐢𝐯𝐞 𝐢𝐧𝐭𝐨 𝐓𝐰𝐨 𝐂𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐍-𝐝𝐚𝐲 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 𝐢𝐧 𝐅𝐨𝐫𝐭𝐢𝐆𝐚𝐭𝐞!

[POC_Crew @POC_Crew]

[#Zer0Con2025]

🎙️ SPEAKER Highlight: @zblee_ / @zhz__6951 / @Mr_LiuYue

"vCenter Lost: How the DCERPC vulnerabilities Changed the Fate of ESXi" 🚀

[zbleet @zblee_]

@4uuu_Nya 我是你的🐶

[zbleet @zblee_]

Admire the Master of Pwn.

[POC_Crew @POC_Crew]

[#Zer0Con2025]

🎙️ SPEAKER Highlight: @_manfp

"PAC2Own: From Bug to Shellcode in modern Safari" 🌐

[zbleet @zblee_]

Carried by @cq674350529 🚀🚀🚀

[Off-By-One Conference @offbyoneconf]

Dive @offbyoneconf 2025 with @cq674350529 & @zblee_ - 𝐏𝐚𝐭𝐜𝐡 𝐃𝐢𝐟𝐟𝐢𝐧𝐠, 𝐘𝐨𝐮 𝐀𝐫𝐞 𝐌𝐲 𝐒𝐰𝐨𝐫𝐝! 𝐀 𝐃𝐞𝐞𝐩 𝐃𝐢𝐯𝐞 𝐢𝐧𝐭𝐨 𝐓𝐰𝐨 𝐂𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐍-𝐝𝐚𝐲 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 𝐢𝐧 𝐅𝐨𝐫𝐭𝐢𝐆𝐚𝐭𝐞.
https://t.co/dILuRyxcMD
https://t.co/CIUprT9zI6

[zbleet @zblee_]

Looking forward to #Zer0Con2025 next month!

[POC_Crew @POC_Crew]

[#Zer0Con2025] - SPEAKER 2⃣

👨‍👦‍👦 @zhz__6951/@zblee_/@Mr_LiuYue - vCenter Lost: How the DCERPC vulnerabilities Changed the Fate of ESXi

[zbleet @zblee_]

@4uuu_Nya can can need new new

[zbleet @zblee_]

Our exciting research work, in collaboration with @zhz__6951 , has been accepted by #BHASIA 2025!
See you all in Singapore this April! 🎉
Stay tuned for our talk! #BHASIA

[Black Hat @BlackHatEvents]

#BHASIA Briefing "Center Lost: How the DCERPC Vulnerabilities Changed the Fate of ESXi" you'll be provided a detailed overview of the DCERPC protocol and the four vulnerabilities we uncovered in its implementation within vCenter Server, which have been assigned CVE numbers CVE-2024-37079, CVE-2024-37080, CVE-2024-38812, and CVE-2024-38813. Register now >> https://t.co/z6RNI1vSjp

[zbleet @zblee_]

@zhz__6951 TZL = Tiangong zhz Legend

[zbleet @zblee_]

One of the critical vulnerabilities found by @zhz__6951 and me 🍻

[TrendAI Zero Day Initiative @thezdi]

When CVE-2024-37079 was patched by VMware, it received quite a bit of attention. In their latest blog, the Trend Micro Research team details the root cause of this vCenter bug and shows how it can be used for RCE. Read all about it at https://t.co/uBGoiEpXMD

[s0duku @S0dukuN]

Also, our work accepted by #HITB and #DEFCON is such a honour, but I also want to say our team has lots of excellent researchers in different security fields, and we have shared lots of great contents, so be sure to check out our blog site!😀
https://t.co/3Tm8ksGUZe

[KevinLu @K3vinLuSec]

Project Zero: The Windows Registry Adventure #1: Introduction and research results https://t.co/eg2QIKG7Xh

[Lau @notselwyn]

Exciting news! 🚀 Just dropped my blogpost unveiling the universal Linux kernel LPE PoC for CVE-2024-1086 (working on v5.14 - v6.7) used for pwning Debian, Ubuntu, and KernelCTF Mitigation instances, including novel techniques like Dirty Pagedirectory 🧵

https://t.co/zFimVzjgYB

[TrendAI Zero Day Initiative @thezdi]

Congratulations to ZDI researcher Simon Zuckerbraun for winning a Pwnie Award for Most Underhyped Research. You can read his original blog here https://t.co/tpknXMdsWy