Khoa Dinh
@_l0gg
Followers
2K
Following
409
Media
5
Statuses
66
Joined April 2021
Blog for ToolShell.Disclaimer: The content of this blog is provided for educational and informational purposes only. #SharePoint #ToolShell
10
82
248
CVE-2025-53770 requires authentication. They stated the attack vector incorrectly again. Blog may published later, but I’m not sure yet.
0
1
17
Blazing-fast image creation – using just your voice. Try Grok Imagine.
284
566
3K
Turn out CVE-2025-53770 is mine. I report it to MSRC after July patch released. @msftsecresponse say it OutofScope because I use the same deser payload at different endpoint which they weren’t aware of. I tried my best to mitigate the exploit and all I got is a thank, nice reward.
2
8
112
Viettel Threat Intelligence guideline to protect, prevention strategies, detection patterns and threat hunting techniques:.
🚨 Shocking impact from the SharePoint vulnerability we found at Pwn2Own! 😱.Despite our efforts to patch it 🤝, many systems are still at risk ⚠️. Secure yours now! 🔒 Details:
0
1
4
You also may want to read this.
While waiting for the Pwn2Own chain, you might want to read this. Disclaimer: This is a bug I discovered by accident, and already been resolved. I’m not sure which CVE or patch this maps to. If you know any information, please feel free to leave a comment.
1
0
3
Viettel Cyber Security Press Release for Customer alert, Latest research and Recommendations. Blog is comming.#SharePoint #ToolShell
0
4
26
Nice @pivik_ 🎉🎉.
[ZDI-25-600|CVE-2025-53028] (Pwn2Own) Oracle VirtualBox VMSVGA Out-Of-Bounds Write Local Privilege Escalation Vulnerability (CVSS 8.2; Credit: Viettel Cyber Security)
1
1
13
The bug in my previous blog is CVE-2024-38018 of @chudyPB 🫡. Really want to update the blog & tweet but I can't 😅.
zerodayinitiative.com
Microsoft SharePoint SPThemes Deserialization of Untrusted Data Remote Code Execution Vulnerability
Writeup of my SharePoint RCE: CVE-2024-38018. ZDI decided not to publish the blog and I didn't find time to write a new one 😅. Enjoy @_l0gg analysis!.
0
3
19
While waiting for the Pwn2Own chain, you might want to read this. Disclaimer: This is a bug I discovered by accident, and already been resolved. I’m not sure which CVE or patch this maps to. If you know any information, please feel free to leave a comment.
3
40
139
RT @codewhitesec: We have reproduced "ToolShell", the unauthenticated exploit chain for CVE-2025-49706 + CVE-2025-49704 used by @_l0gg to p….
0
161
0
FAQ: .- Why run mspaint? I can't be onsite, so the static payload can run on any OS. ysoserial require windows.- Why it take two attempt at Pwn2Own? At first attempt the command to run the exploit is missing the siteurl part :)).I'm writing the blog, this is it right now:
0
1
18
The SharePoint patch for Pwn2Own Berlin has been released - patch ASAP.The exploit need only one request💣.I’d name this bug ToolShell - ZDI did say the endpoint is ToolPane after all😅.#CVE_2025_49706 #CVE_2025_49704 #SharePoint #Pwn2Own
5
40
201
