Security Researcher. Pwn2own Winner (Vancouver 2024)
Joined July 2010
- Tweets150
- Following126
- Followers433
- Likes71
Congratulations! – at Gangnam-gu, Republic of Korea
Another collision! @fluorite_pwn, @YunjeShin, @yskm_Gunter, @Mafty5275, @clay419, @vvsy46, and @won6_choi of BoB::Takedown targeted the Grizzl-E Smart 40A, hitting one collision and one unique 0-day, earning $15,000 USD and 3 Master of Pwn points. #Pwn2Own #P2OAuto
Gwangun Jung retweeted
Another collision! @fluorite_pwn, @YunjeShin, @yskm_Gunter, @Mafty5275, @clay419, @vvsy46, and @won6_choi of BoB::Takedown targeted the Grizzl-E Smart 40A, hitting one collision and one unique 0-day, earning $15,000 USD and 3 Master of Pwn points. #Pwn2Own #P2OAuto
Congregation! They are our mentees who studied in the 13th BoB (Best of Best) offered by Kitri of Korea. – at Gwangjin-gu, Republic of Korea
Confirmed! Their enthusiasm was rewarded as they used an integer overflow to escape #Oracle VirtualBox and execute code on the underlying OS. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own #P2OBerlin
They are my mentees who studied in the BoB (Best of Best) 13th education program offered by Kitri of Korea. – at Gwangjin-gu, Republic of Korea
오 1일차 2등 ㅋㅋ – at Gwangjin-gu, Republic of Korea
And that bring Day One of #Pwn2Own Berlin to a close. We awarded $260,000 today, but more great research is yet to come. STAR Labs has an early lead on Master of Pwn, but it's anyone's game at this point. Stay tuned for more results as we go.
Congratulations, my coworkers! – at Gwangjin-gu, Republic of Korea
We have another collision. Hyunwoo Kim (@V4bel) and Wongi Lee (@_qwerty_po) of Theori were able to escalate to root on Red Hat Linux with an info leak and a UAF, but one of the bugs used was an N-day. They still win $15,000 and 1.5 Master of Pwn points. #Pwn2Own
Gwangun Jung retweeted
Utilizing Cross-CPU Allocation to Exploit Preempt-Disabled Linux Kernel by Mingi Cho & Wongi Lee
#HEXACON2024
Thank you for listening to our presentation.
If you have any questions, please DM(or email) me or @bbbig12. – at Paris, France
Guest Revolution: Our Story of Compromising the Host Kernel from the VMware Guest by @bbbig12 & @pr0Ln
#HEXACON2024
Gwangun Jung retweeted
During #Pwn2Own Automotive, the team from @Synacktiv used 2 bugs to take over the #Autel Maxicharger. Our latest blog takes a brief look at how they did it, and how Autel patched it.
zerodayinitiative.com/blog/2…
Gwangun Jung retweeted
Debugging Hyper-V:
1. Halt in hvix64.
2. Set VM Resume breakpoint.
3. Turn on Intel Processor Trace.
4. Break in the Secure Kernel.
Record all Intel PT executed instructions by reading Host mode memory from within Guest mode.
Hopefully cool video for hypervisor enthusiasts.
Gwangun Jung retweeted
🚨 solid writeup on CVE-2024-21338! Learn how a clever AppLocker driver exploit bypasses SMEP & kCFG. Two paths to SYSTEM access revealed. Worthy read! Great work by @crowdfense
crowdfense.com/windows-applo…
Gwangun Jung retweeted
Very interesting series on dynamically hooking Golang programs
Part 1: blog.quarkslab.com/lets-go-i…
Part 2: blog.quarkslab.com/lets-go-i…
Credits Mihail Kirov and Damien Aumaître (@quarkslab)
#infosec
Gwangun Jung retweeted
Virtual Escape; Real Reward: Introducing Google’s kvmCTF security.googleblog.com/2024…
Sadly, I was unable to attend due to personal issues.
I believe that Mr. Kye made a great presentation.
I hope that I will attend next time.
감사합니다 to the phenomenal @theori_io team @kkokkokye @pr0Ln & Yeonghun Kim @offbyoneconf 𝐌𝐚𝐤𝐞 𝐍-𝐃𝐚𝐲 𝐆𝐫𝐞𝐚𝐭 𝐀𝐠𝐚𝐢𝐧-𝐓𝐡𝐞 𝐒𝐭𝐨𝐫𝐲 𝐨𝐟 𝐍-𝐃𝐚𝐲 𝐅𝐮𝐥𝐥 𝐂𝐡𝐚𝐢𝐧 𝐟𝐫𝐨𝐦 𝐛𝐫𝐨𝐰𝐬𝐞𝐫 𝐢𝐧 𝐠𝐮𝐞𝐬𝐭 𝐭𝐨 𝐒𝐘𝐒𝐓𝐄𝐌 𝐢𝐧 𝐡𝐨𝐬𝐭 is a winner! 또 보자
Gwangun Jung retweeted
[ZDI-24-601|CVE-2024-30085] (Pwn2Own) Microsoft Windows cldflt Heap-based Buffer Overflow Local Privilege Escalation Vulnerability (CVSS 7.8; Credit: Gwangun Jung(@pr0ln) and Junoh Lee(@bbbig12) at Theori(@theori_io)) zerodayinitiative.com/adviso…