@rewhiles

Pwn2Own 2026 | DEFCON 34 finalist Security Researcher @vcslab CTF with @infobahn_ctf @SuperDiceCode

Joined September 2022
  • Tweets28
  • Following89
  • Followers532
1Media
rewhile retweeted
Calif
@calif_ioOct 16
3/ Can your iPhone do this?
61
189
45
2,106
319,808
rewhile retweeted
V4bel
@v4belOct 16
Galaxy S26 Ultra: untrusted_app → root. Introducing "Infinity Core": 6 vulns in the Linux kernel's core subsystems. Their impact spans Linux server LPE, container escape, and Android LPE. Details: github.com/V4bel/InfinityCor…
18
104
6
839
52,198
rewhile retweeted
Kim Jinu
@uz56764Oct 8
We just received a $250,000 Chrome Full Chain bonus! 🎉 We've claimed the second Full Chain bonus of 2026. Only two remain! Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched. Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research. P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!
50
127
8
1,454
667,212
Boom chaka laka! Ben Koo (@kiddo_pwn) and Evangelos Daravigkas (@freddo_1337) of Team DDOS exploitted confirmed with a 5 bug chain, including 1 zero-day targeting Home Assistant Green with a pay out in $4,500 and 2 Master of Pwn points #Pwn2Own
3
2
27
5,999
$300,000!!!!! and 30 Master of Pwn points officially makes Ikotas Labs, Inc. the Master of Pwn as they jump to the top of the leader board after they chained multiple issues together to successfully exploit the Google Pixel 10 #Pwn2Own
3
21
5
213
46,027
5 :)
TrendAI Zero Day Initiative
@thezdiOct 7
And the results are in! Nguyen Thanh Dat (@rewhiles), dungnm (@dungnm_) of Viettel Cyber Security (@vcslab) targeting Sonos Era 300 with 1 collision & 2 zero-days for a total of $10.5K and 4.25 Master of Pwn points #Pwn2Own
31
1,015
And the results are in! Nguyen Thanh Dat (@rewhiles), dungnm (@dungnm_) of Viettel Cyber Security (@vcslab) targeting Sonos Era 300 with 1 collision & 2 zero-days for a total of $10.5K and 4.25 Master of Pwn points #Pwn2Own
10
1
94
6,128
4!
TrendAI Zero Day Initiative
@thezdiOct 6
We have a collision! Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) used 4 bugs to exploit the #Samsung Galaxy S26, but 3 were known by the vendor. They still earn 31,250 and 3.25 Master of Pwn points. #Pwn2Own
1
29
1,182
3
TrendAI Zero Day Initiative
@thezdiMay 14
Another collision! Although successful on stage, @rewhiles of Viettel Cyber Security (@vcslab) targeting Anthropic Claude Code in the Coding Agent category used a bug that was previously known to the vendor. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin
13
731
2
TrendAI Zero Day Initiative
@thezdiJan 23
Collision! @rewhiles of @vcslab targeted the Kenwood DNR1007XR, demonstrating one bug but encountering a collision, earning $2,500 USD and 1 Master of Pwn point. #Pwn2Own #P2OAuto
15
658
1
TrendAI Zero Day Initiative
@thezdiJan 22
Collision! @rewhiles of @vcslab targeted the Alpine iLX-F511, hitting a one-vulnerability collision with a previous attempt and earning $2,500 USD and 1 Master of Pwn point. #Pwn2Own #P2OAuto
1
14
603
We have a collision! Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) used 4 bugs to exploit the #Samsung Galaxy S26, but 3 were known by the vendor. They still earn 31,250 and 3.25 Master of Pwn points. #Pwn2Own
2
18
2
255
12,272
Boom! Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) kicks things off by successfully exploiting the #Samsung Galaxy S26. He's off to the disclosure room to provide the details. #Pwn2Own
13
76
6,426
SuperDiceCodeLovers finishes #3 in DEF CON CTF finals
23
6
46
28,073
rewhile retweeted
Infobahn@Infobahn_ctfAug 3
We won RITSEC CTF 2026 as GPT 5.5 Internal Testing and L3akCTF 2026 as gpt 6.7 internal testing 🔥 Jokes aside, it was actually refreshing to play with humans instead of AI agents for once. Huge thanks to @ritsecclub and @l3akctf for organizing such fun events!
3
7
53
1,756
Does SELinux even matter in 2026? Anyway, here's a Red Hat Enterprise Linux 0day I originally prepared for Pwn2Own Berlin 2026. Unfortunately, I didn't get an entry token for it :<
7
7
1
129
18,214
rewhile retweeted
sqrtrev@sqrtrevMay 25
DEFCON Qual 1st place! See you in Vegas, guys 🍻
5
4
150
7,581
Another collision! Although successful on stage, @rewhiles of Viettel Cyber Security (@vcslab) targeting Anthropic Claude Code in the Coding Agent category used a bug that was previously known to the vendor. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin
18
2
128
21,769
Boom! @rewhiles of Viettel Cyber Security was able to exploit Anthropic Claude Code! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin
1
6
1
55
6,504
rewhile retweeted
Infobahn@Infobahn_ctfApr 27
Last weekend we managed to win TRX CTF 2026! 🐈 It's always a great day to see v8 pwn and xsleaks in the lineup. Many thanks to @TheRomanXpl0it for organizing this wonderful event See you in Italy!
1
6
1
32
3,012
Load more