Nguyen The Duc

@ducnt_

Just another web warrior | Security Researcher | Security Engineer | CTF player && | Bug bounty hunter

Hồ Chí Minh, Việt Nam  
ducnt.net
Joined February 2017
11 Photos and videos Photos and videos

Tweets

You blocked @ducnt_

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @ducnt_

  1. Pinned Tweet
    Jan 8

    My first `double kill` at : Kudos to WordPress security team with very quickly and awesome work 🥰

    1 reply 15 likes
    Undo
  2. Retweeted
    10 Jul 2018

    Neatly bypassing Content Security Policy. Why 'unsafe-inline' is almost always a full-fledged XSS.

    5 replies 130 retweets 253 likes
    Show this thread
    Show this thread
    Undo
  3. Retweeted
    Feb 6

    DOM Clobbering strikes back by

    2 replies 86 retweets 209 likes
    Undo
  4. Retweeted
    Feb 6

    Thanks to research, new stuff are being released for soon - as for the features, payload minimization, raw cmd command, and auto command encoding within JSON/XML messages are being released after the PR review by

    1 reply 33 retweets 110 likes
    Undo
  5. Retweeted
    Feb 5

    Nice by

    12 retweets 58 likes
    Undo
  6. Retweeted
    Feb 5

    Checkra1n for Windows first demo!!🔥🔥 Coming Soon!!

    85 replies 310 retweets 1,678 likes
    Show this thread
    Show this thread
    Undo
  7. Retweeted
    Feb 3

    Here's my write-up for ’s CTF challenge!

    5 replies 27 retweets 103 likes
    Undo
  8. Retweeted
    Feb 3

    CVE-2020-7471: SQLI in Django: django.contrib.postgres.aggregates.StringAgg aggregation function was subject to SQL injection, using a suitably crafted delimiter. FIX:

    54 retweets 128 likes
    Undo
  9. Retweeted
    Jan 31

    , , and I are starting a new security blog. In our first write-up, we will discuss the impact of "SameSite by default" and how it affects web app sec. Feel free to request future topics you would like us to cover.

    9 replies 203 retweets 404 likes
    Undo
  10. Retweeted
    Jan 30

    Someone dropped a PHP zero-day on GitHub. Talked to the PHP team last night. Bug requires local foothold to exploit, so not usable for remote attacks. Also, this is the second exploit for this "disable_functions bypass" in the last few months.

    5 replies 122 retweets 190 likes
    Undo
  11. Retweeted
    Jan 28

    .Net being open-source makes tracking these things cool. I just hope GitHub adds code navigation support for .net code soon as well. credit for the bug goes to of course.

    7 retweets 17 likes
    Undo
  12. Retweeted
    Jan 28

    Also for the iPhone 11 Pro Max, iOS 13.3.1 beta3 Jailbreak

    217 replies 616 retweets 2,566 likes
    Undo
  13. Retweeted
    Jan 24

    Here are my (updated) slides from for my talk "Owning The Cloud Through SSRF & PDF Generators" with Chris Holt from . Big thank you to , , , , , and !

    39 retweets 136 likes
    Undo
  14. Retweeted
    Jan 24

    RDP Vuln CVE-2020-0609 & CVE-2020-0610 RD Gateway PoC (DoS) by Scanner by

    94 retweets 197 likes
    Undo
  15. Retweeted
    Jan 22

    The Bezos forensic report is not very good. The forensic analysis should be done by who at least have the relevant experience. The MP4 file should contain the exploit (if it is CVE-2019-11931). The exploit trigger should be visible with ffmpeg

    13 replies 190 retweets 487 likes
    Show this thread
    Show this thread
    Undo
  16. Retweeted
    Jan 22

    This is a pretty good reminder that any invasive heuristics in the browser - be it XSS filters or privacy protections - often cause more problems than they address:

    3 replies 38 retweets 107 likes
    Undo
  17. Retweeted
    Jan 21

    Learn how an authenticated RCE vulnerability in < 5.2.4 allows attackers to bypass hardening mechanisms. Read more ->

    21 retweets 39 likes
    Undo
  18. Retweeted
    Jan 18

    Just published a blog post talking about some iOS kernel framebuffer research I’ve been looking at over the last couple weeks. Have a read if you’re interested :)

    4 replies 131 retweets 416 likes
    Show this thread
    Show this thread
    Undo
  19. Retweeted
    Jan 17

    RDP to RCE: When Fragmentation Goes Wrong AKA: What we know about CVE-2020-0609 and CVE-2020-0610.

    4 replies 293 retweets 585 likes
    Undo
  20. Retweeted
    Jan 16

    "CVE-2020-0601: the ChainOfFools attack explained with PoC"

    5 retweets 17 likes
    Undo
  21. Retweeted
    Jan 14

    CVE-2020-5504 SQLI in phpMyAdmin: A malicious user could inject custom SQL in place of their own username when creating queries to this page fix:

    2 replies 124 retweets 251 likes
    Undo

@ducnt_ hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·