Sabitlenmiş Tweet
ZheFox
123 posts
ZheFox
@cyberestro
Working on @Zeroverse_ai Lab | ChaMd5 Team | @r3kapig Team | Binary Security Researcher | APT hunting | Red&Blue Team | BlackHat Speaker
Solar System Katılım Ekim 2021
221 Takip Edilen712 Takipçiler
ZheFox retweetledi
Our AI Agent has conducted an in-depth analysis of the recently impactful OpenClaw 1-Click vulnerability🐞. Come check out our blog to learn more!
zeroverse-ai.github.io/posts/openclaw…
English
ZheFox retweetledi
Our AI Agent quickly analyzed the GNU #InetUtils #telnetd USER environment variable injection vulnerability (CVE-2026-24061)🧐, which could lead to remote authentication bypass
English
ZheFox retweetledi
@cyberestro Our entry was for redis authenticated RCE
Here is the redis setup from the competition github.com/wiz-sec-public…
English
We just debuted Xint Code, our new code analysis tool building on work from on our AIxCC submission in August.
With zero human intervention, it found critical 0day RCE bugs in Redis, PostgreSQL, and MariaDB – sweeping the database category and beating out every human team.
Wiz@wiz_io
Final day at zeroday.cloud was W1LD.🧑💻 Today’s successful exploits >> RCEs in Redis (x2), PostgreSQL, and MariaDB - all demonstrated live on stage. Congrats to XINT Code for being the zeroday.cloud CHAMPIONS!
English
vibe coding wrote a little toy that might help understand the inference output of large models.
github.com/zhefox/logprob…
English
Had another VMware VM escape talk at BlackHat today. Hope you found it interesting😉. I’ll let you know when the slides are available.
#BHUSA #BlackHatEvent #VMware
English
@vv474172261 @msftsecresponse @guhe120 @XiaoWei___ Good news: Guhe left the list, bad news: wkai took over the first place. lol
English
Good news, score updated higher😄 Honoured to be #2😆, Huge thx to @msftsecresponse for the support & to @guhe120 and @XiaoWei___ for their guidance and sharing & to friends' help🤗 Congrats to everyone on the board! 🎉
Microsoft Security Response Center@msftsecresponse
Our previously published Most Valuable Researchers (MVR) leaderboard contained inaccuracies due to technical issues on our end. We apologize for the error and have since resolved the issue. We’re now sharing a fully refreshed and accurate leaderboard. The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers by discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure. We are excited to recognize this year’s Most Valuable Researchers (MVRs), based on the total number of points earned for each valid report. Please join us in celebrating this year’s MVRs, including our top 10: 1. 🥇wkai 2. 🥈VictorV (@vv474172261) 3. 🥉Suresh Chelladurai 4. Anonymous 5. Brad Schlintz (@nmdhkr ) 6. @0x140ce 7. Anonymous 8. Dhiral Patel (@dhiralpatel94) 9. Nan Wang (@eternalsakura13) and Ziling Chen 10. Adnan (@adnanthekhan) See the full list of this year’s MVRs, in addition to our Azure, Office, Windows, and Dynamics 365 leaderboards: msft.it/6019sBjyU #bugbounty
English
Honored to hit #1 😁
Huge thx to @msftsecresponse for the support & to my friends for the lifts 🚀 Thanks to @guhe120 and @XiaoWei___ for their guidance and sharing🤗 Congrats to everyone on the board! 🎉
Microsoft Security Response Center@msftsecresponse
The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers by discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure. Today, we are excited to recognize this year’s 100 Most Valuable Researchers (MVRs), based on the total number of points earned for each valid report. Please join us in celebrating this year’s MVRs, including our top 10: 1. 🥇 VictorV (@vv474172261) 2. 🥈 wkai 3. 🥉 Suresh Chelladurai 4. Anonymous 5. Adnan (@adnanthekhan) 6. Dhiral Patel (@dhiralpatel94) 7. Nan Wang (@eternalsakura13) and Ziling Chen 8. Anonymous 9. @0x140ce 10. Azure Yang (@4zure9) See the full list of this year’s 100 MVRs, in addition to our Azure, Office, Windows, and Dynamics 365 leaderboards: msft.it/6011s6KxU #bugbounty
English
如果你的产品从上线就开始收费，你会收获一堆付费用户有以及每天源源不断的收款通知；但如果你想做做慈善免费推广，那可就不妙辣，你就会遇到图中这种傻逼，不仅要白嫖逆向你的接口，还要骑你脸上拉屎。
中文
I wrote-up how I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation. Link to the blog post below 👇
English
Thanks to @AdmVonSchneider and @cyberestro and possibly others for continuing to maintain BinDiff support for IDA Pro! The amount of work that is often taken for granted is appreciated.
github.com/google/bindiff
github.com/google/bindiff…
English