Vulnerability Researcher @theori_io; Pwn2Own Vancouver 2024 Winner; DEFCON CTF 31, 32 Winner; CTF Player (Team GYG, TheDuck, MMM) ; MS at SoftSec Lab in KAIST.
Joined November 2018
- Tweets33
- Following114
- Followers540
- Likes56
bbbig retweeted
We’ve released Part II of our Windows Kernel Streaming series!
We’ve just published Angelboy’s (@scwuaptx) latest deep dive into Windows Kernel vulnerabilities, fresh off the stage from #Hexacon!
Don’t miss out on the cutting-edge insights and findings. Check it out here:
devco.re/blog/2024/10/05/str…
#MSRC #VulnerailibtyResearch
bbbig retweeted
Thank you for listening to our presentation.
If you have any questions, please DM(or email) me or @bbbig12. – at Paris, France
Guest Revolution: Our Story of Compromising the Host Kernel from the VMware Guest by @bbbig12 & @pr0Ln
#HEXACON2024
bbbig retweeted
Thrilled to learn our (@theori_io) CRS got first place in the AIxCC Semifinal competition. For the semifinal competition, we focused on implementing simple ideas in a robust way. I'm eager to implement our more ambitious ideas for the final event next year!
medium.com/@sa-blog/winning-…
bbbig retweeted
🚨 New Linux Kernel vulnerability (CVE-2024-27394) discovered & patched by Theori!
🔗 blog.theori.io/deep-dive-int…
Our researcher @v4bel at #Theori identified a critical #UAF vulnerability in TCP-AO caused by a race condition in the #RCU API. Using techniques from the ExpRace paper, we extended the race window to demonstrate its exploitability.
Curious how we did it?
Read our deep dive for the full details!
#Theori #Cybersecurity #LinuxKernel #TCP #VulnerabilityResearch #CVE #TechBlog
bbbig retweeted
In a recent #APT simulation, #Theori uncovered 4 critical #RCE vulnerabilities in @cososys Endpoint Protector (EPP) that let us fully compromise the server & clients. Here’s a peek:
👾 CVE-2024–36072: Unauthenticated attackers can exploit a logging flaw to execute system commands with root privileges.
👾 CVE-2024–36073: With admin access, attackers can overwrite configurations and execute commands on client endpoints.
👾 CVE-2024–36074: Server access allows attackers to execute malicious files.
👾 CVE-2024–36075: Unauthenticated attackers can manipulate client configurations to potentially bypass security and achieve remote code execution.
Could your server be #hacked the same way? Find out through our blog post!
👉 blog.theori.io/a-deep-dive-i…
bbbig retweeted
Today, Angelboy (@scwuaptx) revealed his Kernel Streaming research! 🚀 Check out how he uncovered this overlooked attack surface, leading to pwning Windows 11 at #Pwn2Own Vancouver 2024:
devco.re/blog/2024/08/23/str…
#WindowsKernel #MSRC
bbbig retweeted
Part 4 of our N-Day Exploit Series is LIVE! 🔥
➡️ blog.theori.io/chaining-n-da…
Unveiling CVE-2023-34044, an information leakage vulnerability in #VMware Workstation’s #VBluetooth device, found by our own @pr0ln!
It’s a variant of CVE-2023-20870 demonstrated by @starlabs_sg in #Pwn2Own2023 Vancouver.
Dive into the details.
#Theori #티오리 #VulnerabilityResearch #ndayfullchainexploit
bbbig retweeted
We posted our third writeup of N-day full chain series:
Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System medium.com/theori-blog/chain…
bbbig retweeted
Wow! The Theori was able to exploit VMware Workstation with an additional Windows Kernel LPE vulnerability in the Virtualization category. They went from guest OS to SYSTEM on the host OS. They're off to the disclosure calls with details. #Pwn2Own
bbbig retweeted
We've started a blog series on N-day full chain exploits.
The first part is about chrome renderer exploit, CVE-2023-3079.
Check it now!👇👇
blog.theori.io/chaining-n-da…
#Theori #티오리 #Blog #Research #Fermium252 #Chrome #VirtualMachine #CVE #Vulnerability
Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough?
As you might have guessed, the answer is not so much.
We chained six unique CVEs from 2023 listed below.
• Chrome Renderer RCE : CVE-2023-3079
• Chrome Sandbox Escape : CVE-2023-21674
• LPE in guest OS : CVE-2023-29360
• VMware Info Leak : CVE-2023-34044
• VMware Escape : CVE-2023-20869
• LPE in host OS : CVE-2023-36802
bbbig retweeted
We are recruiting reversing guys. If you are interested in our team, plz mail to [email protected] with your self introduction. We will review and mail back!! Thank you.
