wgg (@__wgg__) profile picture

wgg

@__wgg__
Joined July 2026
  • Tweets3
  • Following21
  • Followers5
First time at OffensiveCon Tokyo, and it was an incredible experience! ​In "Breaking NTFS at Scale: From an Unmapped Attack Surface to SYSTEM," we showcased how we hunted down 43 CVEs in Windows NTFS and demonstrated how to exploit these types of vulnerabilities for LPE or RCE. ​We will be publishing more detailed technical write-ups and an extended paper soon.
offensivecon (@offensive_con) profile pictureoffensivecon
@offensive_conOct 27
Breaking NTFS at Scale: From an Unmapped Attack Surface to SYSTEM by @HototogisuTian and Gongming Wang
Image from offensivecon (@offensive_con)
2
27
777
This month, Microsoft’s @msftsecresponse fixed 80 CVEs discovered and reported by me and the outstanding collaborators on our team, including wgg, npc0vo, and 2st. MSRC’s response and remediation were remarkably swift. #bugbounty #cybersecurity #MSRC #security
Microsoft Security Response Center (@msftsecresponse) profile pictureMicrosoft Security Response Center
@msftsecresponseSep 8
Security updates for September are now available: msft.it/6018SZEg0. Alongside this month's release, we're expanding machine-readable Vulnerability Exploitability eXchange (VEX) coverage to all Microsoft-assigned CVEs, providing customers with more consistent, machine-readable security information to help understand exposure and prioritize risk. Learn more about this latest milestone in our transparency efforts: microsoft.com/en-us/msrc/blo…
Image from Microsoft Security Response Center (@msftsecresponse)
2
4
33
3,343
Diffract’s strong run continued into August. Building on its Q2 success—ranking #1 on the MSRC Windows leaderboard and #4 overall—Diffract saw another 16 Windows vulnerabilities it discovered fixed by Microsoft in August: • 8 elevation-of-privilege vulnerabilities • 5 information-disclosure vulnerabilities • 3 remote-code-execution vulnerabilities We’re continuing to advance Diffract and expand it into new domains and use cases. We’re also seeking collaboration opportunities—if you’re interested in working with us, please get in touch: diffract-ai.com/ #Windows #VulnerabilityResearch
Diffract-AI (@DiffractAI) profile pictureDiffract-AI
@DiffractAIAug 21
Diffract (developed by @HototogisuTian @2st___) is an AI vulnerability research agent that goes beyond LLMs—we focus more on the nature of bugs than on AI engineering. Q2 results: • 37 Microsoft acknowledged CVE • #1 on the MSRC Windows leaderboard • #4 overall on MSRC
1
5
672
Load more