Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
Lan Vu ๐ป๐ณ
100 posts
Lan Vu ๐ป๐ณ
@lanleft_
she/her | coffee delivery at Qrious Secure @qriousec |
Vietnam ๊ฐ์
์ผ Eylรผl 2019
459 ํ๋ก์1.4K ํ๋ก์
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
Not a single LLM can correctly explain the root cause even given the crash poc of this bug, let alone talk about how to write the exploit code. Kudo @lanleft_ for her great works!
We may publish writeup when it no longer hot.
Qrious Secure@qriousec
@lanleft_ has convinced firefox GC to give her a shell ๐คช
English
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
Last month, I gave a talk at @POC_Crew about ATLANTIS and the tech behind our #AIxCC win.
We dove into competition details, using LLMs for deep bug discovery, and what's next for AI in security.
github.com/pr0cf5/talks/bโฆ
English
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
A quick review theses Chrome libAngle issues found by Big Sleep likely from fuzzer output more than AI reasoning, 1 or 2 issues even not exploitable because of libc++ mitigation enabled by default in Chrome.
issuetracker.google.com/issues?q=%20coโฆ
The fuzzer still producing many crashes:
issues.chromium.org/issues?q=angleโฆ
English
Can not get a cve from this vulnerability, itโs quite sad ๐
By the way, Iโd like to give a huge thanks to my mentor @__suto ๐
Qrious Secure@qriousec
Check out our newest blog about how we took advantage of a WebGPU feature to turn an integer underflow bug into an arbitrary read in Chromeโs WebGPU. This bug was fixed by Google long ago, but our ticket is still restricted. qriousec.github.io/post/oob-angle/ by @lanleft_ + @__suto
English
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
If you like Chrome IPC shenanigans like this, you might also enjoy my talk from black hat 25: youtu.be/qhhJCLy0YBA?siโฆ
YouTube
xvonfers@xvonfers
Whoah... $250000 (CVE-2025-4609, similar to CVE-2025-2783/412578726)[412578726][Mojo][IpczDriver]ipcz bug -> renderer duplicate browser process handle -> escape sbx is now open with PoC & exploit(success rate is nearly 70%-80%) issues.chromium.org/issues/4125787โฆ #comment11" target="_blank" rel="nofollow noopener">issues.chromium.org/issues/4125787โฆ
English
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
We released our Fuzzilli-based V8 Sandbox fuzzer: github.com/googleprojectzโฆ
It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!
English
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
Singapore - shout it out for Yuki Chen ๐คฉ !!! Bringing Day 1 of @offbyoneconf 2025 to a explosive end with ๐ ๐๐จ๐ฎ๐ซ๐ง๐๐ฒ ๐ข๐ง๐ญ๐จ ๐๐ข๐ง๐๐จ๐ฐ๐ฌ ๐๐๐๐ฎ๐ซ๐ข๐ญ๐ฒ ๐๐ฎ๐ฉ๐ฉ๐จ๐ซ๐ญ ๐๐ซ๐จ๐ฏ๐ข๐๐๐ซ ๐๐ง๐ญ๐๐ซ๐๐๐๐.
๐๐๐
English
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
A brief JavascriptCore RCE story by @lanleft_ and An Nguyแป
n
qriousec.github.io/post/jsc-uniniโฆ
@tacbliw My friend gave me this book, I ended up quickly after first chapter and never picked it up again. It still sits untouched on my bookshelf xD
English
@LiveOverflow For me it was the opposite. I read the first chapter, didnโt understand shit. Encouraged to learn more. Now I do binary exploit for a living, this book is still on my pc desktop to remind me to keep learing more ๐
English
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
Lan Vu ๐ป๐ณ ๋ฆฌํธ์ํจ
Our teammate @__suto has just pwned V8 JavaScript engine on Google's V8CTF version M120 using a 0-day exploit.
English