Joined July 2009
Two of my bugs got fixed in Apple's July 2026 macOS updates. The one I'd point to is #CVE-2026-43749, a local privilege escalation, unprivileged user to root, on a fully patched macOS with SIP on. Also credited on #CVE-2026-43682 (kernel memory bug in HFS).
3
4
2
44
15,506
#CyStackAlert At around 7 PM UTC on May 5th, $DOD suffered from a huge #pricedrop. From our very first investigation, the reason for this #slippage could be a cyber attack on @dayofdefeatBSC. A great amount of $DOD was transferred from the market address bscscan.com/tx/0x8e204d1a1a7…
3
9
Try dnsbin.net as a DNS logging tool if you are hunting #Log4Shell vulnerability
1
3
CyStack has found that hundreds of websites of big firms are affected by the subdomain takeover vulnerability. blog.cystack.net/subdomain-t…
2
3
My team has released CyStack Platform v2 beta, a powerful web security platform with a cool UX app.cystack.net/?utm_source=…
3
A python script get Alexa top sites secaholic.com/a-python-scrip…
CVE-2018-2698 is a powerful OOB read/write primitive in the (always-on) VBVA graphics component. It can be used to escape a VBox VM and escalate privs to SYSTEM on Windows 10 hosts. Since the patch is public now, definitely upgrade if you are running malicious code inside a VM.
24
1,170
64
1,489
My talk at Vietnam Web Summit 2017 blog.cystack.net/my-talk-at-…
1
New blog post about @breenmachine's Derby talk - Privilege Escalation from Service Accounts to SYSTEM in Windows foxglovesecurity.com/2016/09…
2
74
73
Exploring Java deserialization in GitHub philwantsfish.github.io/secu…
Security certificate from @ECCOUNCIL? First task is NOT getting infected by the Angler exploit kit on their website.
11
327
1
224
"Hello, Vietnam!" shall be the topic of WhiteHat Grand Prix - Global challenge 2015. whitehatvn.com
Ping retweeted
Here we go, Codegate 2015 CTF registration page: codegate.grayhash.com/
2
40
23