hungtt28 @hungtt28

Independent bug hunter Joined January 2015

Tweets

667
Followers

1K
Following

831
Likes

2K

kqx @kqx_io

2 weeks ago

Pwning V8CTF with a 0day in Chrome thanks to Phi untagging. Read here: kqx.io/post/cve-2026-…

3 33 203 15K 84

View Details

I’ve tried various agent pipelines, and here is one of them. It found five type-confusion bugs in V8 Wasm: three under non-default flags and two in DrumBrake/MS Edge. The repo includes all the bugs in detail, along with a README file that explains how the pipeline works, the prompts used, and many of the genomes it generated. Since the README is enough to let Claude vibe-code it, I won’t upload my messy and embarrassing code. Have fun :) github.com/qriousec/colon…

4 43 165 22K 138

View Details

Paolo Stagno (VoidSec) @Void_Sec

4 weeks ago

I originally prepared this bug for Pwn2Own Berlin. A few days before the contest, a CVE got assigned. So, here is my technical analysis and exploitation strategy for CVE-2026-40369: a 12-byte kernel increment, exploitable both as an LPE and SBX. voidsec.com/cve-2026-40369…

1 61 207 16K 83

View Details

Ori Nimron @orinimron123

a month ago

@M4x_1997 4/4: Last but not least CVE-2026-40369 - Windows Kernel Arbitrary Increment primitive reachable from any browser sandbox renderer process This one was rejected from Pwn2Own and closed anyway yesterday :( My exploit is here - blogpost will be soon: github.com/orinimron123/C…

3 20 50 23K 24

View Details

stratan @5tratan

a month ago

What The Claude: Browser Edition, episode 2. This time: Bug 2024918. A phi node, SpiderMonkey's JIT pipeline, Wasm GC scalar replacement, escape analysis, and one wrong equality check. Let’s dive in. github.com/str8outtaheap/…

0 11 44 4K 29

View Details

Jack Ren @bjrjk

5 months ago

A carefully structured, tiered root cause analysis for CVE-2025-43529 (JSC UAF). Spent quite some time refining the structure to make the reasoning explicit and readable. Shoutout to @jir4vv1t for his detailed analysis and exploit. github.com/bjrjk/CVE-2025…

2 32 133 12K 68

View Details

jir4vv1t @jir4vv1t

5 months ago

iOS 26.1 Safari StoreBarrierInsertionPhase missing Upsilon escape to uaf proof-of-concept github.com/jir4vv1t/CVE-2…

2 18 66 5K 34

View Details

littlelailo @littlelailo

2 months ago

Had a lot of fun reversing Coruna over the last couple weeks and decided it would be worth to write it all up before I forget - so enjoy :) littlelailo.github.io/writeups/corun…

4 89 273 51K 169

View Details

starlabs @starlabs_sg

3 months ago

Our newest team member @streypaws just dropped his first blog post! He peered into CVE-2026-0899, from patch to arbitrary r/w primitives No, it is not April Fool's joke from us starlabs.sg/blog/2026/04-c…

3 33 165 11K 66

View Details

SpecterOps @SpecterOps

3 months ago

Stop asking LLMs to “find vulns.” Start using them to understand code. @Sw4mp_f0x walks through using Claude Code as a force multiplier in app assessments - faster analysis, fewer false positives, better outcomes. Check it out: ghst.ly/4rA3uJd

3 167 829 51K 818

View Details

Mr. OS @ksg93rd

3 months ago

Reverse engineering Claude's CVE-2026-2796 exploit red.anthropic.com/2026/exploit/

3 65 408 35K 351

View Details

Dmitry Vyukov @dvyukov

4 months ago

syzkaller/syzbot now has AI agentic framework for kernel bug fix generation, bug assessment, security triage, POC generation, etc: groups.google.com/g/syzkaller/c/… Includes set of tools to build kernels, navigate/edit source, test reproducers, etc. Contributions/research are welcome.

1 39 126 14K 60

View Details

Ben Visness @its_bvisness

8 months ago

Read the full article here: spidermonkey.dev/blog/2025/10/2…

6 12 97 5K 98

View Details

Security Bug Aggregator @BugsAggregator

5 months ago

[452605804][reward: $20000] V8 Sandbox Bypass: Wasm streaming compilation cache confusion via "double streaming" crbug.com/452605804

1 5 50 4K 16

View Details

Security Bug Aggregator @BugsAggregator

5 months ago

[454485895][reward: $50000] Incorrect Optimization of ArrayConstructor by Maglev Leads to Creation of Malformed JSArray Objects crbug.com/454485895

0 10 83 5K 42

View Details

Boris Cherny @bcherny

5 months ago

I'm Boris and I created Claude Code. I wanted to quickly share a few tips for using Claude Code, sourced directly from the Claude Code team. The way the team uses Claude is different than how I use it. Remember: there is no one right way to use Claude Code -- everyones' setup is different. You should experiment to see what works for you!