Q5Ca @_q5ca

Chief Remote Work Officer at @u0Kplusplus duongq5ca.substack.com Vietnam Joined November 2017

Tweets

238
Followers

949
Following

378
Likes

3K

Khoa Dinh @_l0gg

a month ago

Ước 🥹

10 82 248 22K 90

Download Image

0 0 7 410 0

Q5Ca @_q5ca

3 months ago

Just a quick reminder: Copilot on microsoft365.com (m365.cloud.microsoft/chat) is not on scope for bounty 🥲 duongq5ca.substack.com/p/another-micr…

1 0 13 2K 3

Download Image

Q5Ca @_q5ca

4 months ago

Congrats @_l0gg! You did the thing I thought was impossible. Hard work pays off 💪

Trend Zero Day Initiative @thezdi

4 months ago

Congrats @_l0gg! You did the thing I thought was impossible. Hard work pays off 💪

2 21 166 21K 20

Download Image

0 0 7 805 0

Trend Zero Day Initiative @thezdi

2 years ago

That's a wrap on #Pwn2Own Toronto 2023! We awarded $1,038,250 for 58 unique 0-days during the event. Congratulations to Team Viettel (@vcslab) for winning Master of Pwn with $180K and 30 points. We'll see you at Pwn2Own Automotive in Tokyo next January.

8 41 192 73K 11

Download Image

Công Thành Nguyễn @ExLuck99

2 years ago

Nice play. #Pwn2Own #Xiaomi13Pro

0 2 11 3K 1

Download Image

LLM Security @llm_sec

2 years ago

* People ask LLMs to write code * LLMs recommend imports that don't actually exist * Attackers work out what these imports' names are, and create & upload them with malicious payloads * People using LLM-written code then auto-add malware themselves vulcan.io/blog/ai-halluc…

80 2K 8K 1.8M 1K

Bythos @bbbb

2 years ago

@peckshieldAlert @peckshield @SlowMist_Team @BlockSecTeam @cz_binance and @0xblvck_ pointed out the exploit block 26864890 has only one transaction. We need some explanation from @ankr ?

0 2 9 2K 0

Download Image

Trend Zero Day Initiative @thezdi

2 years ago

Success! dungdm (@_piers2) of Team Viettel (@vcslab) used an uninitialized variable and a UAF bug to exploit Oracle VirtualBox. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own #P2OVancouver

0 10 66 15K 0

Download Image

Trend Zero Day Initiative @thezdi

2 years ago

Success! @hoangnx99, @rskvp93, and @_q5ca from Team Viettel (@vcslab) used a 2-bug chain in their attempt against Microsoft Teams. They earn $75,000 and 8 Master of Pwn points.

0 12 58 11K 1

Download Image

Trend Zero Day Initiative @thezdi

2 years ago

Success! @testanull of @starlabs_sg was able to execute a 2-bug chain on Microsoft SharePoint. They earn $100,000 and 10 Master of Pwn points. #Pwn2Own #P2OVancouver

6 47 262 61K 9

Download Image

VCSLab @vcslab

2 years ago

Now we are back with 2 entries. Come on! zerodayinitiative.com/blog/2023/3/21…

0 7 28 11K 0

Download Image

SunSec @1nf0s3cpt

3 years ago

Good works 👍 @BlockSecTeam successfully blocked an attack to rescue 2,906 ETH. etherscan.io/tx/0xe3f0d14cf… Then the attacker left a message: etherscan.io/tx/0x8eb65ef10…

BlockSec @BlockSecTeam

3 years ago

Good works 👍 @BlockSecTeam successfully blocked an attack to rescue 2,906 ETH. etherscan.io/tx/0xe3f0d14cf… Then the attacker left a message: etherscan.io/tx/0x8eb65ef10… https://t.co/7ZZkZmlIFu

141 122 855 341K 31

2 5 59 12K 6

Download Image

VCSLab @vcslab

3 years ago

Oracle EBS Unauth RCE #CVE-2022-21587 analysis from our researchers @vudq16 @_q5ca @hoangnx99 blog.viettelcybersecurity.com/cve-2022-21587…

1 40 102 21K 26

pashov @pashovkrum

3 years ago

This might be the best compilation of critical issues/exploits from 2022, with explanations. If you want to do good as an auditor make sure you understand how those attacks work. Thanks @patrickd_de this is golden🫡 ventral.digital/posts/2022/12/…

5 39 173 15K 121

Q5Ca @_q5ca

3 years ago

#microsoft #exchange #RCE #tabshell #owassrf #PowerShell #tabexpansion #bugbountytips #viral #xuhuớng

Pham Khanh @rskvp93

3 years ago

#microsoft #exchange #RCE #tabshell #owassrf #PowerShell #tabexpansion #bugbountytips #viral #xuhuớng

0 123 309 40K 61

0 0 5 1K 1

Q5Ca @_q5ca

3 years ago

My Twitter Interaction Circle Generate yours at ⠀

2 0 9 2K 0

Download Image

Nguyen The Duc @ducnt_

3 years ago

Hi folks, So, anyone has any idea how to make direct contact with the CTFTime team (maybe they’re on holiday) ? Our TetCTF2023 will start in the next 9-10 days but the CTF event is still not listed on CTFTime :'(. (1/2)