Alibaba Cloud Security open to bug bounty collaboration @HackenProof Security Researcher Just dm https://xitter.cf/t.co/VVU1OV5yz6
Joined August 2017
- Tweets521
- Following4.9K
- Followers14.2K
- Likes4.6K
ch retweeted
We successfully achieved an RCE on GitLab in its default configuration.
Historically, most GitLab RCEs have lived in the web or application-logic layers. This time, guided by the @depthfirstlabs spirit, we went deeper: into the low-level gem dependency chain beneath GitLab.
The result? By sending crafted JSON data, we could exploit memory-corruption vulnerabilities buried deep in that chain and take control of the GitLab application server.
@depthfirstlabs brings together some of the smartest people, and is building the best security AI agent. Follow our work, and come join us!
Read more about this in the comment...
ch retweeted
That's my chain — a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all 😉
Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
ch retweeted
New post: We tested the Mythos showcase vulnerabilities with open models.
They recovered similar scoped analysis! 8/8 models found the flagship FreeBSD zero-day, including a 3B model.
Rankings reshuffle completely across tasks => the AI cybersecurity frontier is super jagged!
ch retweeted
New on the Anthropic Engineering Blog:
How we use a multi-agent harness to push Claude further in frontend design and long-running autonomous software engineering.
Read more: anthropic.com/engineering/ha…
ch retweeted
I hacked Claude Code! It turns out "agentic" is just a fancy new way to get a shell. I achieved full RCE and hijacked organization API keys. CVE-2025-59536 | CVE-2026-21852
research.checkpoint.com/2026…
#ai #Claude
ch retweeted
gpt-oss is out!
we made an open model that performs at the level of o4-mini and runs on a high-end laptop (WTF!!)
(and a smaller one that runs on a phone).
super proud of the team; big triumph of technology.
ch retweeted
1/4 dbugs LIVE
dbugs.ptsecurity.com — vulnerabilities’ home
See trends, discover more, read AI summaries, have all references at hand, and your profile with all your CVEs and CVSS score on a leaderboard.
⬇️ See thread: what’s live + what’s next ⬇️
ch retweeted
After 9 months+ of cranking, cursing, and cursoring, and drawing on over 20 years experience running #HITB's Call for Papers, I bring you CFP Directory - a single system to make it easier for speakers to submit and organizers to connect and curate talks: cfp.directory/
ch retweeted
很好，这次我也是受害者了...被 @getAlby 偷走 0.00174788 BTC($191.96)。能偷是因为这是 Alby 的托管账号。我是很震惊的，因为这鬼协议我必然是不知情的...
我猜是不是会给我发邮件通知，果然 2025/5/1 给我发了个：
Updates to our Terms of Service – Please Review
我在邮件正文底部发现了这个“偷窃协议”：
An inactivity fee will apply to legacy Alby Accounts with a shared wallet created in 2023 or earlier, if there has been no account activity for 12 consecutive months.
然后我这笔 BTC 在 2025/5/26 被偷走了...
开眼界了...🤯😵💫😱
ch retweeted
#vulhub #CyberSecurity #opensource #infosec
Announcing some exciting news from the Vulhub project! We've been busy making big improvements:
1⃣. Completely rebuilt our website from the ground up! Check it out: vulhub.org
ch retweeted
Bybit detected unauthorized activity involving one of our ETH cold wallets. The incident occurred when our ETH multisig cold wallet executed a transfer to our warm wallet. Unfortunately, this transaction was manipulated through a sophisticated attack that masked the signing interface, displaying the correct address while altering the underlying smart contract logic. As a result, the attacker was able to gain control of the affected ETH cold wallet and transfer its holdings to an unidentified address.
Our security team, alongside leading blockchain forensic experts and partners, is actively investigating the incident. Any teams with expertise in blockchain analytics and fund recovery who can assist in tracing these assets are welcome to collaborate with us.
We want to assure our users and partners that all other Bybit cold wallets remain fully secure. All client funds are safe, and our operations continue as usual without any disruption.
Transparency and security remain our top priorities, and we will provide updates asap
ch retweeted
We are super proud and honored to have @xynexis join us as our Event Partner for #OOTB Jakarta happening next month! xynexis.com/ #HITB #25YearsInTheBox #Jakarta #Indonesia
ch retweeted
Thanks @BlackHatEvents for the #BHUSA acceptance! It's pure web hacking research this time! 🔥
However, I'm still not sure if I can enter the US or not. In advance, I reapplied for the VISA and had the interview in March. Two months have passed, and my case is still under review. I really want to be back on stage. Is there any effort or help I can try? 😫
ch retweeted
Lately I've become a seriously stubborn dude when it comes to hacking.
Once I've picked a target app, it's VERY hard for me to move on without having found several high/critical vulns.
However, for every hacker the time will come when it's time to switch targets or apps. Identifying that time is the tricky part. Here are a couple conditions that I use that might help:
1. Can you confidently say that you are an expert on this application? Do you still have questions you could find the answer to?
2. Do you freaking hate the application? Have you spent enough iterations where the thought of doing it again makes you a little sick?
3. Have you applied all the principles you've learned about the vulnerable parts of the app and the apps structure to all parts of the app?
4. Have you read all the documentation and JS files?
5. Have you exhausted every attack vector you can think of for every endpoint of the application in a structured way?
Right, then it may be time to move on.
... Or maybe just one more iteration... 😂
ch retweeted
CNN's @smerconish sits down with rock icon @rogerwaters, who explains the meaning behind the warning at the top of his show. Watch: cnn.it/3Qc53eQ
ch retweeted
For all non-french speakers out there, I finally found the time to write the article associated to "1001 ways to PWN prod!" ^.^
thinkloveshare.com/hacking/1…
For all those that welcomed this talk so well - cc @clintgibler @absoluteappsec @yeswehack @intigriti @chybeta @ManoMano_Tech
ch retweeted
#CVE-2021-2471 MySQL JDBC XXE
write-up in English☕️
pyn3rd.github.io/2021/10/22/…
ch retweeted
An illustrator in #China re-created a famous Japanese painting The Great Wave off #Kanagawa. If Katsushika Hokusai, the original author is still alive today, he would also be very concerned about #JapanNuclearWater.
