@bee13oy

Security Researcher, Tianfu Cup 2020, MSRC MVR

Joined March 2016
  • Tweets19
  • Following92
  • Followers556
Virtually Unlimited Memory: Escaping the Chrome Sandbox googleprojectzero.blogspot.c…

Virtually Unlimited Memory: Escaping the Chrome Sandbox

Posted by Mark Brand, Exploit Technique Archaeologist.IntroductionAfter discovering a collection ...

projectzero.google
42
2
68
bee13oy retweeted
Yuki Chen
@guhe1204 Sep 2018
Microsoft Edge Chakra OP_NewScObjArray Type Confusion Bug & Full Poc Exploit by bo13oy of Qihoo 360 Vulcan Team: translate.google.com/transla…
2
80
2
111
Microsoft Edge Chakra OP_NewScObjArray Type Confusion RCE by @bo13oy, with an exploit demo: blogs.360.cn/post/Microsoft%…
15
19
After the ITW VBScriipt 0day CVE-2018-8174 caught by 360 Core Security department was patched, we found "new" (if not a patch bypass) exploitable 0days after analyzing the patch, read the story: blogs.360.cn/blog/from-a-pat…
74
5
113
Google Chrome pdfium shading drawing integer overflow lead to RCE, from 360 Vulcan Team: blogs.360.cn/blog/google-chr… @zhouat1 👍👍
1
12
17
Technical analysis of the remote code execution vulnerability that we discovered in Chrome and reported to Google ow.ly/rGte30fYCc1
39
3
49
A VMWare Guest to Host Escape Exploit I found on the internet (I haven't tested though) github.com/unamer/vmware_esc… – at Kolkata, India

GitHub - rip1s/vmware_escape: VMware Escape Exploit before VMware WorkStation 12.5.5

VMware Escape Exploit before VMware WorkStation 12.5.5 - rip1s/vmware_escape

github.com
2
82
116
The slide for my talk at #Zer0Con2017, with the details of how I found vulns in AV Kernel Drivers. github.com/bee13oy/AV_Kernel…
2
100
2
138
Use-After-Silence: Exploiting UAF in VMware for guest-to-host VM escape. A detailed analysis from @abdhariri. bit.ly/2ue3L8E

Zero Day Initiative — Use-After-Silence: Exploiting a quietly patched UAF in VMware

Springtime around the Zero Day Initiative (ZDI) means ramping up for the Pwn2Own (P2O) competition held each year at the CanSecWest conference. To say the least, it’s a busy time to be a ZDI resear...

thezdi.com
2
119
1
131
More POCs added for project #AV_Kernel_Vulns, the vendors include AVG, Avira, K7 and Check Point. github.com/bee13oy/AV_Kernel…

GitHub - bee13oy/AV_Kernel_Vulns: Pocs for Antivirus Software‘s Kernel Vulnerabilities

Pocs for Antivirus Software‘s Kernel Vulnerabilities - bee13oy/AV_Kernel_Vulns

github.com
110
1
174
bee13oy retweeted
bo13oy@bo13oy14 Jun 2017
Adobe Flash Player SecureSocket Use-After-Free Remote Code Execution Vulnerability died in the womb. It's poc here github.com/bo13oy/flash/tree…
2
41
54
POCs for Avast Free Antivirus Software's Kernel Vulnerabilities I found last year, I will share other vendors' soon. github.com/bee13oy/AV_Kernel…

GitHub - bee13oy/AV_Kernel_Vulns: Pocs for Antivirus Software‘s Kernel Vulnerabilities

Pocs for Antivirus Software‘s Kernel Vulnerabilities - bee13oy/AV_Kernel_Vulns

github.com
2
91
1
112
It's an unforgettable experience, thank you guys @vangelis_at_POC. 🤣 xitter.cf/vangelis_at_POC/status…
vangelis@vangelis_at_POC14 Apr 2017
bee13oy from CloverSec Labs is giving his talk, "Attacking Antivirus Software's Kernel Driver".
5
Different vulnerabilities in a kernel driver would be treated as one vulnerability. It's the first time I'v heard this statement.
4
Good job! @bo13oy of CloverSec Labs lab.seclover.com/oracle-jre-… xitter.cf/bo13oy/status/79147921…
bo13oy@bo13oy27 Oct 2016
CVE-2016-5568 Oracle JRE AWT Use-After-Free Remote Code Execution Vulnerability exploit demo
1
1
3
Load more