@CurseRed

Security Researcher @starlabs_sg , playing CTF with @r3kapig

blog.cal1.cn/
Joined February 2010
  • Tweets383
  • Following399
  • Followers2.2K
44Media
Jiantao Li retweeted
starlabs@starlabs_sgFeb 5
Ever wondered what happens when you pickle a mailbox? 🥒📬 (No, it’s not a recipe, it’s a vulnerability.) Our team breaks down CVE-2025-20393 in a new deep dive post covering root cause, internals & exploitation details starlabs.sg/blog/2026/01-pic… Written by @CurseRed & @bestswngs
1
28
1
86
9,282
Jiantao Li retweeted
starlabs@starlabs_sg3 Nov 2025
🖨️ Brother, can you spare us a root shell? We were ready for Pwn2Own but they patched it on the LAST DAY of registration 😭 Hope you enjoy this new blog post from us. 📖 starlabs.sg/blog/2025/11-bre…
2
45
3
163
30,993
📢 Confirmed! dmdung (@_piers2) used a single OOB access bug to exploit the @Sonos Era 300 smart speaker. In doing so, he earns $50,000 and 5 Master of Pwn points. #Pwn2Own
1
11
3
98
19,239
Confirmed! @starlabs_sg used a heap based buffer overflow to exploit the @CanonUSA imageCLASS MF654Cdw. They earn themselves $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OIreland
7
2
50
14,719
Jiantao Li retweeted
starlabs@starlabs_sg21 Oct 2025
The interns spent almost two months on this. Congratulations to @hi_im_d4rkn3ss @gerrard_tai @KaligulaSec Lin Zewei and Tan Ze Jian
TrendAI Zero Day Initiative
@thezdi21 Oct 2025
Confirmed! @starlabs_sg used a heap based buffer overflow to exploit the @CanonUSA imageCLASS MF654Cdw. They earn themselves $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OIreland
1
48
4,908
Jiantao Li retweeted
starlabs@starlabs_sg12 Oct 2025
Recently our co-worker, @CurseRed found and reported some bugs in OnlyOffice while on a pentest engagement. We are always preparing organisations to protect against the ever-evolving threat of cyber attacks.
6
1
57
12,307
Jiantao Li retweeted
starlabs@starlabs_sg11 Sep 2025
Lost in Translation: Apache Vulnerabilities That Don’t Count (Literally) Found a few bugs in Apache projects in 2024 - SSRF in Pony Mail Foal & RCE on whimsy\.apache\.org Fixed but no CVEs Sharing is Caring: starlabs.sg/blog/2025/09-los… Found by @CurseRed & former intern Devesh.

Lost in Translation: Apache Vulnerabilities That Don't Count (Literally)

During our security research in 2024, we discovered several vulnerabilities in Apache Foundation projects that seem to have gotten ’lost in translation’ between our bug reports and the CVE assignment...

starlabs.sg
1
15
1
49
8,871
Some of my bugs are patched in this month's patch tuesday, including the ones I used for Pwn2Own Berlin 2025. CVE-2025-50167 Race UAF in Hyper-V
9
36
1
375
24,428
Jiantao Li retweeted
shubs
@infosec_au21 Jul 2025
I hope everyone got some rest after @DownUnderCTF this weekend. My colleague @hash_kitten wrote up a blog post on a novel technique for SQL Injection in PDO's prepared statements, required to exploit the “legendary” challenge, which only got one solve: slcyber.io/assetnote-securit…
49
2
233
10,610
Jiantao Li retweeted
starlabs@starlabs_sg16 Jul 2025
CASE CLOSED: CVE-2025-29824 0 public samples, 0 information Suspect: Windows CLFS driver Crime: UAF leading to Privilege Escalation Status: ACTIVELY EXPLOITED ITW Investigation: Debugged and documented Case files: starlabs.sg/blog/2025/07-my-… Done by our intern, Ong How Chong

My `Blind Date` with CVE-2025-29824

In April 2025, Microsoft patched a vulnerability that had become a key component in sophisticated ransomware attack chains. CVE-2025-29824, an use-after-free bug in the Windows Common Log File System...

starlabs.sg
40
1
158
19,975
Jiantao Li retweeted
starlabs@starlabs_sg10 Jul 2025
One of our current intern, @goatmilkkk shared his Chrome-atic escape adventure using CVE-2024-30088 Epic obstacles documented in it too! starlabs.sg/blog/2025/07-foo…

Fooling the Sandbox: A Chrome-atic Escape

For my internship, I was tasked by my mentor Le Qi to analyze CVE-2024-30088, a double-fetch race condition bug in the Windows Kernel Image ntoskrnl.exe. A public POC demonstrating EoP from Medium...

starlabs.sg
2
55
3
190
26,975
Jiantao Li retweeted
r3kapig@r3kapig9 Jun 2025
🎉 Last weekend we participated in bi0sCTF 2025 as r3kapig and secured first place! 🥇 Huge thanks to @teambi0s for organizing such an amazing competition! 🙏 Congratulations to @ProjectSEKAIctf for second place 🥈 and @thehackerscrew1 for third place 🥉
6
1
64
4,064
Jiantao Li retweeted
starlabs@starlabs_sg5 Jun 2025
When life gives you tangerines🍊 Intern Lin Ze Wei's task: Port a 2-bug exploit to Pixel 6 Pro Problem: One bug "doesn't work" Solution: Make it work with 1 bug Sometimes the best research comes from working with what you think you have starlabs.sg/blog/2025/06-sol…

Solo: A Pixel 6 Pro Story (When one bug is all you need)

During my internship I was tasked to analyze a Mali GPU exploit on Pixel 7/8 devices and adapt it to make it work on another device: the Pixel 6 Pro. While the exploit process itself is relatively...

starlabs.sg
37
1
141
15,363
Jiantao Li retweeted
starlabs@starlabs_sg3 Jun 2025
After 6 months of responsible disclosure, proud to announce our team discovered 13 (mostly exploitable) vulnerabilities in Samsung Exynos processors! Kudos to @st424204, @n0psledbyte, @Peterpan980927 & @rainbowpigeon_ CVE-2025-23095 to CVE-2025-23107 📍 semiconductor.samsung.com/su…
2
22
3
157
23,011
Jiantao Li retweeted
starlabs@starlabs_sg30 May 2025
"Why is my exploit taking 10 minutes?" *checks logs* *sees 10,000 kernel warnings* "...oh" 💡 Fresh Friday night read: our intern, Tan Ze Jian, on Mali exploitation - sometimes the fix is simpler than you think! starlabs.sg/blog/2025/05-gon…

Gone in 5 Seconds: How WARN_ON Stole 10 Minutes

As part of my internship at STAR Labs, I was tasked to conduct N-day analysis of CVE-2023-6241. The original PoC can be found here, along with the accompanying write-up. In this blog post, I will...

starlabs.sg
27
111
7,013
Confirmed!! Dung and Nguyen (@MochiNishimiya) of STARLabs used a TOCTOU race condition to escape the VM and an Improper Validation of Array Index for the Windows privilege escalation. They earn $70,000 and 9 Master of Pwn points. #Pwn2Own
3
14
106
9,971
Jiantao Li retweeted
Jacob Soo@_jsoo_17 May 2025
Big shoutout to @hi_im_d4rkn3ss & @gerrard_tai for flying over & represent us To our 1st-timers Gerrard @cplearns2h4ck @MochiNishimiya for the awesome work To @n0psledbyte & @st424204 for guiding the next gen & @_piers2 @bruce30262 who are part of it Lets continue trying #Pwn2Own
1
8
89
7,421
Outstanding! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG used a single integer overflow to exploit #VMware ESXi - a first in #Pwn2Own history. He earns $150,000 and 15 Master of Pwn points. #P2OBerlin
2
42
4
272
24,657
Nicely done! Billy (@st424204) and Ramdhan (@n0psledbyte) of STAR Labs used a UAF to perform their Docker Desktop escape and execute code on the underlying OS. They earn $60,000 and 6 Master of Pwn Points.
18
95
8,903
Confirmed! Chen Le Qi (@cplearns2h4ck) of STARLabs SG combined a UAF and an integer overflow to escalate to SYSTEM on #Windows 11. He earns $30,000 and 3 Master of Pwn points. #Pwn2Own #P2OBerlin
12
1
85
10,077
Load more