Bien 🇻🇳 (@bienpnn) / X

Bien 🇻🇳

1,934 posts

Bien 🇻🇳

@bienpnn

A weeb that loves crashing software | @qriousec & @seasecresponse & @ProjectSEKAIctf | アイマス最高 | weeb @UdonLover149

Singapore

Joined March 2012

Pinned
Bien 🇻🇳
@bienpnn
May 19
My iM@S journey started around 2015. Joined a small community in Vietnam. Over time, due to various factors, I was not really active in the community. Then COVID came. I spent more time online, and watched my first live stream iM@S concert - Million LIVE 7th Reburn. That was when
2.7K
Bien 🇻🇳
@bienpnn
Nov 8, 2024
これはベトナムのプロデューサーのミリオンライブ11thLIVEフラスタです。「アオザイ」を着た七尾百合子ちゃんと伊藤美来さん。ライブが延期になってしまったの残念ですが、会場に届けることができて嬉しいです。イラストレーター: @Myon_Nya #ミリオン11th #idolmaster
25K
Bien 🇻🇳
@bienpnn
Mar 5, 2023
4 years ago I pwned a real world software for the first time - it was Counter-Strike 1.6. By modding CS, I know how to write code, how to hook, how to reverse engineer softwares, and how to exploit. If not for CS, I might have been something else.
35K
Bien 🇻🇳
@bienpnn
Apr 24, 2023
Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991 Written by @xikhud
qriousec.github.io
Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991
Introduction Hi, I am Trung (xikhud). Last month, I joined Qrious Secure team as a new member, and my first target was to find and reproduce the security bugs that @bienpnn used at the Pwn2Own...
30K
Bien 🇻🇳
@bienpnn
Jul 6, 2023
PoC for CVE-2023-31248. This was used to exploit Ubuntu Desktop at Pwn2Own Vancouver 2023. github.com/kungfulon/nf-t…
37K
Bien 🇻🇳
@bienpnn
Mar 22, 2023
a weeb just open a calculator but got a prize!?!?!?!
TrendAI Zero Day Initiative
@thezdi
Mar 22, 2023
Confirmed! Bien Pham (@bienpnn) from Qrious Security (@qriousec) used an OOB Read and a stacked-based buffer overflow to exploit #Oracle VirtualBox. He wins $40K and 4 Master of Pwn points. #Pwn2Own #P2OVancouver
56K
Bien 🇻🇳
@bienpnn
Feb 21, 2023
😶‍🌫️😶‍🌫️😶‍🌫️
41K
Bien 🇻🇳
@bienpnn
Apr 12, 2021
As you may know, @the_secret_club recently posted videos about Source Engine games RCE. I was also ignored by Valve for a year. Here's the demonstration of my report. RCE can be achieved by connecting to a malicious server, then the chain will be completed when game is restarted.
00:00
Bien 🇻🇳
@bienpnn
Apr 17, 2022
see you guys in Vancouver (i hope i can go there lol)
Bien 🇻🇳
@bienpnn
May 16, 2024
see you in Seoul
16K
Bien 🇻🇳
@bienpnn
Nov 3, 2025
hot take: maybe instead of reporting vuln and getting cves, security nerds should just sell exploits that way devs won't need to bother with too much reports, only critical one that got exploited would need to be fixed. neat!
74K
Bien 🇻🇳
@bienpnn
Dec 20, 2022
some nice stuff... the exploit stability is low atm, but i still have a lot of time to improve now come back to lulnix bug hunting first...
00:00
27K
Bien 🇻🇳
@bienpnn
Jul 19, 2023
wow 0days rain
20K
Bien 🇻🇳
@bienpnn
Apr 15, 2022
after 1 week i turned the panic into sudo. new see-vee-eee coming?