Founder @BoraInsights - πŸ‘Ύ Energy, TDD & Offsec πŸ‘¨β€πŸ’»

Thailand
Joined February 2018
Amazing work from @calif_io team 🫢🏻
Demos we presented at Hexacon in Paris today. Everything will be released in due time. 1/ Signal 1-click
43
Another bleed - Fortnite & Fortigate credentials in the nature 😬
FortiBleed A newly discovered data leak: collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide. The exposed data was first discovered by security researcher Bob Diachenko, who says he found a server containing what appeared to be valid Fortinet VPN credentials, including usernames, email addresses, and plaintext passwords.
144
That's my chain β€” a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all πŸ˜‰
Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
109
362
41
2,575
223,971
Day 2 at @offensive_con πŸ”₯ Ready for more chaos
50
My very first blog post is live: kiddo-pwn.github.io/blog/202… During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE πŸŽƒ 🍊 Thanks to @u1f383 @orange_8361 for original finding and allowing to post, and to @the_emmons for the invaluable references πŸ”₯ Enjoy the Demo! PoC: github.com/kiddo-pwn/CVE-202…
14
112
414
33,757
🏯Last days in Japan at TenguCon 2.0 πŸ‘Ί @tengu_sec
2
3
332
🎌 Glad to be back in Tokyo this week at @codeblue_jp - Good to see partners and friends there
123
What an amazing day at @typhooncon. Great talks, great people and let s not say about the after event ! πŸ‘Œ Glad I could join πŸ™
1
71