Pwner, gacha player and meme maker.
Hanoi, Vietnam
Joined November 2021
- Tweets44
- Following239
- Followers510
- Likes215
Công Thành Nguyễn retweeted
2 unique bugs and down went the Lexmark CX532adwe as Cong Thanh (@ExLuck99), Duc Hieu (@gr4ss341) and Nam Dung (@greengrass19000) earned $5,000 and 2 Master of Pwn points in their successful exploit attempt #Pwn2Own
Công Thành Nguyễn retweeted
Confirmed! In the penultimate exploit of Day 1, Cong Thanh (@ExLuck99), Duc Hieu (@gr4ss341) and Nam Dung (@greengrass19000) used an OOB Write to exploit Canon imageFORCE 1643F. They win $10,000 and 2 Master of Pwn points. #Pwn2Own
Công Thành Nguyễn retweeted
From AI Agents to RCE - Building a Vulnerability Research Workflow blog.quarkslab.com/from-ai-a…
Công Thành Nguyễn retweeted
22 Windows LPE reported by one of my colleagues at @Seasecresponse .
This data should not be in any public dataset so if you plan to do any fine-tuning it would be helpful we hope.
All credit goes to him.
drive.google.com/drive/folde…
Công Thành Nguyễn retweeted
That's my chain — a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all 😉
Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
Công Thành Nguyễn retweeted
Confirmed! ChatGPT helped Team ANHTUD as they used 3 bugs - 1 collision, 1 unique SSRF and 1 cleartext storage of sensitive information - to exploit Home Automation Green. They finished with just 45 seconds remaining. Their work earns them $16,750 and 3.75 Master of Pwn points. #Pwn2Own
Công Thành Nguyễn retweeted
Blog for ToolShell
Disclaimer: The content of this blog is provided for educational and informational purposes only.
blog.viettelcybersecurity.co…
#SharePoint #ToolShell
Công Thành Nguyễn retweeted
🧵
Mega thread on RF, SDR, ham radio, and signal hacking:
I've been writing educational posts and threads on these topics.
To help finding them easier, I will put all the links here.
And I will link the new threads to the bottom of this meta thread every time I write one.
0/n
Công Thành Nguyễn retweeted
Confirmed! We were definitely thrilled to see @ExLuck99 and @greengrass19000 of ANHTUD use a command injection bug to exploit the Alpine IVI and leave us a special message. Their round 2 win earns them $10,000 and 2 Master of Pwn points. #P2OAuto
Công Thành Nguyễn retweeted
Collision – ANHTUD was able to execute a 2-bug chain against the TP-Link Omada Gigabit Router and the Canon imageCLASS MF753Cdw for the SOHO Smashup. However, one of the bugs he used was previously known. He still earns $31,250 and 6.25 Master of Pwn points. #Pwn2Own
Công Thành Nguyễn retweeted
Success! Team Viettel (@hoangnx99, @vudq16, @biennd279, @_q5ca from @vcslab) were able to execute a single-bug attack against the Xiaomi 13 Pro. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own
Công Thành Nguyễn retweeted
Sometimes bug disclosures go smoothly. Then there are other times. @dustin_childs discusses some of the adventures in vulnerability disclosure in his latest blog. zerodayinitiative.com/blog/2…
Công Thành Nguyễn retweeted
A long day with so many emotions. Nearly failed in the morning. Found the solution at noon. Another vendor problem in the afternoon. Fix it at night. Finally success. Keep trying util the last minute. Thanks for our team 👍👍👍
#P2OVancouver Day 2 Highlights – Team Viettel (@vcslab) uses a 2-bug chain against Microsoft Teams. #Pwn2Own
Công Thành Nguyễn retweeted
apk.sh: makes reverse engineering Android apps easier securityonline.info/apk-sh-m…
Công Thành Nguyễn retweeted
If you enjoy sailing the sea, beware! @MajorTomSec has found a critical security vulnerability in @RaftSurvivaGame, allowing 0-click RCE on any online player. The vendor has remained silent for 5 months, so here are the details: synacktiv.com/sites/default/…
Công Thành Nguyễn retweeted
This was really a cool 2-bug chain which lead to RCE on Microsoft Exchange Server:
- msrc.microsoft.com/update-gu…
- msrc.microsoft.com/update-gu…
We also rced Exchange Online.
Great work from @rskvp93 <3 Follow him for upcoming blogs
#tabshell
MSRC released the patch for our "TabShell" vulnerability (msrc.microsoft.com/update-gu…). This is a nice bug chain to RCE Exchange on-premises, Exchange Online, Skype for Business Server (may be SFB Online+Teams too but can't find its powershell remote endpoint) with @_q5ca @hoangnx99
Công Thành Nguyễn retweeted
Cool vulnerabilities don't last long! Netgear killed two of our entries with a last minute patch before #Pwn2Own!
synacktiv.com/publications/c…
