English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
vcslab's profile picture. This is the Twitter channel of VCSLab - the research team of Viettel Cyber Security

VCSLab

@vcslab

This is the Twitter channel of VCSLab - the research team of Viettel Cyber Security

111Posts 3KFollowers 27Following
You might like
VCSLab reposted
thezdi's profile picture.
Trend Zero Day Initiative
@thezdi
Oct 23

We have another collision. Team Viettel used two bugs to exploit the Lexmark CX532adwe. While their heap based buffer over was unique, the other bug has been seen earlier in the contest. They still earn $7,500 and 1.5 Master of Pwn points. #Pwn2Own

thezdi's tweet image. We have another collision. Team Viettel used two bugs to exploit the Lexmark CX532adwe. While their heap based buffer over was unique, the other bug has been seen earlier in the contest. They still earn $7,500 and 1.5 Master of Pwn points. #Pwn2Own
thezdi's tweet image. We have another collision. Team Viettel used two bugs to exploit the Lexmark CX532adwe. While their heap based buffer over was unique, the other bug has been seen earlier in the contest. They still earn $7,500 and 1.5 Master of Pwn points. #Pwn2Own
0
2
15
2
5K
VCSLab reposted
thezdi's profile picture.
Trend Zero Day Initiative
@thezdi
Oct 23

Confirmed! namnp of Viettel Cyber Security used a crypto bypass and a heap overflow to exploit the Phillips Hue Bridge. They earn $20,000 and 4 Master of Pwn points, which catapults them in the Top 5. It also puts us over $1,000,000 for the contest! #Pwn2Own

thezdi's tweet image. Confirmed! namnp of Viettel Cyber Security used a crypto bypass and a heap overflow to exploit the Phillips Hue Bridge. They earn $20,000 and 4 Master of Pwn points, which catapults them in the Top 5. It also puts us over $1,000,000 for the contest! #Pwn2Own
thezdi's tweet image. Confirmed! namnp of Viettel Cyber Security used a crypto bypass and a heap overflow to exploit the Phillips Hue Bridge. They earn $20,000 and 4 Master of Pwn points, which catapults them in the Top 5. It also puts us over $1,000,000 for the contest! #Pwn2Own
0
2
32
2
7K
VCSLab reposted
thezdi's profile picture.
Trend Zero Day Initiative
@thezdi
Oct 22

Another confirmation! Dinh Ho Anh Khoa (@_l0gg) and Phan Vinh Khang (@pivik_) of Viettel Cyber Security used a unique command injection and two bugs that collided with previous bugs to exploit the Home Automation Green. They earn $12,500 and 2.75 Master of Pwn points. #Pwn2Own

thezdi's tweet image. Another confirmation! Dinh Ho Anh Khoa (@_l0gg) and Phan Vinh Khang (@pivik_) of Viettel Cyber Security used a unique command injection and two bugs that collided with previous bugs to exploit the Home Automation Green. They earn $12,500 and 2.75 Master of Pwn points. #Pwn2Own
0
7
69
4
11K
VCSLab reposted
thezdi's profile picture.
Trend Zero Day Initiative
@thezdi
Oct 22

🏠Boom! @ViettelCyberSec kicks off Day 2 of #Pwn2Own Ireland as they slip past the @home_assistant Green’s defenses! Smart home, smarter hack. They head off for the first disclosure of the day. #P2OIreland

0
3
17
1
3K
VCSLab reposted
ViettelCyberSec's profile picture.
Viettel Cyber Security
@ViettelCyberSec
Jul 24

Our researcher Khoa Dinh just published his findings for ToolShell Check it here

_l0gg's profile picture.
Khoa Dinh
 @_l0gg
Jul 24

Blog for ToolShell Disclaimer: The content of this blog is provided for educational and informational purposes only. blog.viettelcybersecurity.com/sharepoint-too… #SharePoint #ToolShell

_l0gg's tweet image. Blog for ToolShell Disclaimer: The content of this blog is provided for educational and informational purposes only. blog.viettelcybersecurity.com/sharepoint-too… #SharePoint #ToolShell
10
85
247
91
25K
0
1
6
0
699
VCSLab reposted
ViettelCyberSec's profile picture.
Viettel Cyber Security
@ViettelCyberSec
Jul 24

🚨 VCS warns of active attacks on a critical SharePoint vuln we first discovered & reported. Hackers can bypass auth & take over on-prem servers. 📌 Read our guidance: prevention, detection, hunting & more. viettelsecurity.com/microsoft-shar…

ViettelCyberSec's tweet image. 🚨 VCS warns of active attacks on a critical SharePoint vuln we first discovered & reported. Hackers can bypass auth & take over on-prem servers. 📌 Read our guidance: prevention, detection, hunting & more. viettelsecurity.com/microsoft-shar…
0
4
15
2
2K
vcslab's profile picture.
VCSLab
 @vcslab
Jul 24

🌟 Huge shoutout to our brilliant researcher @_l0gg for discovering the critical SharePoint vulnerability at Pwn2Own Berlin! 🔍 His in-depth analysis of the widely exploited ToolShell flaw is a must-read for the cybersecurity community.

_l0gg's profile picture.
Khoa Dinh
 @_l0gg
Jul 24

Blog for ToolShell Disclaimer: The content of this blog is provided for educational and informational purposes only. blog.viettelcybersecurity.com/sharepoint-too… #SharePoint #ToolShell

_l0gg's tweet image. Blog for ToolShell Disclaimer: The content of this blog is provided for educational and informational purposes only. blog.viettelcybersecurity.com/sharepoint-too… #SharePoint #ToolShell
10
85
247
91
25K
0
0
4
1
588
vcslab's profile picture.
VCSLab
 @vcslab
Jul 24

🚨 Shocking impact from the SharePoint vulnerability we found at Pwn2Own! 😱 Despite our efforts to patch it 🤝, many systems are still at risk ⚠️. Secure yours now! 🔒 Details: blog.viettelcybersecurity.com/toolshell-a-cr…

1
10
37
6
5K
VCSLab reposted
_l0gg's profile picture.
Khoa Dinh
 @_l0gg
Jul 24

Viettel Cyber Security Press Release for Customer alert, Latest research and Recommendations. Blog is comming viettelsecurity.com/microsoft-shar… #SharePoint #ToolShell

_l0gg's tweet image. Viettel Cyber Security Press Release for Customer alert, Latest research and Recommendations. Blog is comming viettelsecurity.com/microsoft-shar… #SharePoint #ToolShell
0
4
26
5
3K
VCSLab reposted
thezdi's profile picture.
Trend Zero Day Initiative
@thezdi
May 16

That brings Day Two of #Pwn2Own Berlin. So far, we have awarded $695,000 for 20 unique 0-days. STAR Labs has a commanding lead in Master of Pwn points and seem untouchable. Tune in tomorrow for the final day to see how it ends!

thezdi's tweet image. That brings Day Two of #Pwn2Own Berlin. So far, we have awarded $695,000 for 20 unique 0-days. STAR Labs has a commanding lead in Master of Pwn points and seem untouchable. Tune in tomorrow for the final day to see how it ends!
0
9
59
2
6K
VCSLab reposted
thezdi's profile picture.
Trend Zero Day Initiative
@thezdi
May 16

Confirmed! Viettel Cyber Security (@vcslab) used an OOB Write for their Guest-to-Host escape on #Oracle VirtualBox. The earn themselves $40,000 and 4 Master of Pwn points.

thezdi's tweet image. Confirmed! Viettel Cyber Security (@vcslab) used an OOB Write for their Guest-to-Host escape on #Oracle VirtualBox. The earn themselves $40,000 and 4 Master of Pwn points.
thezdi's tweet image. Confirmed! Viettel Cyber Security (@vcslab) used an OOB Write for their Guest-to-Host escape on #Oracle VirtualBox. The earn themselves $40,000 and 4 Master of Pwn points.
0
12
79
8
6K
vcslab's profile picture.
VCSLab
 @vcslab
May 16

Blockbuster from @_l0gg Congratulation 🥳🥳🥳

thezdi's profile picture. Trend Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Trend Zero Day Initiative
@thezdi
May 16

Confirmed!! Dinh Ho Anh Khoa (@_l0gg) of Viettel Cyber Security combined an auth bypass and an insecure deserialization bug to exploit #Microsoft SharePoint. He earns $100,000 and 10 Master of Pwn points. #Pwn2Own #P2OBerlin

thezdi's tweet image. Confirmed!! Dinh Ho Anh Khoa (@_l0gg) of Viettel Cyber Security combined an auth bypass and an insecure deserialization bug to exploit #Microsoft SharePoint. He earns $100,000 and 10 Master of Pwn points. #Pwn2Own #P2OBerlin
thezdi's tweet image. Confirmed!! Dinh Ho Anh Khoa (@_l0gg) of Viettel Cyber Security combined an auth bypass and an insecure deserialization bug to exploit #Microsoft SharePoint. He earns $100,000 and 10 Master of Pwn points. #Pwn2Own #P2OBerlin
2
22
164
20
21K
0
0
8
0
680
vcslab's profile picture.
VCSLab
 @vcslab
May 15

First successful entry for the Pwn2Own Berlin 2025 from our team 🍾🍾🍾

thezdi's profile picture. Trend Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Trend Zero Day Initiative
@thezdi
May 15

Boom! Viettel Cyber Security @vcslab was successful in demonstrating their attempt against NVIDIA Triton Inference Server - they are headed off to the disclosure room now. #Pwn2Own #P2OBerlin

thezdi's tweet image. Boom! Viettel Cyber Security @vcslab was successful in demonstrating their attempt against NVIDIA Triton Inference Server - they are headed off to the disclosure room now. #Pwn2Own #P2OBerlin
2
5
37
0
5K
0
0
6
0
841
vcslab's profile picture.
VCSLab
 @vcslab
Jan 24

🚨 Pwn2Own Automotive 2025 is a wrap! 🚗💥 🎉 We proudly made it to the Top 5 teams in our debut in the Automotive category! With 4 entries, 8.75 points, and $53,750 awarded, we’re just getting started in this exciting new field. 💪 Here's to more breakthroughs ahead! 🌍🔥

thezdi's profile picture. Trend Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Trend Zero Day Initiative
@thezdi
Jan 24

And that’s a wrap! #Pwn2Own Automotive 2025 is complete. In total, we awarded $886,250 for 49 0-days over the three day competition. With 30.5 points and $222,250 awarded, Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) is our Master of Pwn. #P2OAuto

thezdi's tweet image. And that’s a wrap! #Pwn2Own Automotive 2025 is complete. In total, we awarded $886,250 for 49 0-days over the three day competition. With 30.5 points and $222,250 awarded, Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) is our Master of Pwn. #P2OAuto
15
40
207
17
92K
0
1
12
0
2K
VCSLab reposted
ViettelCyberSec's profile picture.
Viettel Cyber Security
@ViettelCyberSec
Jan 23

After 2 thrilling days, our journey has come to an end, and guess what? Our white-hat hacker team is proudly in the Top 5 of the world’s greatest! 📷📷 Now it’s time to pack those trophies, head back to Vietnam, and celebrate Tet! 📷📷 Welcome home, our champions @vcslab…

thezdi's profile picture. Trend Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Trend Zero Day Initiative
@thezdi
Jan 23

Day 2 of #Pwn2Own Automotive comes to a close. We awarded $335,500, which brings the event total to $718,250. So far, 39 unique 0-days have been disclosed, & we've seen research never before demonstrated. @SinSinology has a commanding lead for Master of Pwn. Stay tuned for Day 3.

thezdi's tweet image. Day 2 of #Pwn2Own Automotive comes to a close. We awarded $335,500, which brings the event total to $718,250. So far, 39 unique 0-days have been disclosed, & we've seen research never before demonstrated. @SinSinology has a commanding lead for Master of Pwn. Stay tuned for Day 3.
4
9
66
2
10K
1
2
10
0
2K
VCSLab reposted
thezdi's profile picture.
Trend Zero Day Initiative
@thezdi
Jan 23

In an #Pwn2Own After Dark entry, the team from @vcslab exploited the Sony XAV-AX8500, but the bug they used was previously know. They earn $5,000 and 1 Master of Pwn point. #P2OAuto #Pwn2Own

thezdi's tweet image. In an #Pwn2Own After Dark entry, the team from @vcslab exploited the Sony XAV-AX8500, but the bug they used was previously know. They earn $5,000 and 1 Master of Pwn point. #P2OAuto #Pwn2Own
0
1
7
0
3K
VCSLab reposted
ViettelCyberSec's profile picture.
Viettel Cyber Security
@ViettelCyberSec
Jan 22

初日が無事に終了しました。ご支援いただき、本当にありがとうございます。明日もさらに多くの勝利が待っています！#アルパイン #Kenwood Our first day has come to an end with two successful exploitations 😊 and we got into Top 5 Thank you for your support. More victories await us…

ViettelCyberSec's tweet image. 初日が無事に終了しました。ご支援いただき、本当にありがとうございます。明日もさらに多くの勝利が待っています！#アルパイン #Kenwood Our first day has come to an end with two successful exploitations 😊 and we got into Top 5 Thank you for your support. More victories await us…
0
1
7
0
588
VCSLab reposted
thezdi's profile picture.
Trend Zero Day Initiative
@thezdi
Jan 22

Confirmed! @vcslab used an OS command injection bug to exploit the #Kenwood IVI for code execution. They win $20,000 and 2 Master of Pwn points.

thezdi's tweet image. Confirmed! @vcslab used an OS command injection bug to exploit the #Kenwood IVI for code execution. They win $20,000 and 2 Master of Pwn points.
thezdi's tweet image. Confirmed! @vcslab used an OS command injection bug to exploit the #Kenwood IVI for code execution. They win $20,000 and 2 Master of Pwn points.
1
2
14
2
3K
vcslab's profile picture.
VCSLab
 @vcslab
Jan 22

🚨Proud to join Pwn2Own Tokyo 2025! 🌏💥 💪 Ready to take on the challenge and own it! 🔥 #CyberSecurity #Pwn2Own #vcslab #Viettel

vcslab's tweet image. 🚨Proud to join Pwn2Own Tokyo 2025! 🌏💥 💪 Ready to take on the challenge and own it! 🔥 #CyberSecurity #Pwn2Own #vcslab #Viettel
thezdi's profile picture. Trend Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Trend Zero Day Initiative
@thezdi
Jan 21

The schedule for #Pwn2Own Automotive is live! We have 50 entries from 21 teams across three categories. EV Chargers and IVI systems turned out to be popular choices. See the full schedule at zerodayinitiative.com/blog/2025/1/21… #P2OAuto

0
7
17
2
8K
1
1
12
0
991
vcslab's profile picture.
VCSLab
 @vcslab
Oct 25, 2024

Rock on🤘🤘🤘 It is interesting to hear the legendary stories surrounding the rocks here. #Pwn2Own #Ireland #MasterOfPwn

2
4
41
2
4K
haxor31337's profile picture. 29 y/o Bug Bounty Hunter and Red Teamer at Viettel Cyber Security. Brand Ambassador @Hacker0x01 - Researcher Spotlight @Bugcrowd

Tuan Anh Nguyen⚡️ 🇻🇳

@haxor31337
Dinosn's profile picture. Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKrW3

Nicolas Krassas

@Dinosn
h4x0r_dz's profile picture. Uber Driver

H4x0r.DZ 🇰🇵

@h4x0r_dz
rskvp93's profile picture. Security Engineer at @calif_io. Winner of Pwn2own Vancouver 2021, Torento 2022, Vancouver 2023. MSRC top 100 2019, 2020, 2021.

Pham Khanh

@rskvp93
infosec_au's profile picture. Co-founder, security researcher. Building an attack surface management platform, @assetnote

shubs

@infosec_au
cyb3rops's profile picture. Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim

Florian Roth ⚡️

@cyb3rops
pyn3rd's profile picture. Security Researcher&Red Team&Cloud Security. BlackHat&HITB&CanSecWest Speaker.

pyn3rd

@pyn3rd
0x0SojalSec's profile picture. Cyber_Security_Re-searcher || 0SINT || Malware Analysis II Pwn || Ai Re-searcher || Project AI-StrikeSec || 0ld Accounts Suspended @0xSojalSec ||

Md Ismail Šojal 🕷️

@0x0SojalSec
hoangnx99's profile picture. Security Researcher at @vcslab Chief Finance Officer of @u0Kplusplus

Nguyen Xuan Hoang

@hoangnx99
frycos's profile picture. Private account! Red teamer @codewhitesec. @frycos@infosec.exchange @frycos.bsky.social

frycos

@frycos
ExLuck99's profile picture. Pwner, gacha player and meme maker.

Công Thành Nguyễn

@ExLuck99
kmkz_security's profile picture. Offensive Security, pom-pom girl... Who cares ?? Bourbon Offensive Security Services | BOSS

kmkz

@kmkz_security
pmnh_'s profile picture. aka pmnh / ex-Security researcher / Synack #1 SRT 2022-2023 / Synack, HackerOne, BC / Deep recon / source code analysis. Opinions my own, not employer.

Peter M

@pmnh_
VietPetrus's profile picture. Security Researcher

Petrus Viet

@VietPetrus
Y4er_ChaBug's profile picture. Happy!

Y4er

@Y4er_ChaBug
_q5ca's profile picture. Chief Remote Work Officer at @u0Kplusplus

Q5Ca

@_q5ca
CrazymanArmy's profile picture. CTFer / APT hunter / RedTeam / BlueTeam the member of @r3kapig the leader of @ShadowChasing1 CVE-2022-30190 find job opportunities opinions are own not group

crazyman_army

@CrazymanArmy
irsdl's profile picture. Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker, @SecProjectLtd founder 🕸️https://t.co/YipuTcYnWc🥷 🍏A dad-joke maker🍐

Soroush Dalili

@irsdl
_l0gg's profile picture.

Khoa Dinh

@_l0gg
Irgebir7727's profile picture. I’m on my worst behavior.

Irgebir

@Irgebir7727
sniff2345's profile picture.

NANA

@sniff2345
ngtuonghung's profile picture.

Nguyễn Tường Hùng

@ngtuonghung
warpboi's profile picture. Just exploring the internet.

warpboii

@warpboi
nicolaipre's profile picture.

Nic

@nicolaipre
Anes4sec's profile picture.

꯭

@Anes4sec
quan_ba10355's profile picture.

Bá Quân Trần

@quan_ba10355
Law4NC's profile picture. Former Congressional Candidate NC03 - America First, Fiscal Conservative, USMC Combat Veteran, Husband and Father #NC03 #Law4Congress #tcot #ncpol

Phil Law

@Law4NC
ibehnam's profile picture. vuln researcher

bdsecure

@ibehnam
lordymemeuser's profile picture.

RNGesus

@lordymemeuser
enryuzz's profile picture. CTF Player

Enryu

@enryuzz
TrongTienKMA's profile picture.

Tiến Hoàng Trọng

@TrongTienKMA
MananJain_07's profile picture. Just a tech enthusiast

Manan Jain

@MananJain_07
n_zero_s's profile picture. ...

n0s

@n_zero_s
JamaLDriver1980's profile picture. Driver grabcar/gocar.saya duda anaknya empat.Dulu staf mualaf center masjid istiqlal,dipecat karena kasus agustus 2024..janda taaruf yuk.WA 0813 1412 4444

JamaLuLLaiLdriver

@JamaLDriver1980
0xadt204's profile picture.

0xadt204

@0xadt204
nirohfeld's profile picture. Head of Vulnerability Research @wiz_io | @Microsoft MVR (2021-2025) | Pwn2Own 2025 | @Forbes 30 Under 30 | Ask me anything about https://t.co/QfzcO03PpS

Nir Ohfeld

@nirohfeld
Flavio_Bsb's profile picture.

Flavio Oliveira

@Flavio_Bsb
Kaiinterminal's profile picture. root@lulzsec:~# ls -la /home/kai/ root@lulzsec:~# Security

Kai

@Kaiinterminal
elmehdimee's profile picture. bug bounty hunter, https://t.co/IgwNoFRWmO , https://t.co/0DPtWr7tZ8 , https://t.co/eG6Su8DLgb

El Mehdi

@elmehdimee
g0wricsMD's profile picture.

Gowrishankar

@g0wricsMD
nguyengiakhanh_'s profile picture.

Nguyễn Gia Khánh

@nguyengiakhanh_
HackerxTommy's profile picture. •HACKER •Security Resercher @Hacker0x01 & @Bugcrowd •Bug Bounty Hunter #Ittakesacrowd #Wearehackerone

Vishal Gupta 🇮🇳

@HackerxTommy
t4n3or4's profile picture.

Dũng Nguyễn Huy Vũ

@t4n3or4
JetfireMkii's profile picture.

JetFire

@JetfireMkii
vietrux's profile picture. Con chim non trên cành cây

VietTrung

@vietrux
bobbykiddie's profile picture.

Khánh Nguyễn

@bobbykiddie
DMakewea's profile picture.

Daniel

@DMakewea
AndresC64235186's profile picture.

Andres Chavarro

@AndresC64235186
Castlejons's profile picture. 0day exploits and offensive cyber security

Jon castle

@Castlejons
wtfbbqcat's profile picture. Cyber something something.

Jinfu

@wtfbbqcat
lsquare_14's profile picture. Lúa chín cúi đầu

LSQUARE

@lsquare_14
LeondreNg's profile picture. Interested in Cybersecurity, Backend web development

leondre_ng

@LeondreNg
Lzmthine's profile picture.

Minh Tien

@Lzmthine
HugebF6's profile picture. i hate computers.

hugh

@HugebF6
SankayMarc22830's profile picture.

GAMALIEL SANKAY TSHISWAKA MARCEL

@SankayMarc22830
cee_bam4141's profile picture.

CeeBam

@cee_bam4141
Aqas__'s profile picture.

aqas

@Aqas__
nemocyberworld's profile picture. Offensive Security | Exploit Dev | Malware Dev

Saide Hossain

@nemocyberworld
htthanh02's profile picture.

Hoang Tien Thanh

@htthanh02
TaquieddineA's profile picture. AI & Web App Security Enthusiast

Taquieddine 🇩🇿

@TaquieddineA
onsra_03's profile picture. | Security Researcher | Hunter at @SynackRedTeam | https://t.co/XCK0MWIVEC

Pham Ho Anh Dung

@onsra_03
exe_m3799's profile picture. APAC Land Reporter @JanesINTEL

SohiniM

@exe_m3799
p0ch_1's profile picture.

p0ch 1

@p0ch_1
rahul181540's profile picture. cricket is oxygen for me.

rahul

@rahul181540
ahmedcr1992's profile picture.

Udtedes no saben Perder

@ahmedcr1992
instababa1's profile picture.

insta baba

@instababa1
E0_0E101's profile picture.

HH1

@E0_0E101
d3nverNg's profile picture.

Denver Nguyễn

@d3nverNg

United States Trends

You might like

Something went wrong.


Something went wrong.