Leads EcoSec team at @XuanwuLab. My tweets are my own. @FlowerCode@infosec.exchange
Joined April 2015
- Tweets185
- Following300
- Followers1K
- Likes168
Chuanda Ding retweeted
Slides are up for our (w/ @tiraniddo) Kerberos LPE presentation from #blackhat2022. Hope you enjoy, and thank for to everyone who attended!
i.blackhat.com/USA-22/Wednes…
Chuanda Ding retweeted
Just back from @offensive_con, so here's the slides I promised everyone who asked 😁 github.com/tyranid/infosec-p…
Chuanda Ding retweeted
Our #defcon29 video and slides are up!
"Caught you - reveal and exploit IPC logic bugs inside Apple"
youtube.com/watch?v=oAMZxKsZ…
Chuanda Ding retweeted
Remember that addJavaScriptInterface (CVE-2012-6636) bug on Android? This is something similar but for iOS. Faulty js bridge access control in iTunes Store app leads to type confusion, information leak and use-after-free (CVE-2021-1864) blog.chichou.me/2021/08/05/m…
Chuanda Ding retweeted
Thank everybody that joined our BlackHat session! Here’s the 1st part of my write-up for TianfuCup 2020. Meet CVE-2021-1748, a client-side XSS introduced by iOS 3 to bypass WebContent sandbox and open up new attack surfaces blog.chichou.me/2021/08/04/m…
Chuanda Ding retweeted
“Intel Bridge Technology is a runtime post-compiler that enables applications to run natively on x86-based devices, including running those applications on Windows"
Houdini got a new name.
businesswire.com/news/home/2…
Chuanda Ding retweeted
Cellebrite partially disables iPhones following the vulnerability outlined by @moxie @signalapp
9to5mac.com/2021/04/27/celle…
Chuanda Ding retweeted
We @yuebinsun2020 found and exploited three logic bugs in Preferences.
Logic bugs in core framework let us rule all Apple platforms, Intel and Apple Silicon alike, without changing one line of our exploit.
We would detail them later, very interesting.
Chuanda Ding retweeted
New blog post from TAG with details of a North Korean campaign targeting security researchers working on vulnerability research and development.
blog.google/threat-analysis-…
Stay safe out there everyone!
Chuanda Ding retweeted
I just wrote a blog about CVE-2020-9971. Sandbox Escape and LPE to root in macOS/iOS. It's an interesting logic bug in launchd process when managing XPC Services.
xlab.tencent.com/en/2021/01/…
Chuanda Ding retweeted
We don't know who needs to hear this right now, but #defconsafemode is free to attend. You don't have to register. It starts in one week. You should join us.
defcon.org
