mehqq_ Profile Banner
meh Profile
meh

@mehqq_

Followers
5K
Following
272
Media
0
Statuses
224

Pwning in HITCON; Security Researcher of DEVCORE

Taiwan
Joined October 2016
Don't wanna be here? Send us removal request.
@mehqq_
meh
@mehqq_
4 years
RT @thezdi: A #Pwn2Own #AfterDark success! The #Devcore team used a code injection bug to take over the Lexmark MC3224i printer. They win $….
0
21
0
@mehqq_
meh
@mehqq_
4 years
RT @orange_8361: I know there are lots of people waiting for the recent Microsoft Exchange pre-auth RCE on our side. This is a short adviso….
0
434
0
@mehqq_
meh
@mehqq_
5 years
RT @thezdi: Confirmed! The DEVCORE team of @orange_8361, @scwuaptx and @mehqq_ used an elegant heap overflow to get code execution on the #….
0
24
0
@mehqq_
meh
@mehqq_
5 years
RT @orange_8361: How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM (slides inside) #HITCON.
0
1K
0
@mehqq_
meh
@mehqq_
6 years
RT @samwcyo: New writeup, one of my favorite bugs 🤠 -. Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty. ht….
0
477
0
@mehqq_
meh
@mehqq_
6 years
RT @hugeh0ge: Getting Arbitrary Code Execution from fopen's 2nd Argument.
0
136
0
@mehqq_
meh
@mehqq_
6 years
RT @orange_8361: The last part of our Attacking SSL VPN series is out - The Golden Pulse Secure SSL VPN RCE Chain, with Twitter as Case Stu….
0
413
0
@mehqq_
meh
@mehqq_
6 years
RT @disclosedh1: Twitter disclosed a bug submitted by orange: - Bounty: $20,160 #hackerone #bugbounty https://t.co/….
0
130
0
@mehqq_
meh
@mehqq_
6 years
RT @orange_8361: Just drop the RCEs, slides(@BlackHatEvents will fix soon) and blog of @mehqq_ and me's #BHUSA and #DEFCON talk - Infiltrat….
0
420
0
@mehqq_
meh
@mehqq_
6 years
RT @pwnabletw: See you in DEFCON
Tweet media one
0
13
0
@mehqq_
meh
@mehqq_
6 years
RT @orange_8361: Oh my god! Best server side bug of @PwnieAwards 2019, with our CTF and DEVCORE pwning queen @mehqq_
Tweet media one
Tweet media two
Tweet media three
Tweet media four
0
52
0
@mehqq_
meh
@mehqq_
6 years
RT @orange_8361: Appetizer for our #BHUSA and #DEFCON talk ! @mehqq_ and I will cover more hard-core exploitations, crazy bugs chains and S….
0
292
0
@mehqq_
meh
@mehqq_
6 years
RT @orange_8361: @mehqq_ and I will present at #RomHack2019 this year! See you there :P
0
7
0
@mehqq_
meh
@mehqq_
6 years
RT @scwuaptx: Here is my challenge in WCTF 2019. Hope everyone can learn more windows heap from this challenge. Ab….
0
130
0
@mehqq_
meh
@mehqq_
6 years
RT @d3vc0r3: Is it possible to install IDA Pro without owning installation password?.Sure, why not?.
0
190
0
@mehqq_
meh
@mehqq_
6 years
RT @orange_8361: Achievement unlocked! Got RCE and the highest bounty on Twitter bug bounty program XD.
0
153
0
@mehqq_
meh
@mehqq_
6 years
RT @orange_8361: It's my honor to present at #BHUSA again! @mehqq_ and I will show our research and disclose pre-auth RCEs on at least 3 le….
0
105
0
@mehqq_
meh
@mehqq_
6 years
RT @hosselot: Nice writeup+(0x41414141) PoC for Mozilla Firefox HTML5 Stream Parsing Use-after-free Vulnerability (CVE-2018-18500) by Yaniv….
0
39
0
@mehqq_
meh
@mehqq_
6 years
RT @theflow0: chromacity: Escaping the VM with newlines. My write-up of the challenge by @_niklasb. .
0
161
0
@mehqq_
meh
@mehqq_
6 years
RT @dukebarman: Our research team published the Guide to the world of AFL fuzzers
0
179
0