Nguyễn Đình Biển (@biennd279) profile picture

Nguyễn Đình Biển

@biennd279

CTF player (aka d3s34) at hsvcs. CSSLP - Application Security Engineering (aka biennd4) at Viettel Cyber Security.

 Việt Nam
blog.d3s34.me
Joined June 2016
  • Tweets37
  • Following199
  • Followers349
Thoughts!?!?!??!?!?!?!?!?
Image from Tanya Janca | Shehackspurple (@shehackspurple)
34
175
14
1,763
72,034
Nguyễn Đình Biển retweeted
VCSLab (@vcslab) profile picture
VCSLab@vcslab25 Oct 2024
Rock on🤘🤘🤘 It is interesting to hear the legendary stories surrounding the rocks here. #Pwn2Own #Ireland #MasterOfPwn
2
4
1
41
4,466
Nguyễn Đình Biển retweeted
VCSLab (@vcslab) profile picture
VCSLab@vcslab23 Oct 2024
Wrap on Day 2, we got 8 more points for 2 entries: Sonos speakers and HP printers. We continue to hold the top 1 Master of Pwn, keep it up 💪💪💪
TrendAI Zero Day Initiative (@thezdi) profile pictureTrendAI Zero Day Initiative
@thezdi23 Oct 2024
That brings Day 2 of #Pwn2Own Ireland to a close. We've awarded $874,875 for a mountain of unique 0-days - and we have two more days to go. Here's how the current Master of Pwn standing shake out:
Image from TrendAI Zero Day Initiative (@thezdi)
2
19
2,830
Nguyễn Đình Biển retweeted
VCSLab (@vcslab) profile picture
VCSLab@vcslab22 Oct 2024
Good start for the first time onsite, there were a few nervous moments but it was well controlled. Thanks @thezdi for the support 🙏🙏🙏 P/s: actually the points are 16, not 13
TrendAI Zero Day Initiative (@thezdi) profile pictureTrendAI Zero Day Initiative
@thezdi22 Oct 2024
That's a wrap on Day 1 of #Pwn2Own Ireland! We awarded $486,250 for 52 unique 0-days. Viettel Cyber Security (@vcslab) has an early lead for Master of Pwn with 13 points, but there's lots of contest to go. Stay tuned for all of the latest results as Pwn2Own Ireland continues.
Image from TrendAI Zero Day Initiative (@thezdi)
2
28
3,198
Nguyễn Đình Biển retweeted
TrendAI Zero Day Initiative (@thezdi) profile picture
TrendAI Zero Day Initiative
@thezdi23 Mar 2023
Success! @hoangnx99, @rskvp93, and @_q5ca from Team Viettel (@vcslab) used a 2-bug chain in their attempt against Microsoft Teams. They earn $75,000 and 8 Master of Pwn points.
Image from TrendAI Zero Day Initiative (@thezdi)
11
58
10,759
Nguyễn Đình Biển retweeted
VCSLab (@vcslab) profile picture
VCSLab@vcslab22 Mar 2023
Now we are back with 2 entries. Come on! zerodayinitiative.com/blog/2…
Image from VCSLab (@vcslab)
7
2
28
11,197
Nguyễn Đình Biển retweeted
TheZDIBugs (@TheZDIBugs) profile picture
TheZDIBugs@TheZDIBugs9 Feb 2023
[ZDI-23-111|CVE-2022-29843] (Pwn2Own) Western Digital MyCloud PR4100 DDNS Response Processing Command Injection Remote Code Execution Vulnerability (CVSS 7.5; Credit: rskvp93 and biennd4) zerodayinitiative.com/adviso…
3
11
1,221
Nguyễn Đình Biển retweeted
VCSLab (@vcslab) profile picture
VCSLab@vcslab19 Jan 2023
Oracle EBS Unauth RCE #CVE-2022-21587 analysis from our researchers @vudq16 @_q5ca @hoangnx99 blog.viettelcybersecurity.co…
1
39
3
100
21,000
Nguyễn Đình Biển retweeted
VCSLab (@vcslab) profile picture
VCSLab@vcslab19 Jan 2023
SAML ShowStopper from our researcher @_l0gg. Any software not only Manageengine that uses old version of xmlsec and xalan should take care it seriously. @_l0gg will show a technique by using DocumentHandler to defeat xslt transformer. #CVE-2022-47966 blog.viettelcybersecurity.co…
29
1
72
11,322
Nguyễn Đình Biển retweeted
VCSLab (@vcslab) profile picture
VCSLab@vcslab11 Jan 2023
A critical one, update as soon as possible.
Khoa Dinh (@_l0gg) profile pictureKhoa Dinh@_l0gg11 Jan 2023
CVE-2022-47966, a SAML bug lead to Pre-Auth RCE. ManageEngine got hit, >10 products (Including ADSelfService Plus, ADAudit Plus, AppManager, PMP, ServiceDesk,..) is vulnerable when SAML is enabled or even is configured. manageengine.com/security/ad… #CVE-2022-47966 #SAML
1
17
2,817
Nguyễn Đình Biển retweeted
Pham Khanh (@rskvp93) profile picture
Pham Khanh@rskvp936 Jan 2023
I learned a lot about internal Powershell working when I go through TabShell bug #CVE-2022-41076. Here is the detail blog.viettelcybersecurity.co…. And a few problems still there and may be need more investigation. with @_q5ca, @hoangnx99
119
4
304
40,553
Nguyễn Đình Biển retweeted
VCSLab (@vcslab) profile picture
VCSLab@vcslab14 Dec 2022
How to attack S7commplus protocol of Siemens PLC in SCADA environment. Our team member @Nobey98 shares his research on S7commPlus protocol, algorithm and show a demonstration to control a PLC device: blog.viettelcybersecurity.co… blog.viettelcybersecurity.co… youtube.com/watch?v=1y5xXdav…
1
7
25
Nguyễn Đình Biển retweeted
Pham Khanh (@rskvp93) profile picture
Pham Khanh@rskvp9314 Dec 2022
MSRC released the patch for our "TabShell" vulnerability (msrc.microsoft.com/update-gu…). This is a nice bug chain to RCE Exchange on-premises, Exchange Online, Skype for Business Server (may be SFB Online+Teams too but can't find its powershell remote endpoint) with @_q5ca @hoangnx99
3
27
3
127
Nguyễn Đình Biển retweeted
TrendAI Zero Day Initiative (@thezdi) profile picture
TrendAI Zero Day Initiative
@thezdi8 Dec 2022
Replying to @rskvp93
@rskvp93, @huyna89, @hoangnx99, @_q5ca, @ngcaobaolong from Team Viettel (@vcslab) celebrates their successful SOHO SMASHUP pwn at #P2OToronto with a little 🍾🍾 !! #Pwn2Own
Image from TrendAI Zero Day Initiative (@thezdi)
Image from TrendAI Zero Day Initiative (@thezdi)
Image from TrendAI Zero Day Initiative (@thezdi)
1
5
6
23
Nguyễn Đình Biển retweeted
VCSLab (@vcslab) profile picture
VCSLab@vcslab8 Dec 2022
We have another full win entry. Congrats the team. Hope the last our SOHO entry got lucky 🔥🔥🔥
TrendAI Zero Day Initiative (@thezdi) profile pictureTrendAI Zero Day Initiative
@thezdi8 Dec 2022
On the first win of Day 3 of #P2OToronto, @biennd279 and @rskvp93 from Team Viettel (@vcslab) used a command injection on a WD NAS to help add a little extra holiday decoration to the venue! This nets the team another $20K and 4 MoP points! #Pwn2Own
3
17
🔥🔥🔥
TrendAI Zero Day Initiative (@thezdi) profile pictureTrendAI Zero Day Initiative
@thezdi8 Dec 2022
On the first win of Day 3 of #P2OToronto, @biennd279 and @rskvp93 from Team Viettel (@vcslab) used a command injection on a WD NAS to help add a little extra holiday decoration to the venue! This nets the team another $20K and 4 MoP points! #Pwn2Own
9
Nguyễn Đình Biển retweeted
TrendAI Zero Day Initiative (@thezdi) profile picture
TrendAI Zero Day Initiative
@thezdi7 Dec 2022
Team Viettel (@rskvp93, @_q5ca, @hoangnx99 from @vcslab) with another win! #P2OToronto #Pwn2Own
Image from TrendAI Zero Day Initiative (@thezdi)
Image from TrendAI Zero Day Initiative (@thezdi)
1
12
1
53
Nguyễn Đình Biển retweeted
bugcrowd (@Bugcrowd) profile picture
bugcrowd
@Bugcrowd6 Dec 2022
Researcher Spotlight 🔦 Security Engineer, Redteam, and #bugbounty #hacker! 🚨 @haxor31337 💬 bugcrowd.com/blog/researcher…
Researcher Spotlight: anhnt1337 | @Bugcrowd

Researcher Spotlight: anhnt1337 | @Bugcrowd

From internships to promotions, Nguyen Tuan Anh aka anhnt1337 does Red Team both internally and externally for customers including government, bank, and big enterprise. Check it out to learn all...

bugcrowd.com
8
17
4
124
Nguyễn Đình Biển retweeted
TrendAI Zero Day Initiative (@thezdi) profile picture
TrendAI Zero Day Initiative
@thezdi7 Dec 2022
Replying to @hoangnx99
@hoangnx99, @KmaHaToan, @QuangHV99 from @vcslab achieves a 2-bug successful attack at #P2OToronto. #Pwn2Own
Image from TrendAI Zero Day Initiative (@thezdi)
11
2
30
Load more