@Frichette_n I personally didn’t see it worth renewing, given my curreny position. I feel unless I am actively looking for a job in consulting and need immediate valid creds, I don’t see it bring any values IMO
English
Chi Tran
16 posts
Chi Tran
@imspicynoodles
Vietnamese spicy noodles restaurant owner
Texas, USA انضم Aralık 2022
918 يتبع137 المتابعون
@testanull The feeling of someone making something on the news from your own state-of-art is the best! Enjoy the flashback with peterjson 🤣
English
They deserved this :)
Responsible disclosure is a joke!
Germán Fernández@1ZRR4H
So, rose87168 said he used CVE-2021-35587 to compromise the login[.]us2[.]oraclecloud[.]com server. Oracle then denied the attack and remains silent but quickly disconnected the server from the Internet (probably to investigate? also unknown). The problem is that Oracle has, at least, 14 other servers under *.oraclecloud[.]com with the same vulnerable version mentioned by the attacker (could it have persistence on other instances?). Something doesn't look so good. "Copyright @ 2009, Oracle. All rights reserved."
English
Chi Tran أُعيد تغريده
🥳The latest !exploitable is here! We're sharing all the joy that comes with exploiting an arbitrary file write in GitLab, while cruising the Mediterranean. 🚢 Everything from onerous configurations to spotty internet! Enjoy! #doyensec #appsec #security
blog.doyensec.com/2025/03/18/exp…
English
Chi Tran أُعيد تغريده
new blogpost time!!
this one's a fun writeup on a vulnerability chain i found across multiple google services that earned me a $4133.70 bounty
lots of fun css as usual! i had to recreate a bunch of drive/docs/gmail/youtube UIs c:
have fun!
lyra.horse/blog/2024/09/u…
English
Chi Tran أُعيد تغريده
Uncoordinated Vulnerability Disclosure: After more than a decade of CVD, has it benefited vendors or researchers more? Have the number of bugs increased to where vendors simply cannot cope with CVD? @dustin_childs has some thoughts - & lots of questions. zerodayinitiative.com/blog/2024/7/15…
English
@_jsoo_ @starlabs_sg On the bright side, so many damn people wanna work for STAR 😬
English
Chi Tran أُعيد تغريده
Sketched current understanding of @msftsecurity's newly released investigation findings (msrc.microsoft.com/blog/2023/09/r…), specifically as they relate to how Storm-0558 acquired the MSA signing key.
See our latest blogpost for more information (wiz.io/blog/key-takea…).
English
Chi Tran أُعيد تغريده
Even at Pwn2Own, there are vendors such as @InductiveAuto who play security theatre by patching bugs that require auth inductiveautomation.com/blog/inductive… yet don’t bother patching pre-auth RCE such as zerodayinitiative.com/advisories/ZDI… and zerodayinitiative.com/advisories/ZDI… because “wE t4k3 sEcUriTY sErioUsLy”
English
@notdurson funfact about me that I was a cook @ Vietnamese restaurant for years before turning into tech in 2019
English
Chi Tran أُعيد تغريده
7 awesome @Burp_Suite Extensions that will help you identify more vulnerabilities 🧵👇
English
Chi Tran أُعيد تغريده
