DEVCORE @d3vc0r3

Cyber Red Team in Taiwan devco.re Taiwan Joined February 2014

Tweets

118
Followers

4K
Following

1
Likes

28

DEVCORE @d3vc0r3

a week ago

Huge thanks to @offsectraining for bringing such intensive and high-level training to Taiwan. 5 days, 3 courses: EXP-401, WEB-300, PEN-300. Proud to see participants push through and even earn the rare OffSec Coin. Looking forward to more in the future! 🔥

0 4 38 1K 0

Download Image

DEVCORE @d3vc0r3

4 weeks ago

Congrats to Orange (@orange_8361) for making @PortSwigger’s Top 10 Web Hacking Techniques again — and to splitline (@_splitline_) for the debut. #1 Confusion Attacks — Apache HTTP Server devco.re/blog/2024/08/0… #4 WorstFit — Windows ANSI devco.re/blog/2025/01/0… #DEFCON

0 3 37 1K 5

Download Image

Orange Tsai 🍊 @orange_8361

4 weeks ago

Thanks @PortSwigger and @BugBountyDEFCON for this awesome event — and also to my @d3vc0r3 buddies for standing on stage to collect the trophy for me! A little follow-up article on this research is coming soon... stay tuned! 🤘

12 32 462 22K 35

Download Image

DEVCORE @d3vc0r3

2 months ago

How tough is the @offsectraining #OSEE exam? Orange (@orange_8361) lays out his exam-prep journey, personal reflections, and the key lessons from the EXP-401 (AWE) course. Explore the full story (TC) here: devco.re/blog/2025/07/0…

0 1 32 887 5

Download Image

DEVCORE @d3vc0r3

2 months ago

#Ubuntu’s new AppArmor-based sandbox aimed to limit untrusted access to user namespaces & io_uring. But it wasn’t foolproof. Pumpkin (@u1f383)’s latest blog shows how he bypassed it—covering the issue, technical details & reporting process. devco.re/blog/2025/06/2… #Linux

0 2 21 1K 2

Download Image

DEVCORE @d3vc0r3

4 months ago

Check out Nini's (@terrynini38514) blog on his experience with the #OffSec EXP-401 course and #OSEE certification exam! devco.re/blog/2025/05/2… We'll be hosting EXP-401 again in Taipei, alongside PEN-300 and WEB-300. Don’t miss out! training.devco.re/2025

0 1 23 1K 5

Download Image

DEVCORE @d3vc0r3

4 months ago

Our latest deep dive explores research on Windows Kernel Streaming. Check out Angelboy’s (@scwuaptx) write-up for key insights and analysis. Read more here: devco.re/blog/2025/05/1… #VulnerabilityResearch #Cybersecurity #WindowsKernel #OffensiveCon

1 39 140 12K 64

Trend Zero Day Initiative @thezdi

4 months ago

We have another collision. Although Angelboy (@scwuaptx) from DEVCORE Research Team successfully demonstrated their privilege escalation on Windows 11, 1 of the 2 bugs he used was known to the vendor. He still wins $11,250 and 2.25 Master of Pwn points. #Pwn2Own

0 4 33 5K 1

Download Image

Trend Zero Day Initiative @thezdi

4 months ago

Our first confirmation of #Pwn2Own Berlin! Pumpkin (@u1f383) from DEVCORE Research Team used an integer overflow to escalate privs on Red Hat Linux. He earns $20,000 and 2 Master of Pwn points. #P2OBerlin

4 19 152 13K 6

Download Image

DEVCORE @d3vc0r3

4 months ago

Angelboy (@scwuaptx) will give a talk at #OffensiveCon this week! Following his deep dive into Kernel Streaming vulnerabilities, this week, Angelboy will unveil a new set of bug classes discovered through his research on one of the most common input sources – webcam frames.

0 5 49 2K 5

Download Image

DEVCORE @d3vc0r3

4 months ago

Big congrats to @terrynini38514 on earning Taiwan’s First OffSec OSEE Certification 🙌 After completing Taiwan’s first OffSec Live Training EXP-401 in August last year, NiNi from our research team has officially passed the OSEE exam! #OffSec

0 1 15 773 1

DEVCORE @d3vc0r3

5 months ago

Based on last year’s talk at #DEVCORECONFERENCE, our Red Team expert XY breaks it all down in a new blog. over 50% of organizations still have risky AD CS setups—and yes, full domain takeover is still happening. Read more: devco.re/blog/2025/04/1… #CyberSecurity #RedTeam #ADCS

0 3 15 748 4

DEVCORE @d3vc0r3

6 months ago

DEVCORE CONFERENCE 2025 wrapped, from red team assessment roots to now featuring satellite security, PhaaS, cloud security, exploit hunting and more. Huge thanks to our guest speakers Echo, John, Ashley, GD, and Vic Huang for sharing their cutting-edge research! #cybersecurity

0 2 17 961 0

Download Image

DEVCORE @d3vc0r3

7 months ago

Our latest deep dive explores libarchive vulnerabilities under recent Windows 11 updates. 🔍🔓 Check out NiNi's (@terrynini38514) technical write-up for key insights and security implications. Read more here: devco.re/blog/2025/02/1… #VulnerabilityResearch #Cybersecurity

0 27 79 19K 27

DEVCORE @d3vc0r3

7 months ago

🤘Congrats Orange(@orange_8361) and Splitline(@_splitline_) on making it to 2024 Top 10 Web Hacking Techniques! Check out their groundbreaking research: portswigger.net/research/top-1…

0 4 33 2K 6

DEVCORE @d3vc0r3

8 months ago

Congrats to @terrynini38514 on his debut at the 38th Chaos Communication Congress (CCC)! He’ll be presenting “From Convenience to Contagion: The Libarchive Vulnerabilities Lurking in Windows 11,” diving into several vulnerabilities in libarchive—including a RCE exploit.#38c3

0 4 15 1K 0

Download Image

DEVCORE @d3vc0r3

8 months ago

This month, @orange_8361 and @_splitline_ revealed a new attack surface at #BHEU, uncovering Windows's deepest Unicode Transformer with wide impacts on well-known applications and OSS projects. Explore the pre-release site while we prepare the full blog: worst.fit

0 3 28 1K 7

Download Image

DEVCORE @d3vc0r3

10 months ago

Angelboy (@scwuaptx) takes the CODE BLUE stage in Japan with his latest insights into Windows Kernel vulnerabilities. Don’t miss it! #MSRC #VulnerabilityResearch #codeblue_jp

CODE BLUE @codeblue_jp

10 months ago

Angelboy (@scwuaptx) takes the CODE BLUE stage in Japan with his latest insights into Windows Kernel vulnerabilities. Don’t miss it! #MSRC #VulnerabilityResearch #codeblue_jp