Yuki Chen
@guhe120
古河, @Zai_org, Bug bounty, ACG Otaku, Pwn2Own 15/16/17, PwnFest16,TianfuCup 18/19/20, 5 times MSRC MVR yearly Top 1. Two pwnie awards.
288 Following 11K Followers
New journey, new mission! Thrilled and grateful for the opportunity to help build a safer cyberspace with the power of frontier AI @Zai_org
Nice advertisement for GLM, I'm switching my bug hunting workflow to glm-5.3 now 😀
Don't worry, many guys has 200+ cases with the same sitituation, they are worrier than you :-)
two months ago, I reported a critical bug to @msftsecresponse, but it has received no attention since. It's disheartening. I still appreciate the company, but there's no denying that their bug bounty program requires improvement 💔.
Show more
Sharing my for keynote talk for Offbyone security conference #OB12026# : <A year of hacking with LLMs>
Year after year, @TheSAScon continues to be one of the best conferences I've attended! If you've been thinking about submitting your research, now's the perfect time - the CFP is still open.
Show more
Can't wait to hear +1
Interesting topic by @edwardzpeng
Can’t wait to hear it
Nice sharing!
Migrated my blog and published a new post. It covers a common type confusion vulnerability pattern I found last year in RPC servers. I don’t think this is a new class of vulnerability, but I did find the same issue across multiple RPC services.
Show more
Get the Fable 5 safey flag and kicked back to opus 4.8 by simply starting a new session in an empty project folder and say "hi", so obviously they collected your globl config/old sessions/...everything and already labeled you as a risky guy or not to use the modle?
Show more
Then how can I get a PhD? - Become a student of Professor Peng
love the MSRC team, I really do. But sometimes you need a PhD in anger management to survive
I’ve got the MSRC stories, if you’ve got the beers.
Thanks @msftsecresponse for the invitation to this awesome event, had a great time
Thank you to everyone who joined us for the MSRC Researcher Celebration at Black Hat Asia. It was great to connect with so many in the community and spend time sharing ideas and conversations.
We appreciate the collaboration that drives this work forward and look forward to what we’ll build together next.
Show more
Congrats!
Good news, score updated higher😄 Honoured to be #2😆#, Huge thx to @msftsecresponse for the support & to @guhe120 and @XiaoWei___ for their guidance and sharing & to friends' help🤗 Congrats to everyone on the board! 🎉
Show more
CVE-2025-33070 is an auth bypass in the function NetrServerAuthenticate3 - which is the same function of ZeroLogon. But you need to force the DC into an out-of-memory state first to trigger the bug.
RDG RCE sharing
Really enjoyed the 2 days in Singapore, thank you for the great event @offbyoneconf @StartsLab @_jsoo_
Singapore - shout it out for Yuki Chen 🤩 !!! Bringing Day 1 of @offbyoneconf 2025 to a explosive end with 𝐀 𝐉𝐨𝐮𝐫𝐧𝐞𝐲 𝐢𝐧𝐭𝐨 𝐖𝐢𝐧𝐝𝐨𝐰𝐬 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐏𝐫𝐨𝐯𝐢𝐝𝐞𝐫 𝐈𝐧𝐭𝐞𝐫𝐟𝐚𝐜𝐞.
🙇🙇🙇
Show more
My great honor to be selected as an @offbyoneconf speaker, let's reveal some interesting bugs under that mysterious AcceptSecuirtyContext API #OBO2025#
A speaker who needs no introduction, welcoming @guhe120 to @offbyoneconf 2025 panel of speakers! Join us for Yuki's presentation 𝐀 𝐉𝐨𝐮𝐫𝐧𝐞𝐲 𝐢𝐧𝐭𝐨 𝐖𝐢𝐧𝐝𝐨𝐰𝐬 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝐏𝐫𝐨𝐯𝐢𝐝𝐞𝐫 𝐈𝐧𝐭𝐞𝐫𝐟𝐚𝐜𝐞
#OBO2025#
Show more
I'm unable to join the conference Insomni’hack 2025, so I write a part of content into a blog, hope you enjoy my blog.
Congrats!
Congratulations to everyone on the list. Thanks for the support from MSRC. It's really hard to be top1 once, @guhe120 is kami of MSRC！🫡
There were multiple LDAP related vulneraiblites fixed in Dec, and ironicly, CVE-2024-49112 - with the highest CVSS score - is actually less exploitable than some others IMO😂 I may cover this topic in some security conference this year
Show more
Here is the ironic side of vuln response based on CVSS score - especially when it comes to binary vulns. Everyone cares about CVE-2024-49112 because MS assigns CVSS 9.8 to this vulneraiblity, but never forget the score is highly affected by the skills of the analysis team behind
Show more
