Orange Tsai
where else to find them
what they talk about
all 4 in the filters
where they keep going back
- CODE BLUE2 editions2017–2023
all 4 in the filters
on a stage with
- Cheng-Da Tsaionce
- Meh Changonce
who talks about the same things
- Dor Zusman3 talks
- Alexei Kojenov6 talks
- Gareth Heyes5 talks
- James Kettle13 talks
- Niall Merrigan19 talks
- Kasimir Schulz6 talks
| title | conference | date |
|---|---|---|
| A 3-Year Tale of Hacking a Pwn2Own Target: The Attacks, Vendor Evolution, and Lesson Learneds | CODE BLUE 2023 | 2023-11-08 |
Three-year Pwn2Own campaign on Sonos documents concrete exploits, tools, and outcomes: initial black‑box probing via wget upgrade flow and firmware reverse… | ||
| Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs | Black Hat USA 2019 | 2019-08-03 |
Claims exploit chains deliver pre-auth RCE against major SSL VPNs (FortiGate and Pulse/Pearl Secure), affecting millions; techniques include VM memory… | ||
| Hacking Jenkins | HITBSecConf 2019 Amsterdam | 2019-05-06 |
Finds and chains together a dynamic URL-loading ACL bypass and Groovy meta-programming to achieve a full pre-auth RCE. Uses Stapler’s dynamic routing to… | ||
| A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages! | Black Hat Asia 2018 | 2018-03-20 |
A custom URL-parser fuzzer tests many languages (Python, PHP, Perl, Ruby, Java, JavaScript, Wget, cURL) against a local DNS/webserver/iptables setup and finds… | ||
| A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages! | CODE BLUE 2017 | 2017-11-07 |
Demonstrates a practical exploit chain that turns URL parser inconsistencies into SSRF bypasses and real RCE: a custom fuzzing tool finds parsing mismatches… | ||
| nothing matches | ||