Joined October 2023
Trung Duc Le retweeted
19
43
12
672
184,984
Trung Duc Le retweeted
The details of the long awaited KVM Escape are published. PwnEscape leads to VM escapes across multiple hypervisors due to a super cool Linux networking bug. CVE-2026-99999 is a 9.3 CVSS critical rated KVM escape ⛓️ pwn.ai/blog/pwnescape
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors. CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
26
132
21
557
203,417
RT @ITSecurityguard: New research from our team at @SLCyberSec : Pre-Auth Remote Code Execution in Adobe AEM! 👇🏻 …
Trung Duc Le retweeted
New post: how I got into Apple Security Bounty. My path, the articles and talks that helped, a hands-on XNU kernel lab and my setup + tooling. varik.dev/blog/getting-into-…
2
21
102
5,242
Trung Duc Le retweeted
وَأَنْ لَيْسَ لِلإِنسَانِ إِلَّا مَا سَعَى Found a P2 vulnerability in an Android app and got rewarded with a bounty. 💰 It was a deep link hijacking issue that leaked the OAuth auth_code and led to full account takeover. Full write-up: medium.com/@ahmed.m.abd.elft…
2
7
1
130
6,845
My First Article, if you like it retweet ♥, ill do more ♥
10
127
2
534
15,156
Trung Duc Le retweeted
Made over $25K hacking marketplace app permission issues across various bug bounty programs. Here's my latest writeup on how a malicious app might take over a GitHub repository: jeetbhdr.github.io/github-gr… #bugbounty
12
43
448
12,598
Trung Duc Le retweeted
Building an agentic Vulnerability Research Workflow blog.quarkslab.com/from-ai-a… Julien Lair (@quarkslab)
3
95
3
511
31,263
Trung Duc Le retweeted
Last week some of South Korea's biggest banks were hit by a cyberattack. Thanks to a report from CrowdStrike tonight, we now know the entire hack may have been done by a single person. He used a combined stack of an open-source AI penetration tool named ARTEX, DeepSeek v4.1-Flash, GLM-5.3, Grok 4.6, and Claude Code.
177
621
294
5,158
1,506,883
Trung Duc Le retweeted
Have you ever felt like a model isn't actually trying to do what you asked? Did you just ask it wrong, or is there something else at play here? In "The model isn't cooperating", I take a little look. Link below 👇
10
36
1
233
17,718
Trung Duc Le retweeted
THIS IS F**KING INSANE I FOUND AN OPEN-SOURCE AI HACKING & RED-TEAMING FRAMEWORK CALLED G0DM0D3. It comes loaded with jailbreaks, adversarial attacks, prompt transformation techniques, and multi model testing. You can test 60+ AI models, compare their defenses, and find out which models crack under pressure. It supports OpenRouter, Venice, Ollama, LM Studio, llama.cpp & vLLM. Basically, an entire LLM security testing lab packed into one repo. AI HACKING IS GETTING SERIOUS. BOOKMARK this before someone take it down REPO BELOW
31
64
2
442
34,796
Trung Duc Le retweeted
I've decided to finally release my vulnerability hunting methodology that I've been using for several months now, both in testing as well as live engagements with great success. I was inspired by (and huge congrats to) the @Blackfrost_AI team open-sourcing Cyber-Frost Harness, their reproducible security-agent runtime with procedural skills, an evidence ledger, and isolated Docker targets for red/blue/purple work. 🎉 If you like the Cyber Frost Harness, and want some out of the box vulnerabilty hunting and POC development kit to go along with it - check out my VulnHunter. It's already loadable: their harness reads standard SKILL.md skills. Point skill_dir at VulnHunter's (or run its installer), and the hunting, falsification, and PoC disciplines load immediately. Repo: github.com/nealbridges/VulnH… CREDITS: This is fork of @CapitalOne original repo. I simply took it a step further on POC development and model agnostic. I'm also actively developing in my forked repo as I make more changes to it and welcome the contributions from the community as well. I think I'm doing the whole "respect who you give credit to" drama, and I asked my model to double and triple check it. So i can blame the model if its wrong. Otherwise, dont put me on blast on X if i suck at credits. /s Looking forward to developing on this further with the community.
31
220
10
1,564
103,865
Trung Duc Le retweeted
one of my favorite bug types was also found in Google, this was quite interesting, Google awarded a bounty even though they'd patched the bug before reviewing it :]
22
24
2
452
23,027
Trung Duc Le retweeted
"3 random dudes” 1. hacked apple, again and again. httpvoid.com/Apple-RCE.md httpvoid.com/Hello-Lucee!-Le… httpvoid.com/Hacking-Apple-w… 2. your github enterprise is our github enterprise. httpvoid.com/GitHub-Enterpri… 3. get a discord message from me, get pwned. hacktron.ai/blog/discord-rce youtube.com/watch?v=R3SE4VKj… 4. oh yeah, at one point we basically had shells across the electron ecosystem. check the DEF CON research. media.defcon.org/DEF%20CON%2… 5. your supabase database is my database. hacktron.ai/blog/supapwn 6. we got the posthog prod database. hacktron.ai/blog/posthog-rce 7. react2shell? vercel paid us $170k for helping secure their waf. hacktron.ai/blog/react2shell… 8. your palo alto vpn is my vpn. hacktron.ai/blog/cve-2026-02… 9. ai ides? we got shells for you, antigravity hacktron.ai/blog/hacking-goo… 10. windsurf rce. youtube.com/watch?v=23Mz7qcR… 11. turning cluely into malware. hacktron.ai/blog/hacking-clu… 12. ai browsers? sure, uxss: your perplexity browser is my browser. hacktron.ai/blog/perplexity-… 13. openai atlas too. kinda uxss hacktron.ai/blog/hacking-ope… 14. hey, it’s not even our first time hacking discourse. projectdiscovery.io/blog/dis… 15. adobe coldfusion: pre-auth rce. because apparently we needed another one. projectdiscovery.io/blog/ado… there’s a lot more. go dig. anyway, yes: “3 random dudes.” and @HacktronAI is full of more random dudes like these.
70
238
27
2,085
181,713
This scrappy setup got him 10+ account takeovers on the same program 👇🏼
3
73
412
15,594
Trung Duc Le retweeted
This article is very interesting for designing your own AI tooling for BB hunting: use /goal instead of the attack vector. Use the impacts accepted by the BB program and create a goal around reaching them. Instead of going from attack vector → impact. Try going from impact → attack path. Go from zoomIn instead of zoomOut. blog.trailofbits.com/2026/07…
2
17
1
129
5,250
Trung Duc Le retweeted
Bug Bounty Reading List: A curated collection of articles and resources for bug bounty hunters. bb.vitorfalcao.com/ #bugbounty #articles #resources #collection #hunter
22
132
5,300