@_piers2
Joined March 2022
  • Tweets28
  • Following95
  • Followers608
piers retweeted
Calif
@calif_ioOct 16
Demos we presented at Hexacon in Paris today. Everything will be released in due time. 1/ Signal 1-click
150
528
107
4,522
573,690
Thankfully I was still able to find something 😖
TrendAI Zero Day Initiative
@thezdi21 Mar 2024
Validated! Dungdm (@_piers2) of Viettel Cyber Security used two bugs, include the ever risky race condition, to exploit #Oracle VirtualBox. As a round 3 winner, they receive $20,000 and 4 Master of Pwn points. #Pwn2Own #P2OVancouver
4
3
75
7,677
Hopefully I will qualify
Asian Cyber Security Challenge (ACSC)
@acsc_asia18 Feb 2024
🚀 ACSC 2024 (Asian Cyber Security Challenge) is Happening!🚀 📅 March 30-31, 2024 🌟 Mark your calendars! 🔜 Registration opening soon. Don't miss out! More details here ▶️ acsc.asia #ACSC2024 #CyberSecurity #SaveTheDate
2
6
3,301
In Vmware Workstation 17.5.1, a bug was silently patched, I was going to use it for Pwn2Own but i think that I probably found the same bug that was used in TFC 2023... :( @vv474172261, is there a way i can confirm this with you ?
2
2
1
32
12,664
Slides of our latest talks during #GreHack23 and @codeblue_jp are now available on our website! synacktiv.com/ressources

Ressources

Synacktiv

synacktiv.com
16
89
24,834
Will still try to do a blog post on my @CSAW_NYUTandon CTF challenge, NERV Center, but for now here's a thread explaining the key mechanics. I put a lot of work into the aesthetics, like this easter egg credit sequence (all ANSI colors+unicode text) that contains key hints:
10
33
5
136
38,361
- Writes shitty Hypervisor fuzzer as an example for someone junior - Runs shitty fuzzer against VirtualBox - Finds 0-day... It was a few hours of effort? In an attack surface that already had a 0-day a bit ago? Incoming blog for fun 🙃
5
12
1
193
34,024
got hard carried by amazing teammates at @vcslab
TrendAI Zero Day Initiative
@thezdi27 Oct 2023
That's a wrap on #Pwn2Own Toronto 2023! We awarded $1,038,250 for 58 unique 0-days during the event. Congratulations to Team Viettel (@vcslab) for winning Master of Pwn with $180K and 30 points. We'll see you at Pwn2Own Automotive in Tokyo next January.
38
4,195
Nice play. #Pwn2Own #Xiaomi13Pro
2
10
3,084
Success! Team Viettel was able to execute an OOB write against the Sonos Era 100. They earn $30,000 and 6 Master of Pwn points. #Pwn2Own
2
7
1
84
15,016
I have finally found my favorite blog post about bug bounties: devblogs.microsoft.com/oldne…

Not even making it to the airtight hatchway: Execution even before you get there - The Old New Thing

Today's dubious security vulnerability comes from somebody who reported that the Load­Keyboard­Layout function had a security vulnerability which

devblogs.microsoft.com
2
1
9
3,716
Success! dungdm (@_piers2) of Team Viettel (@vcslab) used an uninitialized variable and a UAF bug to exploit Oracle VirtualBox. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own #P2OVancouver
10
2
67
15,465
Load more