www = web web web · Senior Information Security Engineer @GoogleVRP · Previously @praetorianlabs & @starlabs_sg · Opinions are my own.
Singapore
Joined May 2012
- Tweets115
- Following540
- Followers1.1K
- Likes1.5K
Ngo Wei Lin retweeted
I just published a new blog post sharing an improved Deserialization Gadget Chain for Ruby!
It builds on the work of others, including Leonardo Giovanni, Peter Stöckli @GHSecurityLab and @wcbowling
nastystereo.com/security/rub…
Ngo Wei Lin retweeted
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confu…
Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996
Ngo Wei Lin retweeted
🚨 New Blog Alert! 🚨
Can an attacker execute commands by sending JSON? Learn how unsafe deserialization vulnerabilities in Ruby can be exploited and how they can be detected with CodeQL.
🔗 Read the full post: github.blog/2024-06-20-execu…
Stay safe and code responsibly! 🛡️💻
Ngo Wei Lin retweeted
My colleague @hash_kitten and I discovered a full-read SSRF vulnerability in Next.js (CVE-2024-34351). We published our research today on @assetnote's blog: assetnote.io/resources/resea…. Thank you to the Vercel team for a smooth disclosure process.
Ngo Wei Lin retweeted
Here is my deep-dive post on #github Actions cache poisoning. This is a powerful build pipeline lateral movement and privilege escalation technique and I used it to earn several thousand💰in #bugbounty rewards.
adnanthekhan.com/2024/05/06/…
Ngo Wei Lin retweeted
Send()-ing Myself Belated Christmas Gifts - GitHub's Environment Variables & GHES Shell
starlabs.sg/blog/2024/04-sen…
Read about how one of our talented researchers, @Creastery , found it, exploited it and reported it in a fast and professional manner:
Ngo Wei Lin retweeted
Earlier this year I found a pretty cool vuln, an arbitrary file write in GitLab.
Here’s the details gitlab-com.gitlab.io/gl-secu…
Ngo Wei Lin retweeted
Route to Safety: Navigating Router Pitfalls is the swansong from @daniellimws
starlabs.sg/blog/2024/route-…
We hope everyone enjoyed his informative post and wish him all the best in his future endeavours.
Ngo Wei Lin retweeted
Off-by-One 2024 Conference CFP is now opened! Be part of a historical event and shape the future of offensive security in this region.
Submission and speaker benefits offbyone.sg/cfp/
If you like to talk to us, drop us a line at [email protected]
Ngo Wei Lin retweeted
Special thanks to @chudypb, @TecR0c, @mr_me, @Creastery, @starlabs_sg, @Claroty & #team82, and @thezdi for finding & responsibly disclosing security vulnerabilities in Ignition. Fixes & full credits: bit.ly/4aytnlq
Ngo Wei Lin retweeted
I've finally published the advisories regarding the Trend Micro bugs that I shared at #HITCON! Do check them out at @starlabs_sg's advisory page: starlabs.sg/advisories/
🏌️♂️CVE-2023-32530 is an interesting case of SQLi to RCE: starlabs.sg/advisories/23/23…
Ngo Wei Lin retweeted
Congratulations to our team mates @bruce30262 @Creastery @CurseRed @linhlhq @st424204 & @testanull for making into the list. Sad to say...actually linhlhq & Jang should have more points but somehow it ended up credited to "anonymous" :( None-the-less, we are happy for them.
Congratulations to our MSRC 2023 Most Valuable Researchers! Thank you to all the researchers who have helped secure our customers. 👏🎉
Check out our blog for the full list: msft.it/60199yOc9
ALT MSRC 2023 Most Valuable Researchers Top 10 Researchers
Ngo Wei Lin retweeted
Such a shame as the pre-auth RCE bugs in question are quite remarkable! They required lots of out of the box thinking and we validated their impact through working PoCs leading to high merit of 9.8 CVSS for each!
Ngo Wei Lin retweeted
Even at Pwn2Own, there are vendors such as @InductiveAuto who play security theatre by patching bugs that require auth inductiveautomation.com/blog… yet don’t bother patching pre-auth RCE such as zerodayinitiative.com/adviso… and zerodayinitiative.com/adviso… because “wE t4k3 sEcUriTY sErioUsLy”
Ngo Wei Lin retweeted
Happy that our other team member, @CurseRed also got his talk accepted but sad that he couldn't get his Visa for @HacksInTaiwan
But none-the-less, he will be presenting his work virtually.
hitcon.org/2023/CMT/agenda/0…
Ngo Wei Lin retweeted
Looking forward to the look by our team member @Chocologicall
HITCON Community 2023 - 議程宣傳第一彈
🚀#3「Ghosts of the Past: Classic PHP RCE Bugs in Trend Micro Enterprise Offerings」
這場議程，講者也會分享他在資安產品上發現超過 10 個漏洞的過程及原理。說明資安產品自身的安全也是相當重要的。
講者也會分享，如何將多個不可利用的漏洞，轉換方法將他們串連成具高度影像的漏洞。
🎙️講師資訊
Poh Jia Hao is a Security Researcher at STAR Labs SG Pte. Ltd. for the past 2 years, whose focus is mainly on web application security. Jia Hao has multiple CVEs in various applications under his name over the past years. He is always interested in staying up to date about the latest hacking techniques used to challenge the assumptions. Besides performing vulnerability research, Jia Hao also has experience in penetration testing, as well as being Offensive Security-certified OSCP, OSWP and OSWE.
#HITCONCommunity2023 #HITCONCMT2023 #HITCON
Ngo Wei Lin retweeted
We have just published the advisory for CVE-CVE-2023-2017 - Shopware 6 Server-side Template Injection (SSTI) via Twig Security Extension. This bug is found by our team member, @Creastery
starlabs.sg/advisories/23/23…
Ngo Wei Lin retweeted
CVE-2023-2017 Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment witho... cve.mitre.org/cgi-bin/cvenam…
Ngo Wei Lin retweeted
[Security Advisory] CS-Cart PDF Plugin Unauthenticated Command Injection found by @Creastery
starlabs.sg/blog/2023/03-cs-…
We hope everyone enjoy this light reading on a Friday. Have a great weekends
Ngo Wei Lin retweeted
We are sharing this interesting bug found by @Creastery
Although it's 11 months late but better late than never!
starlabs.sg/blog/2023/02-mic…