
Founder @BoraInsights - πΎ Energy, TDD & Offsec π¨βπ»
Thailand
Joined February 2018
- Tweets8
- Following93
- Followers20
- Likes92
Another bleed - Fortnite & Fortigate credentials in the nature π¬
FortiBleed
A newly discovered data leak: collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide.
The exposed data was first discovered by security researcher Bob Diachenko, who says he found a server containing what appeared to be valid Fortinet VPN credentials, including usernames, email addresses, and plaintext passwords.
JB retweeted
That's my chain β a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all π
Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
JB retweeted
My very first blog post is live: kiddo-pwn.github.io/blog/202β¦
During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy!
N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE π π
Thanks to @u1f383 @orange_8361 for original finding and allowing to post, and to @the_emmons for the invaluable references π₯
Enjoy the Demo!
PoC: github.com/kiddo-pwn/CVE-202β¦
π Glad to be back in Tokyo this week at @codeblue_jp - Good to see partners and friends there
What an amazing day at @typhooncon. Great talks, great people and let s not say about the after event ! π Glad I could join π







