Mai Xuan Cuong @cuongmx
Joined August 2011-
Tweets73
-
Followers123
-
Following148
-
Likes99
Blog for ToolShell Disclaimer: The content of this blog is provided for educational and informational purposes only. blog.viettelcybersecurity.com/sharepoint-too… #SharePoint #ToolShell
🚨 Shocking impact from the SharePoint vulnerability we found at Pwn2Own! 😱 Despite our efforts to patch it 🤝, many systems are still at risk ⚠️. Secure yours now! 🔒 Details: blog.viettelcybersecurity.com/toolshell-a-cr…
That wraps up Day 1 of #Pwn2Own Automotive 2025! We awarded $382,750 for 16 unique 0-days. The fuzzware.io team is current in the lead for Master of Pwn, but @SinSinology is right on their heels. Stay tuned tomorrow for more results and surprises. #P2OAuto
Viettel Cyber Security is a member of Viettel Group from Vietnam 🇻🇳 🇻🇳🇻🇳 Besides being Master of Pwn, we also provide many cybersecurity solutions and services: SOC,TI, pentest, redteam,... We're seeking global partners and business opportunities. More: viettelcybersecurity.com
First blood for our campaign, come on!
Success! Team Viettel (@hoangnx99, @vudq16, @biennd279, @_q5ca from @vcslab) were able to execute a single-bug attack against the Xiaomi 13 Pro. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own
Now we are back with 2 entries. Come on! zerodayinitiative.com/blog/2023/3/21…
Congrats @vcslab
At the end of Day 3 of #P2OToronto here's the current leaderboard. While DEVCORE is in the driver's seat - there is still a theoretical possibility that another team can still take a share of the lead. Let's see what our final day brings us! #Pwn2Own
We have another full win entry. Congrats the team. Hope the last our SOHO entry got lucky 🔥🔥🔥
On the first win of Day 3 of #P2OToronto, @biennd279 and @rskvp93 from Team Viettel (@vcslab) used a command injection on a WD NAS to help add a little extra holiday decoration to the venue! This nets the team another $20K and 4 MoP points! #Pwn2Own
First win from our team
@hoangnx99, @KmaHaToan, @QuangHV99 from @vcslab achieves a 2-bug successful attack at #P2OToronto. #Pwn2Own
We weren't lucky to participate in Pwn2Own Scada this year for target Inductive Automation Ignition support.inductiveautomation.com/hc/en-us/artic…
Our teammate @rskvp93 shares the exploit chain for Pwn2Own 2021 Microsoft Exchange. Two of bugs are sadly duplicated. But the third bug will include a technique using export and import EWS api to change a secret property of a mail item. blog.viettelcybersecurity.com/pwn2own-2021-m…
Something about CVE-2022-1040 blog.viettelcybersecurity.com/cve-2022-1040-…
An authentication bypass (and rce in admin interface) in Sophos XG Firewall. This bug public a long time ago but we checked that more than thousand instances still vulnerable. Please upgrade your instance ASAP.
Something about CVE-2022-1040 blog.viettelcybersecurity.com/cve-2022-1040-…
Here we go! This season #Pwn2Own, our team members @nghiadt1098 @namnp5984 @vinhthp1712 will attempt target Windows 11 on May 19, 20. 💪Good luck! zerodayinitiative.com/blog/2022/5/17…
@AnnaViolet20 Nice work @AnnaViolet20 but you should ask our teammate before public the POC, it's not fair!
Wow 🤩
Finally, our teammates @hoangnx99 and @_q5ca got pwn F5 Big-IP CVE-2022-1338. We didn't succeed with the http smuggling technique to Jetty in a few days but in the end, we found the magic thing. That's so tricky.🔥🔥🔥
✅ We have just done a big update in RequestBin with many new features. "Support both DNS and HTTP on an unique ID" is one of there. 👉More details: requestbin.net/post/whats-new…
Our team member @_l0gg published the analysis of CVE-2022-0540 authentication bypass in Jira Seraph with some impacted plugins. Sadly he couldn't have his reports accepted for some bug bounty programs. blog.viettelcybersecurity.com/cve-2022-0540-…
My teammate share a new xs-leak technique: cross-domain leakage using HTTP/1 connection limit. My teammate used 6 parallel requests to guess the load time of a cross-domain request. Detail in here: blog.viettelcybersecurity.com/searching-agai…
henry @nguyen_duy_hao
24 Followers 198 Following
dcduc @dinhcduc16
28 Followers 660 Following 📌 Penetration Tester at @ViettelCyberSec | 🚩 CTF with @1337yogurt
Mr. Anthony 安東尼 @darkfloyd1014
3K Followers 5K Following Director @vxresearch | @defcon Singapore, @blackhatevents Asia & USA Review Board | Love animals, retro game & browser bug hunting
Cyber Threat @vcs_cyberthreat
2 Followers 238 Following
Hanh @h45h9r11n
6 Followers 135 Following
Quang @QuangHV311
1 Followers 182 Following
Dung Duong @dungdd3832
28 Followers 856 Following
Mo0n Sha𝄞ow @null001__
41 Followers 3K Following
Hoàng Vĩnh Quang @QuangHV99
35 Followers 104 Following
Lan Vu 🇻🇳 @lanleft_
2K Followers 498 Following she/her | coffee delivery at Qrious Secure @qriousec |
Red Perfect @redperfect1847
30 Followers 2K Following
MinhCuong @Nobey98
42 Followers 155 Following
Trần Đức Anh @kmaron1n
18 Followers 456 Following
T4nGG @t4n_99
2 Followers 412 Following
Minh Nguyen @minhnt311
21 Followers 371 Following
Niv Levy 🇮🇱 @restr1ct3d
6K Followers 4K Following Penetration Testing Engineer / Bug Bounty Hunter / OSCP, OSWE, GCPN
clear clear @ClaerClear
18 Followers 578 Following
Nguyễn Hoàng Thố... @nhthongdfvn
79 Followers 856 Following
RequestBin @RequestbinNet
9 Followers 8 Following The Ultimate HTTP & DNS Testing Platform since 2018
AxN788CN @TranTuan3042022
0 Followers 4K Following
msongd @msongd
11 Followers 126 Following
Tuan Anh Nguyen⚡️... @haxor31337
16K Followers 2K Following 30 y/o Bug Bounty Hunter and Red Team Lead at Viettel Cyber Security. Brand Ambassador @Hacker0x01 - Researcher Spotlight @Bugcrowd
Nguyễn Đình Biể... @biennd279
356 Followers 198 Following CTF player (aka d3s34) at hsvcs. CSSLP - Application Security Engineering (aka biennd4) at Viettel Cyber Security.
Quốc Nguyễn Minh @QuocNguyen2098
64 Followers 192 Following Nothing here ~_~ Just another account twitter Or subscribe me in youtube for some thing: https://t.co/MSaObRpIVP
Dinh Hoang @hir0ot
428 Followers 377 Following
Duong Khanh Son @sondk99
8 Followers 167 Following
Hai Tung @tacbliw
640 Followers 1K Following Security Researcher at @vcslab | CTF player (pwn) of @u0Kplusplus
Nguyen Xuan Hoang @hoangnx99
701 Followers 130 Following Security Researcher at @vcslab Chief Finance Officer of @u0Kplusplus
VCSLab @vcslab
3K Followers 27 Following This is the Twitter channel of VCSLab - the research team of Viettel Cyber Security
Dau Gau @daugau_9x
12 Followers 134 Following
Nguyen Cong Anh @anhnc282
64 Followers 1K Following
ThuyLee @thuylee188
10 Followers 161 Following
Đỗ Minh Tuấn @tuanit96
395 Followers 163 Following Pwnable warrior, web ninja, CTF - scoreboard refresher, ... at BabyPhD
羅生門 @jookermoon
402 Followers 5K Following
LeakIX @leak_ix
7K Followers 239 Following Provide comprehensive visibility into internet-facing assets. Looking for vulnerabilities and misconfigurations 24/7 since 2020. https://t.co/MEjkffN1xg
Khang Phan @pivik_
421 Followers 183 Following
Khoa Dinh @_l0gg
2K Followers 117 Following
Dung Duong @dungdd3832
28 Followers 856 Following
Lan Vu 🇻🇳 @lanleft_
2K Followers 498 Following she/her | coffee delivery at Qrious Secure @qriousec |
Hoàng Vĩnh Quang @QuangHV99
35 Followers 104 Following
DC | David Lee @dccybersec
12K Followers 200 Following Motorcycles & Cybersecurity | Founder of @saferinternetpr
publiclyDisclosed @disclosedh1
68K Followers 2 Following This is an unofficial HackerOne public disclosure watcher who keeps you up to date about the recently disclosed bugs. By @NOBBD
Jessie Ho @j3ssie
5K Followers 1K Following A passionate security engineer working on improving security automation with @OsmedeusEngine and @Vigolium
RequestBin @RequestbinNet
9 Followers 8 Following The Ultimate HTTP & DNS Testing Platform since 2018
Toan Nguyen @toannc_123
176 Followers 167 Following Penetration Tester, Cybersecurity Researcher and Bug Bounty Hunter.
u0K++ @u0Kplusplus
228 Followers 0 Following
Nguyen The Duc @ducnt_
3K Followers 392 Following Just another web warrior ⚔️ Security Researcher ۞ Principal Security Engineer @Verichains ۞ Pwn2Own 2023 ۞@vnsec squad ۞ 💰https://t.co/wuyz6IfAbA ۞ nano 💻
Nguyễn Hùng @tigerpuma90
45 Followers 556 Following
Hai Tung @tacbliw
640 Followers 1K Following Security Researcher at @vcslab | CTF player (pwn) of @u0Kplusplus
Duong Khanh Son @sondk99
8 Followers 167 Following
Markus Wulftange @mwulftange
3K Followers 207 Following Principal Security Researcher and Pâtissier at @codewhitesec
An Trinh @aphtrinh
1K Followers 281 Following
LunaSec (@lunasec@inf... @LunaSecIO
3K Followers 175 Following Want to network with other InfoSec professionals? Come join our community on Discord! https://t.co/NfFVJREjqo
Quốc Nguyễn Minh @QuocNguyen2098
64 Followers 192 Following Nothing here ~_~ Just another account twitter Or subscribe me in youtube for some thing: https://t.co/MSaObRpIVP
Yuki Chen @guhe120
10K Followers 280 Following 古河, Indepent security researcher, Bug bounty, ACG Otaku, Pwn2Own 15/16/17, PwnFest16,TianfuCup 18/19/20, 5 times MSRC MVR yearly Top 1. Got two pwnie awards.
KunlunLab @KunlunLab
2K Followers 88 Following Kunlun Lab from CyberKunlun, Vulnerability Research & Protection Solutions
TrendAI Zero Day Init... @thezdi
89K Followers 16 Following TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Nguyễn Đình Biể... @biennd279
356 Followers 198 Following CTF player (aka d3s34) at hsvcs. CSSLP - Application Security Engineering (aka biennd4) at Viettel Cyber Security.
Intigriti @intigriti
210K Followers 667 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
bugcrowd @Bugcrowd
199K Followers 6K Following The leading provider of crowdsourced cybersecurity solutions purpose-built to secure the digitally connected world...Unleash Ingenuity™
Thanh Nguyen @redragonvn
3K Followers 614 Following Founder at @Verichains and @vnsec, ex-CPU hacker/security architect at @Intel, hacker at @hackerschoice
NCSC Vietnam @NcscVietnam
702 Followers 82 Following Official Twitter Page of the Vietnam National Cyber Security Center. Explore more information and our cyber safety tools & services at https://t.co/eurrDWuR3V.
Bien 🇻🇳 @bienpnn
5K Followers 613 Following A weeb that loves crashing software | @qriousec & @seasecresponse & @ProjectSEKAIctf | アイマス最高 | @rinka_linca 推し
Tuan Anh Nguyen⚡️... @haxor31337
16K Followers 2K Following 30 y/o Bug Bounty Hunter and Red Team Lead at Viettel Cyber Security. Brand Ambassador @Hacker0x01 - Researcher Spotlight @Bugcrowd
Pham Khanh @rskvp93
2K Followers 373 Following Security Engineer at @calif_io. Winner of Pwn2own Vancouver 2021, Torento 2022, Vancouver 2023. MSRC top 100 2019, 2020, 2021.























