starlabs
@starlabs_sg
Followers
9K
Following
214
Media
46
Statuses
262
A Singapore company that discovers vulnerabilities to help customers mitigate the risks of cyber attacks. Organisers of @offbyoneconf
Singapore
Joined September 2018
One of our current intern, @goatmilkkk shared his Chrome-atic escape adventure using CVE-2024-30088.Epic obstacles documented in it too!.
2
52
183
Our researchers, @KaligulaSec & @cplearns2h4ck were credited for 4 vulnerabilities in Microsoft this month. Huge congratulations to both of them for their exceptional work. ๐.
0
10
63
RT @offbyoneconf: @offbyoneconf 2025 Day 2 presentation videos are now available on our official YouTube channel! Subscribe, like ๐ and comโฆ.
0
11
0
The Day 2 videos are finally out ๐ฅณ๐ฅณ.
@offbyoneconf 2025 Day 2 presentation videos are now available on our official YouTube channel! Subscribe, like ๐ and comment!.
0
2
15
RT @offbyoneconf: @offbyoneconf 2025 Day 1 presentation videos are now available on our official YouTube channel! Subscribe, like ๐ and coโฆ.
0
14
0
The Day 1 videos are finally out ๐ฅณ๐ฅณ.
@offbyoneconf 2025 Day 1 presentation videos are now available on our official YouTube channel! Subscribe, like ๐ and comment!.
0
1
17
When life gives you tangerines๐.Intern Lin Ze Wei's task: Port a 2-bug exploit to Pixel 6 Pro.Problem: One bug "doesn't work".Solution: Make it work with 1 bug. Sometimes the best research comes from working with what you think you have.
0
38
143
After almost 8 months of coordinated disclosure, vulnerabilities in Trend Micro Apex Central discovered by our former colleague @Chocologicall have been resolved!. ZDI advisories: ZDI-25-295, ZDI-25-296, ZDI-25-297, ZDI-25-236, ZDI-25-237.
0
1
26
After 6 months of responsible disclosure, proud to announce our team discovered 13 (mostly exploitable) vulnerabilities in Samsung Exynos processors! Kudos to @st424204, @n0psledbyte, @Peterpan980927 & @rainbowpigeon_.CVE-2025-23095 to CVE-2025-23107 .๐
2
21
157
"Why is my exploit taking 10 minutes?" .*checks logs* .*sees 10,000 kernel warnings* .". oh" ๐ก. Fresh Friday night read: our intern, Tan Ze Jian, on Mali exploitation - sometimes the fix is simpler than you think!.
0
27
114
RT @thezdi: Pwn2Own Berlin 2025 comes to a close. We awarded $1,078,750 for 28 unique 0-days. Congrats to @starlabs_sg for winning Master oโฆ.
0
36
0
RT @_jsoo_: Big shoutout to @hi_im_d4rkn3ss & @gerrard_tai for flying over & represent us.To our 1st-timers Gerrard @cplearns2h4ck @MochiNiโฆ.
0
8
0
RT @thezdi: Confirmed!! Dung and Nguyen (@MochiNishimiya) of STARLabs used a TOCTOU race condition to escape the VM and an Improper Validatโฆ.
0
15
0
RT @thezdi: Confirmed! Gerrard Tai of STAR Labs SG Pte. Ltd used a Use-After-Free bug to escalate privileges on Red Hat Enterprise Linux. Tโฆ.
0
10
0
RT @thezdi: Outstanding! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG used a single integer overflow to exploit #VMware ESXi - a firโฆ.
0
47
0
RT @thezdi: Nicely done! Billy (@st424204) and Ramdhan (@n0psledbyte) of STAR Labs used a UAF in the Linux kernel to perform their Dockerโฆ.
0
3
0
RT @thezdi: Confirmed! Chen Le Qi (@cplearns2h4ck) of STARLabs SG combined a UAF and an integer overflow to escalate to SYSTEM on #Windowsโฆ.
0
13
0
Just dropped a blog post on a fun bug that our (former since it's reported long long time ago) intern, Devesh Logendran found in Visual Studio Code <= 1.89+ .We hope you will have fun reading it.
0
27
91
RT @offbyoneconf: ๐ฃ๏ธ๐๐ข๐ง๐ ๐๐ฉ๐จ๐ซ๐๐๐ง ๐ฌ๐ญ๐ฎ๐๐๐ง๐ญ๐ฌ in tertiary institutions! . ๐๐
๐๐๐ Off-by-One Conference student tickets up for grabs!.๐Sponsored bโฆ.
0
7
0
A huge thank you to @INTfinitySG for sponsoring student tickets and making it possible for more young talents to attend. Your support helps nurture the next generation of cybersecurity professionals.
๐ฃ๏ธ๐๐ข๐ง๐ ๐๐ฉ๐จ๐ซ๐๐๐ง ๐ฌ๐ญ๐ฎ๐๐๐ง๐ญ๐ฌ in tertiary institutions! . ๐๐
๐๐๐ Off-by-One Conference student tickets up for grabs!.๐Sponsored by @INTfinitySG . Register at by 12 April 2025. More information:
0
1
8