@PTDuy

https://xitter.cf/t.co/3ErsOXnHtJ | https://xitter.cf/t.co/YffDAg1BZe

 Việt Nam
Joined March 2013
  • Tweets167
  • Following718
  • Followers1.2K
Phan Thanh Duy 🇻🇳 retweeted
Angelboy
@scwuaptxAug 7
My #BHUSA 2026 slides are online! It was an honor to share our AFD research and how a different perspective led to 30+ Windows kernel vulnerabilities. Blog post coming soon — check out the slides here: i.blackhat.com/BH-USA-26/Pre…
4
148
6
513
71,189
Phan Thanh Duy 🇻🇳 retweeted
gengstah@_gengstahJul 15
CVE-2026-58629: the rollback for a failed D3DKMTCreateAllocation re-reads an allocation handle straight out of user memory and frees whatever it names, not the one it just made. Read it twice, free it twice. Unprivileged double-free in dxgkrnl gengstah.github.io/posts/202…

July 2026 Patch Tuesday [CVE-2026-58629] Freeing the Wrong Allocation: a double-free in dxgkrnl’s...

I went into dxgkrnl looking at the usual suspects: the escape paths, the sync-object handlers, anywhere a count from user mode drives a copy. What I didn’t expect was to find the bug in an error...

gengstah.github.io
15
49
3,869
Phan Thanh Duy 🇻🇳 retweeted
Lê Hữu Quang Linh 🇻🇳@linhlhqJun 26
Found an RCE in a popular OTT app - patched fast via responsible disclosure. Thanks to VSRC & Zalo Security for the quick fix 🙏
9
45
386
32,144
Phan Thanh Duy 🇻🇳 retweeted
0xor0ne
@0xor0ne6 Sep 2025
Windows kernel exploitation (CVE-2024-30088, Pwn2Own Vancouver 2024) exploits.forsale/pwn2own-202… #infosec
3
53
197
10,964
Phan Thanh Duy 🇻🇳 retweeted
Qrious Secure@qriousec9 Jan 2025
A brief JavascriptCore RCE story by @lanleft_ and An Nguyễn qriousec.github.io/post/jsc-…

A Brief JavaScriptCore RCE Story

Introduction The vulnerability introduced in commit 053d9a84 is a trivial uninitialized memory issue, easy to catch by simple unit tests. At the time of discovering the bug, we believed that this...

qriousec.github.io
56
1
224
20,750
Phan Thanh Duy 🇻🇳 retweeted
Alex Plaskett
@alexjplaskett23 Nov 2024
✍️ VMware Workstation: Escaping via a New Route - Virtual Bluetooth by @hi_im_d4rkn3ss powerofcommunity.net/poc2024…
23
114
6,441
Phan Thanh Duy 🇻🇳 retweeted
Trail of Bits
@trailofbits25 Oct 2024
The Linux kernel 6.10 introduces the mseal syscall for memory protection. Discover its unique features, how it differs from prior schemes, its kernel implementation, and the userspace exploits it prevents. hubs.la/Q02VNW-30
2
56
10
248
43,771
Phan Thanh Duy 🇻🇳 retweeted
Dor@Dor00tkit14 Oct 2024
Debugging the Windows Hypervisor and dissecting Secure Kernel calls – my latest blog post takes you through the process, step-by-step. dor00tkit.github.io/Dor00tki… #Hyperv #ReverseEngineering

Debugging the Windows Hypervisor: Inspecting SK Calls

Introduction & Motivation Recently, Connor McGarr tweeted about monitoring Secure System Calls while debugging the Windows kernel. I want to take it a step further and monitor the same SK calls while...

dor00tkit.github.io
3
86
249
21,313
Phan Thanh Duy 🇻🇳 retweeted
PixiePoint Security@pixiepointsec2 Sep 2024
Replying to @b1thvn_
@b1thvn_ did this for fun… POC for CVE-2024-38106 pixiepointsecurity.com/blog/…

Dissecting the CVE-2024-38106 Fix | PixiePoint Security

In the security patches for August, Microsoft fixed several ntoskrnl.exe bugs, and one of them (CVE-2024-38106) being exploited in the wild. As anything ITW always require closer attention, we...

pixiepointsecurity.com
1
19
1
45
7,741
Phan Thanh Duy 🇻🇳 retweeted
Gabriel Landau
@GabrielLandau15 Jul 2024
The video just went live for my recent @BlueHatIL talk about a new Windows vulnerability class, including an exploit for kernel code execution 👇 youtube.com/watch?v=1LvOFU1u…
2
33
2
110
11,568
Phan Thanh Duy 🇻🇳 retweeted
Can Bölük
@_can135728 Jun 2024
Excited to share my latest article: PgC - a novel approach to disable Patchguard during runtime using basic memory management principles. It has worked against every version of Patchguard for the last 7 years, without needing any updates! blog.can.ac/2024/06/28/pgc-g…

PgC: Garbage collecting Patchguard away

I have released another article about Patchguard almost 5 years ago, ByePg, which was about exception hooking in the kernel, but let’s be frank, it …

blog.can.ac
14
121
1
323
47,631
Phan Thanh Duy 🇻🇳 retweeted
h0mbre@h0mbre_17 Jun 2024
you are code auditing and fuzzing and finding valuable exploitable bugs im doing those things but not finding the bugs, we are not the same 😤
5
11
130
11,481
Phan Thanh Duy 🇻🇳 retweeted
Alex Plaskett
@alexjplaskett31 May 2024
✍️ An introduction to PCIe for beginners from the software side with plenty of practical example’s on Windows: ctf.re/windows/kernel/pcie/t… ctf.re/kernel/pcie/tutorial/…
27
82
12,283
Phan Thanh Duy 🇻🇳 retweeted
Alex Plaskett
@alexjplaskett11 May 2024
Some notes on control flow guard in Windows 11 24H2 by Milos (ynwarcs): ynwarcs.github.io/Win11-24H2…

CFG in Windows 11 24H2

Hotpatching has been looming over Windows 11 for a while now, having already been shipped on the server & cloud deployments. It first came out in March that the first major version to include it will...

ynwarcs.github.io
30
81
10,649
How to download pdb … symchk /r c: windows\system32 /s SRV*C: \symbols\*msdl.microsoft.com/download/…
1
4
844
Phan Thanh Duy 🇻🇳 retweeted
0xor0ne
@0xor0ne5 Jan 2024
Sonos One reverse engineering analysis (HITB 2023 presentation) Credits @bl4sty conference.hitb.org/files/hi… #sonos #infosec
3
57
2
269
19,799
Phan Thanh Duy 🇻🇳 retweeted
44CON@44CON30 Dec 2023
📽️ Our next 44CON 2023 talk video is "Missed Opportunities" with James Forshaw: youtu.be/EaoYtoNywo4 #44CON2023 #Cybersecurity @tiraniddo
14
19
3,374
Phan Thanh Duy 🇻🇳 retweeted
44CON@44CON31 Dec 2023
📽️ "Red Team Tales - 7 Years of Physical Penetration Testing" with Justin Wynn is our next 44CON 2023 talk video for you: youtu.be/aC1Q5m5eERs #44CON2023 #Cybersecurity @redteamwynns
8
9
1,460
Phan Thanh Duy 🇻🇳 retweeted
Boris Larin@oct0xor27 Dec 2023
The recording of our (me, @bzvr_, @kucher1n) #37c3 talk “Operation Triangulation: What You Get When Attack iPhones of Researchers” was published! media.ccc.de/v/37c3-11859-op…

Operation Triangulation

Imagine discovering a zero-click attack targeting Apple mobile devices of your colleagues and managing to capture all the stages of the a...

media.ccc.de
20
285
16
827
169,476
Load more