Chief at @calif_io | ex-Google | I'm hiring calif.io/jobs
Joined September 2012
- Tweets 1,471
- Following 509
- Followers 4,240
- Likes 21
thAI Duong retweeted
Throwback to 2011: our founder @julianor (with @XorNinja, formerly at Google and now leading @calif_io) exposed critical flaws in SSL/TLS (HTTPS) with the BEAST attack at Ekoparty 🔥
🤯 Breakthroughs like these inspire the work we do at Coinspect today!
"Vibe hacking" with Cursor remote development
blog.calif.io/p/vibe-hacking…
Twitter has become useless for me. What are all the crypto and security peeps hanging out these days?
No car was harmed during this audit.
We planned to tear apart my Subaru — it was gonna be a full-blown autopsy!
I was ready to sacrifice my car for bugs. Luckily, the team figured out a way to build the attacks w/o any 4-wheel victims.
Thank you Google for a fun engagement!
CVE-2024-10382: Arbitrary code execution in Android Auto and various apps
open.substack.com/pub/calif/…
CVE-2024-10382: Arbitrary code execution in Android Auto and various apps
open.substack.com/pub/calif/…
thAI Duong retweeted
🚀 Wallet Security Ranking Launched!
🔎After months of thorough testing, our comprehensive crypto wallet security framework is live.
⚠️Which wallet do you use, and how did it score?
➡️We test, you decide.
coinspect.com/wallets/
thAI Duong retweeted
The DEF CON video of my talk 'Splitting the Email Atom' is finally here! 🚀 Watch me demonstrate how to turn an email address into RCE on Joomla, bypass Zero Trust defences, and exploit parser discrepancies for misrouted emails. Don’t miss it:
portswigger.net/research/spl…
thAI Duong retweeted
The new leader of Vietnam, To Lam, is about to arrive in the US and the authorities have released a couple of political prisoners. Great news! But there are several more still in prison. I'm pleased to have signed this appeal for the release of the writer Huy Duc.
thAI Duong retweeted
Wormable Substack XSS: blog.calif.io/p/wormable-sub…
It must have been years since the last time a wormable XSS was found in a major social media website. This beautiful type confusion XSS attack vector is a gift that keeps on giving.
But most of all, @samykamkar is our hero!
Type confusion attacks in ProseMirror editors
blog.calif.io/p/type-confusi…
thAI Duong retweeted
Really thrilled and truly honored to receive this year's Pwnie Award for Most Innovative Research with @le_douds. It's a wonderful wrap-up for our work. Can't wait to start the next journey of our research. Great thanks to @PwnieAwards! #defcon32
thAI Duong retweeted
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confu…
Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996
This is vulnerability research at its finest. The researcher examined the most complicated structure that most people would just avoid to discover the most obvious vulnerability that has evaded detection for years.
If you're into beautiful attacks, check out this piece of work by @rskvp93.
ProseMirror is a powerful web editor used by the NYT, The Guardian or Atlassian. Its rather complicated design spec is 100+ pages in print.
@rskvp93 was like, "Oh the spec has a bug in page 79."
Type confusion attacks in ProseMirror editors
blog.calif.io/p/type-confusi…
thAI Duong retweeted
We analyzed a LockBit v3 variant, and rediscovered a bug that allows us to decrypt some data without paying the ransom. We also found a design flaw that may cause permanent data loss.
This is a joint work with @cPeterr.
Enjoy!
blog.calif.io/p/dissecting-l…
thAI Duong retweeted
Join @j00ru as he shares his research/adventure through the Windows Registry:
googleprojectzero.blogspot.c…
50 CVEs is just the beginning. Future posts will explore the attack surface, history, practical exploitation using hive memory corruption, cell indexes and other good times🎉
thAI Duong retweeted
CVE-2024-0517 - Chrome V8 maglev compiler optimization RCE vulnerability, has been derestricted (along with exploit code). This was reported by our teammate @__suto
issues.chromium.org/issues/4…
thAI Duong retweeted
Ransomware response strategy
blog.calif.io/p/ransomware-r…