Chief Food & Beverage Officer at u0K++ (@u0Kplusplus)
Joined January 2020
- Tweets128
- Following365
- Followers205
- Likes5.8K
vudq16 retweeted
The Viettel Cyber Security (@vcslab) team ends their run with a collision. They use 2 bugs to exploit the TrueNAS Mini X. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OIreland
vudq16 retweeted
Confirmed! The @vcslab team combined 4 bugs - 2 in the router & 2 in the NAS - to going from the QNAP QHora-322 to the TrueNAS Mini X. Their combination of SQL injections and missing auth/exposed function bugs earn them $50K and 10 Master of Pwn points. #Pwn2Own #P2OIreland
vudq16 retweeted
Oracle EBS Unauth RCE #CVE-2022-21587 analysis from our researchers @vudq16 @_q5ca @hoangnx99 blog.viettelcybersecurity.co…
vudq16 retweeted
SAML ShowStopper from our researcher @_l0gg. Any software not only Manageengine that uses old version of xmlsec and xalan should take care it seriously. @_l0gg will show a technique by using DocumentHandler to defeat xslt transformer. #CVE-2022-47966 blog.viettelcybersecurity.co…
vudq16 retweeted
This was really a cool 2-bug chain which lead to RCE on Microsoft Exchange Server:
- msrc.microsoft.com/update-gu…
- msrc.microsoft.com/update-gu…
We also rced Exchange Online.
Great work from @rskvp93 <3 Follow him for upcoming blogs
#tabshell
MSRC released the patch for our "TabShell" vulnerability (msrc.microsoft.com/update-gu…). This is a nice bug chain to RCE Exchange on-premises, Exchange Online, Skype for Business Server (may be SFB Online+Teams too but can't find its powershell remote endpoint) with @_q5ca @hoangnx99
vudq16 retweeted
It's Black Friday! 🎉
Get FREE recurring API credits if you like + retweet this tweet (must be following @securitytrails).
If we get up to 100 RTs everyone gets 100 recurring monthly API credits. If we get over 100 RTs, everyone gets the # of API credits in the amount of RTs.
vudq16 retweeted
Excited to open-source "Route Sixty-Sink" today, a static analysis tool I've been working on to find elusive vulnerabilities in .NET applications.
Blog: mandiant.com/resources/route…
GitHub Repo: github.com/mandiant/route-si…
vudq16 retweeted
Good luck to our founder 💪 @namnp5984
vudq16 retweeted
Keep working and the rest will come :)
Thanks @msftsecresponse for great bounty program.
vudq16 retweeted
As promised,
Here is the detail and a part of PoC about the OAM Pre-Auth RCE (CVE-2021-35587)
It may require more work to get fully functional PoC,
Have fun with it!
cc @peterjson
testbnull.medium.com/oracle-…
vudq16 retweeted
The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2021!
portswigger.net/research/top…
vudq16 retweeted
Hacking the Cloud has a pretty big update! We're using a better static site generator that will allow me to spend more time making content. Plus, it looks great!
hackingthe.cloud/blog/v2_new…
vudq16 retweeted
Just published detailed analysis of Microsoft Exchange Deserialization to RCE (CVE-2021-42321), which's also found exploited in Tianfu Cup.
English version from @peterjson
PoC is not provided,
Have fun!
peterjson.medium.com/some-no…
vudq16 retweeted
Our Pre-Auth RCE exploit for Atlassian Confluence (CVE-2021–26084) was leaked after reporting it to @VMware. They have refused to admit the leak and ignored our emails.
tradahacking.vn/atlassian-co…
vudq16 retweeted
A New Attack Surface on Microsoft Exchange! The series covers most of my Black Hat USA and DEFCON talks (with slides and video inside). More articles and vulnerabilities are coming soon!
blog.orange.tw/2021/08/proxy…
vudq16 retweeted
New blog post: joonas.fi/2021/08/saml-is-in…
vudq16 retweeted
Inspired by @garethheyes' CSP bypass in PayPal, for the first time in 4 years, I found again that JS resources added by CloudFlare could introduce a CSP bypass.
l0.cm/cf_cspbypass.html
All domains using CloudFlare have a CSP bypass gadget. Don't use 'unsafe-eval' for CloudFlare domains.
PoC: vulnerabledoma.in/cloudflare…
