huyna (@huyna89) profile picture

huyna

@huyna89
Joined December 2010
  • Tweets296
  • Following946
  • Followers745
5Media
Photo by huyna (@huyna89)Photo by huyna (@huyna89)Photo by huyna (@huyna89)Photo by huyna (@huyna89)Photo by huyna (@huyna89)
go go bros 🍾🍾🥂🥂
TrendAI Zero Day Initiative (@thezdi) profile pictureTrendAI Zero Day Initiative
@thezdi8 Dec 2022
Replying to @rskvp93
@rskvp93, @huyna89, @hoangnx99, @_q5ca, @ngcaobaolong from Team Viettel (@vcslab) celebrates their successful SOHO SMASHUP pwn at #P2OToronto with a little 🍾🍾 !! #Pwn2Own
Image from TrendAI Zero Day Initiative (@thezdi)
Image from TrendAI Zero Day Initiative (@thezdi)
Image from TrendAI Zero Day Initiative (@thezdi)
2
28
Replying to @rskvp93
@rskvp93, @huyna89, @hoangnx99, @_q5ca, @ngcaobaolong from Team Viettel (@vcslab) celebrates their successful SOHO SMASHUP pwn at #P2OToronto with a little 🍾🍾 !! #Pwn2Own
Image from TrendAI Zero Day Initiative (@thezdi)
Image from TrendAI Zero Day Initiative (@thezdi)
Image from TrendAI Zero Day Initiative (@thezdi)
1
5
6
23
[iOS 15.1 Update]: Use-After-Free in Voice Control: CVE-2021-30902 Write-up via @ZecOps Blog blog.zecops.com/research/use…
2
48
3
131
This week we are starting an experiment that enables V8's Virtual Memory Cage in Chrome on Desktop (currently only on Dev + Canary channels, then Beta and finally Stable). Here is how that'll work:
3
63
3
246
Finally, here is the blog for the prototype pollution research we did. "A tale of making internet pollution free" - Exploiting Client-Side Prototype Pollution in the wild pwn.af/research/pp
Prototype Pollution

ALT Prototype Pollution

11
323
14
711
So far we have disclosed 25 bugs as a part of Android Partner Vulnerability Initiative! bugs.chromium.org/p/apvi/iss…
6
3
30
Ever wondered how people find browser sandbox escapes? Wonder no more, because this blog post explains how to find, debug and invoke IPC messages. From JavaScript. Using @FirefoxDevTools. blog.mozilla.org/attack-and-…
Examining JavaScript Inter-Process Communication in Firefox – Attack & Defense (Archive)

Examining JavaScript Inter-Process Communication in Firefox – Attack & Defense (Archive)

  Firefox uses Inter-Process Communication (IPC) to implement privilege separation, which makes it an important cornerstone in our security architecture. A previous blog post focused on fuzzing the...

blog.mozilla.org
74
1
184
Success! Team Viettel wasted no time in executing their local EoP on #Windows 10. They head off to the disclosure room to dish the details. #Pwn2Own #P2O
7
33
Thanks to Google VRP teams 🥰 Such nice gifts 😍 @GoogleVRP
Image from huyna (@huyna89)
4
2
96
We have enabled Warp, a significant update to SpiderMonkey, by default in @Firefox 83. 🕸️ SpiderMonkey is the JavaScript engine used in the Firefox web browser. 🌐 @jandemooij explains how Warp works and how it made SpiderMonkey faster. hacks.mozilla.org/2020/11/wa…
Warp: Improved JS performance in Firefox 83 – Mozilla Hacks - the Web developer blog

Warp: Improved JS performance in Firefox 83 – Mozilla Hacks - the Web developer blog

We have enabled Warp, a significant update to SpiderMonkey, by default in Firefox 83. SpiderMonkey, the JavaScript engine used in the Firefox

hacks.mozilla.org
3
66
8
191
One more PDFium bug of mine is public now 😁
Chromium Disclosed Security Bugs (@BugsChromium) profile pictureChromium Disclosed Security Bugs@BugsChromium10 Jun 2020
Security: PDFium (XFA) Use-after-free in function CFDE_TextEditEngine::ReplaceSelectedText (reward: $5000) crbug.com/1055869
1
3
26
We've just presented at @sstic how a 1-day vulnerability in Samsung Trustzone can be used to rewrite the Shannon baseband memory and install a debugger on a Galaxy S7 phone. The PDF 🇬🇧 and talk 🇫🇷 are here: sstic.org/2020/presentation/… The tools are here: github.com/synacktiv/shannon…
Image from Synacktiv (@Synacktiv)
113
4
196
I continue the "Learn XPC exploitation" series. In my new post, you can read about a bug I found in @Malwarebytes and many other applications! 😱 ➡️ wojciechregula.blog/post/lea…
Image from Wojciech Reguła (@_r3ggi)
2
31
99
The recording of my talk "Unveiling the Underground World of Anti-Cheats" at BlackHat Europe 2019 is now online! :D A pleasure to be part of @BlackHatEvents !! youtube.com/watch?v=yJHyHU5U… #BHEU #security #infosec
Unveiling the Underground World of Anti-Cheats

Unveiling the Underground World of Anti-Cheats

By Joel Noguera This talk pretends to catch everyone's attentio...

youtube.com
3
34
2
89
Finally, my sandbox escape bug (CVE-2019-8832) has been fixed in the latest macOS. support.apple.com/en-us/HT21…
Insu Yun (@insu_yun) profile pictureInsu Yun@insu_yun23 Jul 2019
mac OS 10.14.5 RCE + SBX
1
6
48
I decided to create a tutorial called "Reversing Windows Internals" and explain about Windows Internals. The first part describes about Handles, Callbacks and Hidden Callbacks and ObjectTypes in Windows Thanks to @Dark_Puzzle for answering my questions. rayanfam.com/topics/reversin…

Reversing Windows Internals (Part 1) - Digging Into Handles, Callbacks & ObjectTypes

We write about Windows Internals, Hypervisors, Linux, and Networks.

rayanfam.com
18
496
15
1,130
Here is an exploit chain I wrote for Firefox that gets RCE via CVE-2019-9810 and escape the sandbox with CVE-2019-11708/CVE-2019-9810. Once compromised, it drops a payload and injects privileged JS code in already/newly created tabs. github.com/0vercl0k/CVE-2019…
7
423
7
930
Reverse engineering is made easy with Intezer's IDA Pro plugin. Watch this short demo to learn more: hubs.ly/H0m3Pjh0 #reverseengineering #incidentresponse #codereuse #IDAPro
1
22
1
56
Load more