Lyutoon (@Lyutoon_) profile picture

PhD student | CTF @Nu1L_Team & @StrawHat_CTF | AI + Security | Collecting xx HoF | BlackHat, SAS Speaker | LLM4Shell

Joined September 2021
Photo by Lyutoon (@Lyutoon_)Photo by Lyutoon (@Lyutoon_)Photo by Lyutoon (@Lyutoon_)Photo by Lyutoon (@Lyutoon_)Photo by Lyutoon (@Lyutoon_)Photo by Lyutoon (@Lyutoon_)Photo by Lyutoon (@Lyutoon_)Photo by Lyutoon (@Lyutoon_)Photo by Lyutoon (@Lyutoon_)Photo by Lyutoon (@Lyutoon_)
A new millstone!
2
26
4,159
Another one today, WinRAR RCE fixed. It's a glad experience to secure WinRAR! Huge thanks to the developers for the quick fix and great communication throughout the process. They’re absolutely awesome people! ❤️
2
2
20
4,789
Got 5 CVEs in macOS 27.2! 2 LPE, 1 SIP bypass, 1 sbx escape read, 1 Kernel memory read.
4
1
81
3,419
Lyutoon retweeted
🎬 That’s a wrap on #TheSAS2026. Another thrilling ride comes to an end - and yes, it was just as good as it looks in this video. For the analytical minds in our field, a few numbers from this year: - 180 attendees - 26 countries - 30 talks in 2 days - 120 GB of video content shown - Over 100 shots consumed on stage - 190 audio-cassette badges - 14 teams in the SAS CTF final See you next year!
8
3
34
3,645
Live from Bali at the Security Analyst Summit 🌴 #TheSAS2026
1
6
450
Lyutoon retweeted
Anarchy on the stage - it's a wrap of #TheSAS2026 first conference day! More talks are coming your way tomorrow afternoon. Right from the beachfront.
3
15
1,723
#TheSAS2026 Wonderful experience! Come and have a chat if you are around!
8
533
During the 7-day national holiday, I mentally feel better without any news about AI, LLM, Security.
1
10
619
Isolated != Secure How could we sandbox agent properly 10 years after...?
Containers are no longer a security boundary. Over the past few months, we’ve seen a crazy amount of Linux kernel vulnerabilities and exploits. This has forced us to rethink the security of infrastructure that relies heavily on the underlying kernel, especially containers. As models become more capable, the barrier to escaping a container has fallen so much that adversaries can now generate working kernel exploits in a single shot. CVE-2026-80521 is one such example. We discovered it using dfs-large1 from @depthfirstlabs and generated the exploit in one shot with GPT-5.6 Sol. The exploit still works on the latest Ubuntu 26.04 release because the fix has not yet been backported. Read our full writeup: depthfirst.com/research/cont…
1
5
827
I know that
24
1,321
9月4号通知9月7号中期答辩,9月5号把中期报告和ppt交给你是吧,真有你的😅
2
323
Reward hacking is inevitable in post-training RL when rewards are sparse and only check the final goal. Without faithful trajectory monitoring, you don't know whether the agent solved the task as intended, or simply “looked at the smart kid's answers” until it got the right ans.
well well well! imagine this model is like an openai internal model and put to pressure to solve the challenge and it struggles and goes crazy to hack a redacted company to get the flag. but for now the results leaning towards model being benchmark-maxxed, unfortunately. the model completed in 33 mins which is not what you would expect from sol/mythos for a complex exploit.
1
665
User can write any file (out of the workspace) and execute arbitrary command in the deepseek harness (dsh) even with `Read Only` permission. A long way to go towards security enhancement.
1
7
1,112
Our agent using GLM5.2 found and exploited an macOS LPE on macOS 26.5.2 in July 18 (before 26.6 shipped). It is confirmed fixed on 26.6. No credit, no CVE due to a beta release of 26.6 in June, so I randomly make it public. See more details here: github.com/Lyutoon/macOS_DSH…
8
22
2
158
20,502
虽然还有一年多才毕业,但最近总是能在小红书上刷到各种天价offer,不自觉地会对毕业之后的工作感到焦虑和迷茫...内卷什么时候是个头啊...
8
722
I got two kernel CVE in 26.6, it's crazy to see that there are lots of excellent researchers also found these issues. Both of them were found by my agent powered by GLM 5.2.
5
2
108
8,679
I'm not gonna say GLM5.2 is powerful enough to compete the most advanced model like gpt5.6 or fable 5 in cybersecurity tasks even under well-written harness, but my experience told me it can find (exploitable) vulnerabilities.
3
923
Redis 8.8.1 just fixed the heap OOB @Fried_rice and I found. I asked GLM5.1 to find 0day in redis. It resulted in a fully dynamic exploit with no hardcoded libc/module offsets. All I gave it: my harness, MCP, and GDB. I have no idea what it actually did... but it did. 🤷‍♂️
3
3
26
3,275