b0ring @dnpushme

Learning & Research Beijing Joined February 2013

Tweets

448
Followers

2K
Following

393
Likes

2K

Chaofan Shou @shoucccc

4 months ago

Chinese LLMs can hack better than state-sponsored hackers with properly evolved harness - Kimi K2.5 managed to find and exploit 6 vulnerabilities in browsers: a single page view or an extension install by victims equal full system hijack. Check arxiv.org/abs/2604.20801

45 410 2K 194K 2K

View Details

matteyeux @matteyeux

5 months ago

I was able to recover one of the implants of the Coruna iOS Exploit Kit

9 63 603 39K 284

View Details

b0ring @dnpushme

11 months ago

Lucky Number `MSRC Case 101010`

0 0 3 515 0

View Details

b0ring @dnpushme

a year ago

Is this written by AI?

blackorbird @blackorbird

a year ago

#GlassCage zero-click attack IOS Once triggered, the chain escalates to full root access via a combination of WebKit RCE (CVE-2025-24201) and Core Media kernel exploitation (CVE-2025-24085).#IOCs weareapartyof1.substack.com/p/glass-cage-z…

1 21 48 13K 20

0 0 1 1K 0

View Details

b0ring @dnpushme

a year ago

@HaifeiLi 已经一个月没开工了😂

0 0 3 199 0

View Details

b0ring @dnpushme

a year ago

Thanks, @msftsecresponse ! Thrilled to be on the leaderboard with everyone! 😊

Microsoft Security Response Center @msftsecresponse

a year ago

Shoutout to the other incredible researchers who made this quarter’s leaderboard. Your work and partnership is deeply appreciated! @dhiralpatel94 @dnpushme @HaifeiLi @sim0nsecurity @KeyZ3r0 @xtytia0922 @longgregc @hpy_insu @nevul37 @nvk0x @ashketchum_16 @niraj1mahajan

1 6 15 5K 0

0 0 4 857 0

View Details

b0ring @dnpushme

a year ago

@wmessmer I couldn't find any place to update to 2504, even the update log still shows 2502 (aka.ms/WinDbgWhatsNew). Can you tell me where I can download it?

1 0 1 325 0

View Details

b0ring @dnpushme

a year ago

@xvonfers Should be "MiraclePtr: PROTECTED""

1 0 0 227 0

View Details

1377 High-yield Nukes @buptsb

a year ago

TF is too mature for bug hunting, so we introduced a new surface for u guys.

Leszek Swirski @leszekswirski

a year ago

V8 is leaving the Sea-of-Nodes Turbofan compiler for the shores of CFG, read all about it in my colleague's blog post: v8.dev/blog/leaving-t…

4 33 201 29K 108

3 5 51 7K 13

View Details

b0ring @dnpushme

a year ago

@goabout21 mug

0 0 0 26 0

View Details

b0ring @dnpushme

a year ago

It looks really good!

1 0 8 669 0

View Details

b0ring @dnpushme

2 years ago

Super nice hoodie, for sure!

1 0 24 2K 2

View Details

b0ring @dnpushme

2 years ago

Let’s compete again next year

Google VRP (Google Bug Hunters) @GoogleVRP

2 years ago

📯 Announcing the top 20 Chrome VRP researchers for 2024: crbug.com/386306231 📯 Congratulations to everyone on the list! Many thanks and much gratitude to our entire Chrome VRP researcher community and helping us make Chrome Browser & Chromium more secure for all users! 🎊

1 21 147 56K 24

0 0 8 1K 0

View Details

b0ring @dnpushme

2 years ago

@R00tkitSMM Excellent work! thanks for sharing

0 0 1 441 0

View Details

b0ring @dnpushme

2 years ago

😇😇

Nicolas Krassas @Dinosn

2 years ago

Sophos Used Custom Implants to Surveil Chinese Hackers Targeting Firewall Zero-Days securityweek.com/sophos-used-cu…

0 10 23 4K 8

0 0 0 683 0

View Details

b0ring @dnpushme

2 years ago

@l33d0hyun 😂

0 0 0 2K 0

View Details

Joe Desimone @dez_

2 years ago

virustotal.com/gui/file/9f180… "Desktop Window Manager local privilege escalation.docx"

Boris Larin @oct0xor

2 years ago

We discovered a new zero-day in Microsoft Windows used in attacks with QakBot and other malware. It was just fixed as CVE-2024-30051, and this time it all started with a curious find on VirusTotal… @r00tten securelist.com/cve-2024-30051…