Qrious Secure @qriousec profile

Qrious Secure

@qriousec

Followers

881

Following

3

Statuses

13

Debugger is main vehicle to satisfy our boundless Qriousity. A non-profit 🇻🇳 hackers' club driven by passion.

Joined November 2022

Don't wanna be here? Send us removal request.

Qrious Secure

@qriousec

10 days

Our V8 sandbox escape found by @__suto and @lanleft_ has been derestricted

0

30

139

Qrious Secure

@qriousec

1 month

A brief JavascriptCore RCE story by @lanleft_ and An Nguyễn

0

55

210

Qrious Secure

@qriousec

2 months

Santa gave us freshly new JSC 0day ✌️

2

4

95

Qrious Secure

@qriousec

3 months

1

21

Qrious Secure

@qriousec

3 months

RT @bienpnn: This is the report of the Windows LPE bug that I used in TyphoonPwn this year.

0

8

0

Qrious Secure

@qriousec

7 months

After CVE-2024-0223, we reported the bypass and it was assigned CVE-2024-3516: Months later, someone else reported another variant and Google decided to give up and allow Chrome's GPU to crash instead of fixing the issue.

1

3

17

Qrious Secure

@qriousec

8 months

@vie_pls @_tsuro how abt drop a hellfire 1k pts v8 sbx latest commit 😏

2

0

1

Qrious Secure

@qriousec

8 months

@_tsuro

1

0

10

Qrious Secure

@qriousec

10 months

CVE-2024-0517 - Chrome V8 maglev compiler optimization RCE vulnerability, has been derestricted (along with exploit code). This was reported by our teammate @__suto

1

25

89

Qrious Secure

@qriousec

1 year

RT @__suto: I successfully exploited #V8ctf using CVE-2024-0517, writeup and exploit will be published later.

0

13

0

Qrious Secure

@qriousec

1 year

Additionally, last year our teammate @bienpnn also pwned Linux kernel on kernelCTF with a 0-day, that has been fixed and assigned CVE-2023-4244. So far, we have successfully pwned 2/3 liveCTF hosted by Google. We are going to aim for kvmCTF in the future.

0

5

34

Qrious Secure

@qriousec

1 year

Our teammate @__suto has just pwned V8 JavaScript engine on Google's V8CTF version M120 using a 0-day exploit.

0

3

38