@rewhiles

Pwn2Own 2026 | DEFCON 34 finalist Security Researcher @vcslab CTF with @infobahn_ctf @SuperDiceCode

Joined September 2022
  • Tweets29
  • Following94
  • Followers545
1Media
rewhile retweeted
TheSAS2026
@TheSASconOct 23
🎬 That’s a wrap on #TheSAS2026. Another thrilling ride comes to an end - and yes, it was just as good as it looks in this video. For the analytical minds in our field, a few numbers from this year: - 180 attendees - 26 countries - 30 talks in 2 days - 120 GB of video content shown - Over 100 shots consumed on stage - 190 audio-cassette badges - 14 teams in the SAS CTF final See you next year!
8
3
32
3,570
rewhile retweeted
Calif
@calif_ioOct 16
3/ Can your iPhone do this?
66
192
49
2,208
339,047
rewhile retweeted
V4bel
@v4belOct 16
Galaxy S26 Ultra: untrusted_app → root. Introducing "Infinity Core": 6 vulns in the Linux kernel's core subsystems. Their impact spans Linux server LPE, container escape, and Android LPE. Details: github.com/V4bel/InfinityCor…
20
106
7
851
54,469
rewhile retweeted
Kim Jinu
@uz56764Oct 8
We just received a $250,000 Chrome Full Chain bonus! 🎉 We've claimed the second Full Chain bonus of 2026. Only two remain! Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched. Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research. P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!
50
128
9
1,468
676,118
Boom chaka laka! Ben Koo (@kiddo_pwn) and Evangelos Daravigkas (@freddo_1337) of Team DDOS exploitted confirmed with a 5 bug chain, including 1 zero-day targeting Home Assistant Green with a pay out in $4,500 and 2 Master of Pwn points #Pwn2Own
3
2
27
6,066
$300,000!!!!! and 30 Master of Pwn points officially makes Ikotas Labs, Inc. the Master of Pwn as they jump to the top of the leader board after they chained multiple issues together to successfully exploit the Google Pixel 10 #Pwn2Own
3
21
5
215
50,304
5 :)
TrendAI Zero Day Initiative
@thezdiOct 7
And the results are in! Nguyen Thanh Dat (@rewhiles), dungnm (@dungnm_) of Viettel Cyber Security (@vcslab) targeting Sonos Era 300 with 1 collision & 2 zero-days for a total of $10.5K and 4.25 Master of Pwn points #Pwn2Own
32
1,087
And the results are in! Nguyen Thanh Dat (@rewhiles), dungnm (@dungnm_) of Viettel Cyber Security (@vcslab) targeting Sonos Era 300 with 1 collision & 2 zero-days for a total of $10.5K and 4.25 Master of Pwn points #Pwn2Own
10
1
94
6,232
4!
TrendAI Zero Day Initiative
@thezdiOct 6
We have a collision! Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) used 4 bugs to exploit the #Samsung Galaxy S26, but 3 were known by the vendor. They still earn 31,250 and 3.25 Master of Pwn points. #Pwn2Own
1
31
1,242
3
TrendAI Zero Day Initiative
@thezdiMay 14
Another collision! Although successful on stage, @rewhiles of Viettel Cyber Security (@vcslab) targeting Anthropic Claude Code in the Coding Agent category used a bug that was previously known to the vendor. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin
14
761
2
TrendAI Zero Day Initiative
@thezdiJan 23
Collision! @rewhiles of @vcslab targeted the Kenwood DNR1007XR, demonstrating one bug but encountering a collision, earning $2,500 USD and 1 Master of Pwn point. #Pwn2Own #P2OAuto
16
679
1
TrendAI Zero Day Initiative
@thezdiJan 22
Collision! @rewhiles of @vcslab targeted the Alpine iLX-F511, hitting a one-vulnerability collision with a previous attempt and earning $2,500 USD and 1 Master of Pwn point. #Pwn2Own #P2OAuto
1
15
626
We have a collision! Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) used 4 bugs to exploit the #Samsung Galaxy S26, but 3 were known by the vendor. They still earn 31,250 and 3.25 Master of Pwn points. #Pwn2Own
2
19
2
256
12,390
Boom! Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) kicks things off by successfully exploiting the #Samsung Galaxy S26. He's off to the disclosure room to provide the details. #Pwn2Own
13
76
6,433
SuperDiceCodeLovers finishes #3 in DEF CON CTF finals
23
6
46
28,192
rewhile retweeted
Infobahn@Infobahn_ctfAug 3
We won RITSEC CTF 2026 as GPT 5.5 Internal Testing and L3akCTF 2026 as gpt 6.7 internal testing 🔥 Jokes aside, it was actually refreshing to play with humans instead of AI agents for once. Huge thanks to @ritsecclub and @l3akctf for organizing such fun events!
3
7
53
1,770
Does SELinux even matter in 2026? Anyway, here's a Red Hat Enterprise Linux 0day I originally prepared for Pwn2Own Berlin 2026. Unfortunately, I didn't get an entry token for it :<
7
8
1
131
18,256
rewhile retweeted
sqrtrev@sqrtrevMay 25
DEFCON Qual 1st place! See you in Vegas, guys 🍻
5
4
149
7,590
Another collision! Although successful on stage, @rewhiles of Viettel Cyber Security (@vcslab) targeting Anthropic Claude Code in the Coding Agent category used a bug that was previously known to the vendor. They still earn $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin
18
2
128
21,801
Boom! @rewhiles of Viettel Cyber Security was able to exploit Anthropic Claude Code! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin
1
6
1
55
6,504
Load more