Co-Founder of @TrapaSecurity and @PwnableTW MSRC Top 100 / ZDI Platinum / Samsung Mobile Security HoF Hunting bugs for fun
台灣
Joined January 2015
- Tweets2.6K
- Following1.2K
- Followers4.5K
- Likes11.9K
L4ys retweeted
my granny couldn't work out if she was affected by the eMudhra vulnerability, so I had the clanker build her a website
fixemudhra.com/
thought it might be useful for other people as well so sharing it here
Built on @Dennis__Jackson's work with just a tiny bit nicer UI
L4ys retweeted
Just dropped a new blog post! 🔥
blog.orange.tw/posts/2026-10…
L4ys retweeted
this blog shows some of the worst bugs claude found, including a zero-click rce on the linux networking stack that roots a server over the network with no creds or interaction, and tens of full rce chains in chrome (recording below is the one in the blog): anthropic.com/research/disco…
L4ys retweeted
i jailbroke the nintendo switch 2
so i modded cinnamoroll, peter griffin, hatsune miku, and more into Mario Kart World, a switch 2 exclusive
now watch my friends and i get cooked by bots
learn more and get the exploit pepsipu.com/blog/2026-10-swi…
L4ys retweeted
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.co…
L4ys retweeted
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors.
CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
L4ys retweeted
Ask @moyix anything about our Chrome full-chain exploit. 👀
He published the technical breakdown of how he did it (xbow.com/labs/research/zero-…)...but if you have questions or want to go deeper, drop your questions in this thread!
He’ll be answering them LIVE on Wednesday, 10/14, from 12–1 PM ET. 💚
L4ys retweeted
Agenda for OffensiveCon Tokyo 2026 is live!
Explore the talks and plan your schedule now:
offensivecon.jp/agenda/2026.…
#OffensiveCon #Tokyo
L4ys retweeted
DEVCORE CONFERENCE 2027 | CFP is open
#Redteam, #VulnerabilityDiscovery, #Physicalsecurity, firmware and hardware RE, #AI attack surfaces. Bring the research that starts from a hacker's view.
Deadline: Oct 11, 2026, 23:59 GMT+8
sessionize.com/devcoreconfer…
L4ys retweeted
Sharing my for keynote talk for Offbyone security conference #OB12026 : <A year of hacking with LLMs>
sites.google.com/site/zhinia…
L4ys retweeted
Faster than a speeding sloth, @dustin_childs breaks down another record-breaking #PatchTuesday release with over 970 CVEs from Microsoft and 172 from Adobe. 3 0-days. Read the details at zerodayinitiative.com/blog/2…
L4ys retweeted
Today, Project Zero is releasing MAccConc, a tool by @tehjh that enables deterministic testing of race conditions on Linux. It can be used for fuzzing, ad-hoc exploration, regression tests and more!
projectzero.google/2026/09/m…
L4ys retweeted
Today we published WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android.
We call you on WeChat and, without you answering or doing anything, take over your account within seconds. Then we use your phone to call your friends.
Story and demos: calif.io/research/weworm
