@trichimtrich

Cybersec @Seasecresponse @qriousec @vnsec

Joined March 2014
  • Tweets54
  • Following630
  • Followers1.2K
i did it again 🙏🙏
TrendAI Zero Day Initiative
@thezdiMay 16
Mind blown alert 🤯! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG (@starlabs_sg) used a Memory Corruption bug to exploit VMware ESXi with the Cross-tenant Code Execution add-on, earning a sweeeeeet $200,000 and 20 Master of Pwn points. Full win let's go! #Pwn2Own #P2OBerlin
18
20
441
23,791
As a team that has participated in Pwn2Own twice every year since 2020, We’d like to say this clearly: getting rejected is just another part of the game. Calling player to "revenge” and releasing 0-day exploits is irresponsible and harmful.
4
13
1
124
11,845
Despite 271 bugs massacred by Anthropic, our renderer rce and sbx escape alive and well ready unless there is sudden patch before p2o ( mean we dont have enough time for prepare new one ) - wish us luck! blog.mozilla.org/en/privacy-…
15
50
9
369
77,475
Technical details on exploiting Firefox 0day we found last year by AI-assisted fuzzing. by @lanleft_ qriousec.github.io/post/cve-…

CVE-2025-14325: SpiderMonkey Type Confusion in Baseline JIT Inline Cache

This image was created by Suto that captures the challenge of finding the right path. It is a process of constant testing, failing, and learning until we eventually find the way out Last year, we...

qriousec.github.io
Qrious Secure@qriousec4 Nov 2025
Double Kill 🤪 Mozilla team working on the patch, we developing the exploit, no drama needed 😎
33
148
20,306
Check out our newest blog about how we took advantage of a WebGPU feature to turn an integer underflow bug into an arbitrary read in Chrome’s WebGPU. This bug was fixed by Google long ago, but our ticket is still restricted. qriousec.github.io/post/oob-… by @lanleft_ + @__suto

Out-of-bound read in ANGLE CopyNativeVertexData from Compromised Renderer

Introduction Back in the beginning of the year 2024, we started our project on ANGLE, it is a chromium graphic library, handling rendering stuff on chrome process. Fortunately, our team found some of...

qriousec.github.io
2
35
2
157
23,122
Theses findings found by our AI Agent. Probably some writeup when more complex issue got destricted. github.com/qriousec/web3_fin…

GitHub - qriousec/web3_finding

Contribute to qriousec/web3_finding development by creating an account on GitHub.

github.com
9
31
7,443
A brief JavascriptCore RCE story by @lanleft_ and An Nguyễn qriousec.github.io/post/jsc-…

A Brief JavaScriptCore RCE Story

Introduction The vulnerability introduced in commit 053d9a84 is a trivial uninitialized memory issue, easy to catch by simple unit tests. At the time of discovering the bug, we believed that this...

qriousec.github.io
56
1
224
20,752
We reported a total of 51 bugs (low to critical impact) for IoT devices used by Singapore Smart City and Smart Building. event.ntu.edu.sg/SPIRITCYBER…
1
3
1
25
5,317
hey #googlectf folks please give us a v8 sbx challenge so we can make our recent submitted 0day useful one last time
1
4
53
11,567
Additionally, last year our teammate @bienpnn also pwned Linux kernel on kernelCTF with a 0-day, that has been fixed and assigned CVE-2023-4244. So far, we have successfully pwned 2/3 liveCTF hosted by Google. We are going to aim for kvmCTF in the future.
4
36
4,714
Our teammate @__suto has just pwned V8 JavaScript engine on Google's V8CTF version M120 using a 0-day exploit.
3
38
5,137
Here are the final Master of Pwn standings. Congrats to @Synacktiv on claiming the title. It was a close race, but they pull through.
2
36
5
124
Confirmed! trichmitrich used nearly all the time on the clock, but his command injection bug is unique. His takeover of the Cisco RV340 via the WAN interface earns him $30,000 and 3 Master of Pwn points. #Pwn2Own #P2OAustin
7
37
#Pwn2Own After Dark is underway with trichimtrich targeting the LAN interface of the NETGEAR R6700v3. The first attempt was successful, and the team now moves to the disclosure room for verification.
2
6
1
30
Confirmed! @bienpnn's last attempt of day 1 was successful. He used a single OOB Read bug to take over the TP-Link AC1750 via the LAN interface. This unique bug chain earns him another $5,000 and 1 Master of Pwn point. #Pwn2Own #P2OAustin
7
1
17
Confirmed! @bienpnn from Team Orca of Sea Security used a three-bug chain, including an auth bypass and a command injection, to take over the LAN interface of the Cisco RV340. He earns $15,000 and 2 Master of Pwn points. His contest total so far is #45,000. #Pwn2Own #P2OAustin
3
1
16
Success! In the 2nd demonstration of the contest, @bienpnn from Team Orca of Sea Security (security.sea.com) was able to get a root shell on the WAN interface of the Cisco RV340 router. He's off to the disclosure call to verify the details. #Pwn2Own Austin #P2OAustin
6
2
24
Another confirmation! trichimtrich used an OOB Read to get a root shell via the LAN interface of the #TP-Link AC1750 Smart Wi-Fi router. That earns him $5,000 and 1 Master of Pwn point. #Pwn2Own #P2OAustin
4
14
Load more