Lan Vu retweeted
Very powerful bug. In the past, we also submitted few one-shot to Chrome GPU via ANGLE ( but before 250k era 🥲).
This report may include the trick for escaping from the GPU to the CPU ( but i guess too easy for AI atm )
Looking forward the details when the bug is de-restricted.
Lan Vu retweeted
We’ve been through all kinds of situations: exploits failing, vendors turning off services during demos, patches being released the night before a demo, and more but we happily accepted and continue to play.
And if you don’t participate in the game, who cares about your opinion?
Lan Vu retweeted
Firefox x Mythos fixed 423 bugs in April. They released stable 150.0.2!
youtu.be/exkq427zKRU?si=VN6H… via @YouTube
Lan Vu retweeted
Despite 271 bugs massacred by Anthropic, our renderer rce and sbx escape alive and well ready unless there is sudden patch before p2o ( mean we dont have enough time for prepare new one ) - wish us luck!
blog.mozilla.org/en/privacy-…
Lan Vu retweeted
Have Anthropic killed all the Firefish?
0c10b84aa1e72c46319c9a6b4dff5801 : exploit_browser.html just in case patched before p2o 😂
Lan Vu retweeted
Technical details on exploiting Firefox 0day we found last year by AI-assisted fuzzing.
by @lanleft_
qriousec.github.io/post/cve-…
Lan Vu retweeted
Not a single LLM can correctly explain the root cause even given the crash poc of this bug, let alone talk about how to write the exploit code. Kudo @lanleft_ for her great works!
We may publish writeup when it no longer hot.
Lan Vu retweeted
Last month, I gave a talk at @POC_Crew about ATLANTIS and the tech behind our #AIxCC win.
We dove into competition details, using LLMs for deep bug discovery, and what's next for AI in security.
github.com/pr0cf5/talks/blob…
Lan Vu retweeted
A quick review theses Chrome libAngle issues found by Big Sleep likely from fuzzer output more than AI reasoning, 1 or 2 issues even not exploitable because of libc++ mitigation enabled by default in Chrome.
issuetracker.google.com/issu…
The fuzzer still producing many crashes:
issues.chromium.org/issues?q…
Lan Vu retweeted
If you like Chrome IPC shenanigans like this, you might also enjoy my talk from black hat 25: youtu.be/qhhJCLy0YBA?si=qLz2…
Whoah... $250000
(CVE-2025-4609, similar to CVE-2025-2783/412578726)[412578726][Mojo][IpczDriver]ipcz bug -> renderer duplicate browser process handle -> escape sbx is now open with PoC & exploit(success rate is nearly 70%-80%)
issues.chromium.org/issues/4…
issues.chromium.org/issues/4…
Lan Vu retweeted
We released our Fuzzilli-based V8 Sandbox fuzzer: github.com/googleprojectzero…
It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!
Lan Vu retweeted
Singapore - shout it out for Yuki Chen 🤩 !!! Bringing Day 1 of @offbyoneconf 2025 to a explosive end with 𝐀 𝐉𝐨𝐮𝐫𝐧𝐞𝐲 𝐢𝐧𝐭𝐨 𝐖𝐢𝐧𝐝𝐨𝐰𝐬 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐏𝐫𝐨𝐯𝐢𝐝𝐞𝐫 𝐈𝐧𝐭𝐞𝐫𝐟𝐚𝐜𝐞.
🙇🙇🙇
Lan Vu retweeted
A brief JavascriptCore RCE story by @lanleft_ and An Nguyễn
qriousec.github.io/post/jsc-…
Lan Vu retweeted
Our teammate @__suto has just pwned V8 JavaScript engine on Google's V8CTF version M120 using a 0-day exploit.
