Researcher at @TrapaSecurity Member of chroot, Member of HITCON and 217 ctf team. Focus on mobile and IoT security.

Taiwan
Joined July 2011
Jeffxx retweeted
I’ll be at CODE BLUE tomorrow. Check out our Cyber Range Exercise if you’re interested, and feel free to come say hi if you want to chat codeblue.jp/en/program/conte…
2
25
2,069
[HITCON Cyber Range 2024! Registration Countdown: 5 Days Left] ✨Attention cybersecurity elites! HITCON Cyber Range 2024 registration closes in 5 days!✨ Are you ready for Taiwan's most extreme blue team security challenge? Don't miss out on this year's event designed for corporate blue team experts — HITCON Cyber Range! 📊Highlights of this competition: 🔵Opportunity to challenge for the title of strongest blue team 🟠Immersive experience in real enterprise attack and defense scenarios 🟣Compete head-to-head with top companies 🟡Master advanced security investigation techniques, lead the field 🟢Network with industry elites, broaden your horizons This competition offers an excellent opportunity to enhance your company's cybersecurity capabilities and unleash your team's potential! The ultimate challenge to forge an unbreakable blue team! Are you ready to accept the challenge? Register now and become a leader in cybersecurity defense! 📅 Event Schedule: 🚩 Qualifier Round (Online): July 26, 2024 (Friday) 10:00 - 23:59 (GMT+8), a total of 14 hours 🏆 Final Round (Onsite): October 30, 2024 (Wednesday) 10:00 - 16:00 (GMT+8), a total of 6 hours 🛎️ Registration Information: 🔸 Register here: hitcon.kktix.cc/events/hitco… 🔹 Qualifying Round Registration Deadline: July 17, 2024 (Wednesday) , 23:59 (GMT+8) 🔸 Qualifications Review Notification Date: July 19, 2024 (Friday) 🔹 Contact Email: [email protected] #HITCON #CyberRange #CybersecurityCompetition #BlueTeam #CyberSecurity
3
4
1,148
Demo video out for Zyxel VPN Pre-Auth RCE (CVE-2023-28771) No extra config or web access needed, exploitable via WAN. More details will be released, patch your device ASAP. youtu.be/R68QJIRSwU0
2
24
2
37
8,778
We have reported a critical Pre-Auth RCE in Zyxel VPN Firewall (CVE-2023-28771) The device can be exploited as soon as it connects to the internet, without any additional configuration. Patch your Zyxel devices as soon as possible. thehackernews.com/2023/04/zy…
2
45
7
93
88,326
Q: How long do you take to find the vulnerbilities? atdog: couple of minutes
Confirmed! The team of @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity used a command injection bug to take over the #NETGEAR router and get root. They win $5,000 and 1 Master of Pwn point.
12
Lucky draw!
Success! The team of @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity were able to get a root shell on the Western Digital NAS. They head off to the disclosure room to provide all of the details.
3
The next attempt will see @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity target the Western Digital My Cloud Pro. They start at 1200 Eastern (UTC-4). It's the 1st NAS entry in #Pwn2Own history! #P2OTokyo
1
9
1
25
Incredible backdoor & guessing CTF
1
3
18
Here are my slides for my #BlackHat Talk: Breaking Samsung's Root of Trust: Exploiting Samsung S10 Secure Boot github.com/TrapaSecurity/pre… #BlackHat2020
2
115
3
275
Begin to use twitter haha!
2
2