wei @XiaoWei___ profile

wei

@XiaoWei___

Followers

2,352

Following

69

Media

2

Statuses

21

virtualization and webbrowser security researcher

People's Republic of China

Joined July 2018

Don't wanna be here? Send us removal request.

Explore tweets Explore followers Explore following

Explore trending content on Musk Viewer

النصر • 936025 Tweets

الاهلي • 873033 Tweets

Rogan • 275900 Tweets

Valencia • 220481 Tweets

Southport • 211226 Tweets

River • 188851 Tweets

#DANA • 104328 Tweets

Ellipse • 83335 Tweets

ESCUTE RESPIRA RELAXA • 70643 Tweets

PARABENS ZE LOVE • 65700 Tweets

Wikipedia • 63775 Tweets

SÃO PAULO TOMORROW • 59801 Tweets

رونالدو • 50605 Tweets

Teri Garr • 49502 Tweets

كاس الملك • 38947 Tweets

Adrián • 38210 Tweets

#GHLímite8 • 37384 Tweets

Maica • 29935 Tweets

Conmebol • 25058 Tweets

Mac mini • 23363 Tweets

Young Frankenstein • 21825 Tweets

Concord • 20801 Tweets

AMANDA E BEEP SAUDE • 20188 Tweets

#KamalaDefendsDemocracy • 19840 Tweets

夫婦別姓勧告 • 18058 Tweets

Nikki Haley • 16915 Tweets

Flacco • 15616 Tweets

#KohLanta • 15415 Tweets

内政干渉 • 14401 Tweets

Copa Chile

Mr. Mom

Quevedo

Maxime

週の真ん中

バンドトリオ

Centenario

国連脱退

Cam Robinson

Rempe

Ashanti

Fonseca

初恋の日

Jamo

Magallanes

Mi Argentina

Ruglio

大リーグWSの放送原因

フジの日本シリーズ取材パス没収

Anthony Edwards

#لبيه_سمو_الامير

Last Seen Profiles

@Atomic_BLastiod

@SBK_analysis

@kiffgeraet

@turk_ifsa2019

@camilo_baquero

@CSDMensBBall

@GregTosto

@jdooley_clt

@Gudocccping

@ALCOfilters

@1Trumpfan1020

@chouchou_niania

@Kirkwood_Five

@DukeMBB

@ShaboozeysJeans

@tinabrown980

@Pacbabyyyy

@harururu0617

@_ketumi

@MaedBlan

wei

@XiaoWei___

3 months

MSRC fixed a RCE bug in TCPIP module. I found the bug several months ago. Its score is 9.8 and exploitation is more likely. Please apply the patch immediately.

24

199

837

wei

@XiaoWei___

5 years

This bug can not only leak info but also lead to vm escape. I used it in tianfu cup 2018.

ZDI-19-423

(Pwn2Own) Oracle VirtualBox OHCI Integer Overflow Information Disclosure Vulnerability

www.zerodayinitiative.com

0

21

81

wei

@XiaoWei___

6 months

msrc confirmed a critical rce bug in WIP I reported last month.The bug could be triggered through network and affects default install(no additional service need to enable)and is more likely exploitable.

3

78

wei

@XiaoWei___

5 months

@guhe120 Yuki shared some attack surface in his blackhat presentation. I followed his step and found an out of bound write bug in the wifi driver.

6

46

wei

@XiaoWei___

3 months

@IIlIIlIIIII @daveaitel The bug triggers before fw handling the packet.

2

4

32

wei

@XiaoWei___

3 months

Glad to progress with my friends.I got #2 this time.Thanks msrc and my friends.

Security Response

@msftsecresponse

3 months

The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers by discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure. Today, we are excited to recognize this year’s

3

23

86

3

0

21

wei

@XiaoWei___

3 months

@foxtrot_0x4fult Considering its harm, I will not disclose more details in the short term.

2

21

wei

@XiaoWei___

4 years

@Synacktiv @soaphornseuo @BrunoPujos @OnlyTheDuck @ekoparty I have this bug for several years. It is a good bug.I have a very stable exploit for it.

0

1

8

wei

@XiaoWei___

4 months

@f4rmpoet @vanhoefm well done.But this bug could be triggered after association and before handshake have finished.On the moment data packet is not encrypted.This means that there is no need for attacker to join the network.attacker just do a deauth attack first and then trigger the bug.

1

6

wei

@XiaoWei___

5 years

@thezdi @abdhariri @fluoroacetate @abdhariri @fluoroacetate It seems that the bug can not be triggered with default configuration in vmware workstation. There are a usb hub devive and a hid device with default config. In my debugging,they don't support bulk endpoints. Did i do anything wrong?

0

3

wei

@XiaoWei___

5 years

@_nafod haha,I have made a ckeck.If host have a bluetooth and it's turned on,then virtual bluetooth will be a default device.

0

3

wei

@XiaoWei___

5 years

@_nafod It seems that virtual bluetooth is not a deafault device.