zhchbin

[zhchbin @zhchbin]

@CryptoJHK 最近研究了一下优质的中转资源如何对外保真的问题。有兴趣的朋友也可以看看，大胆自荐一下，项目主页： https://t.co/74RcDeGNZp 代码开源：https://t.co/OxnGsct07p 求个star

[zhchbin @zhchbin]

@CryptoJHK 最近研究了一下优质的中转资源如何对外保真的问题。有兴趣的朋友也可以看看，大胆自荐一下，项目主页： https://t.co/74RcDeGNZp 代码开源：https://t.co/OxnGsct07p 求个star

[zhchbin @zhchbin]

@Ion_Mio_ 申请加入，对 newapi 源码有一定了解

[zhchbin @zhchbin]

@zh1x1an1221 太优秀了！

[Dohyun Lee @l33d0hyun]

Amazing... He is a real hacker.

https://t.co/fWcyOlVANM

[zhchbin @zhchbin]

@zh1x1an1221 @xvonfers 读完整个过程，些许感受到师傅过程中坐过山车般的心情变化。Better luck next time!

[zhchbin @zhchbin]

@zcbenz The Pile data set includes part of these data. But it is not enough when training a base language model, as far as I can see.

[zhchbin @zhchbin]

After reporting multiple UAFs to Chrome VRP, I received my first reward-0. According to my previous experience, I should have received my reward a month ago. But now it's 0. The difference is that this decision was made by Chrome OS VRP, not Chrome VRP. This is frustrating.

[Jun Kokatsu @shhnjk]

We've added much clear guidelines, reward amount, and scope for Chrome Extension VRP 🎉
https://t.co/inPxrEC41v

[zhchbin @zhchbin]

@SecurityMB :( hope it's just a joke

[zhchbin @zhchbin]

Keep going

[Chromium Disclosed Security Bugs @BugsChromium]

Security: UAF in lens::LensStaticPageController::LoadChromeLens (reward: $4000) https://t.co/FGDguGZJTf

[Google VRP (Google Bug Hunters) @GoogleVRP]

We're excited to share some OSS-Fuzz program news, including a revamped rewards program and several new initiatives. Happy fuzzing! https://t.co/CTzZT0KfSL

[zhchbin @zhchbin]

My first rewarded Chrome UAF.

[Chromium Disclosed Security Bugs @BugsChromium]

Security: UAF in ash::PrintServersProviderImpl::NotifyObservers (reward: $2000) https://t.co/e4n97U4mmD

[Abdulrahman Alqabandi @Qab]

Check out the latest EdgeVR guest blogpost where @david_erceg shares a number of his findings + methodology
https://t.co/hyLdzCWF6E

[zhchbin @zhchbin]

Lucky, but not enough. :)

[zhchbin @zhchbin]

@sysuapple 唐大哥你在这冲浪呢😂

[zhchbin @zhchbin]

Thx. My experience of reading and contributing souce code of Chrome extension API several years ago helped me a lot. I didn't do bug hunting in the past two years. Luck money. :)

Thanks to the author of the original report and Google VRP.

[Alesandro Ortiz 🇵🇷🏳️‍🌈 @AlesandroOrtizR]

Great variant analysis by @zhchbin. I also looked for variants of https://t.co/foUmrbpBO9, but didn't think about using other APIs to reach the same OS behavior.

[Vidoc Security Lab @vidocsecurity]

Vulnerability that made us 30 000$ richer (and we still submit reports) - XSS in Swagger-UI related to a bug in DOMPurify - many people waited for this writeup so here you are. Article by @kannthu - happy hacking! https://t.co/dVxqCxhWDS

[payloadartist @payloadartist]

Nice research and talk on Jenkins #security by @orange_8361

https://t.co/8jigq1Eya6

#bugbounty