Qinrun Dai (@2st___) profile picture

Qinrun Dai

@2st___

CTF Player @ L3H_Sec / OIer / System Security / MSRC MVR 2026 #27 / Exploitation / CS PhD Student / @DiffractAI

i.secondst.org
Joined June 2020
  • Tweets34
  • Following139
  • Followers274
7Media
Photo by Qinrun Dai (@2st___)Photo by Qinrun Dai (@2st___)Photo by Qinrun Dai (@2st___)Photo by Qinrun Dai (@2st___)Photo by Qinrun Dai (@2st___)Photo by Qinrun Dai (@2st___)Photo by Qinrun Dai (@2st___)
Glad to see 86 Windows CVEs reported by @DiffractAI fixed this October. We’ll gradually share more of our work across Windows and other platforms.
Diffract-AI (@DiffractAI) profile pictureDiffract-AI
@DiffractAIOct 14
Microsoft’s October 2026 security updates fixed 86 Windows CVEs reported by Diffract, spanning the Windows kernel, file systems, storage stack, device drivers, and other core components. We’ll continue digging into underexplored Windows attack surfaces while expanding Diffract’s research to other operating systems. More research and technical write-ups are coming. msrc.microsoft.com/update-gu…
1
1
10
2,686
Qinrun Dai retweeted
Diffract-AI (@DiffractAI) profile picture
Diffract-AI
@DiffractAIOct 14
We’ve published our analysis of CVE-2026-97798, a Windows Faultrep TTD option-injection vulnerability discovered and reported by Diffract. It allowed a standard user to execute native code as SYSTEM through a trusted broker. Technical details and demo: diffract-ai.com/research/cve…
9
20
1,459
This month, Microsoft’s @msftsecresponse fixed 80 CVEs discovered and reported by me and the outstanding collaborators on our team, including wgg, npc0vo, and 2st. MSRC’s response and remediation were remarkably swift. #bugbounty #cybersecurity #MSRC #security
Microsoft Security Response Center (@msftsecresponse) profile pictureMicrosoft Security Response Center
@msftsecresponseSep 8
Security updates for September are now available: msft.it/6018SZEg0. Alongside this month's release, we're expanding machine-readable Vulnerability Exploitability eXchange (VEX) coverage to all Microsoft-assigned CVEs, providing customers with more consistent, machine-readable security information to help understand exposure and prioritize risk. Learn more about this latest milestone in our transparency efforts: microsoft.com/en-us/msrc/blo…
Image from Microsoft Security Response Center (@msftsecresponse)
2
4
33
3,358
Congratulations to all the researchers recognized in the MSRC 2026 Q2 Security Researcher Leaderboard! This quarter marks the final quarterly points-based leaderboard as we continue the evolution of our researcher recognition program. We are grateful to every researcher who partnered with us and helped strengthen the security of Microsoft products and services through their hard work and dedication. We’d also like to recognize the top 10 researchers in this quarter’s leaderboard for their outstanding contributions. Thank you for helping protect customers around the world. 🥇Asaf Cohen (XBREACH.AI) 🥈C46F3708A45EF0041BD0A49DDAEA0E25 🥉Ron 4. Thanatos Tian (HKPolyU) & wgg & 2st with Diffract 5. haowei yan 6. fce141fd6b42fcec05c1285b15d8f999 7. Ofek Levin 8. pwn2addr 9. Kim Seung Chan (@mylostchristmas) 10. Jianyang Song Learn more and view the full leaderboard: microsoft.com/en-us/msrc/blo…
Image from Microsoft Security Response Center (@msftsecresponse)
2
5
31
6,301
Boulder faculty and students are pround of being part of the 42-b3yond-6ug team. Now, take a shot at the meaning of the team name.
DARPA (@DARPA) profile pictureDARPA
@DARPA11 Mar 2024
Congrats to the 7 companies that will receive $1 million each to develop AI-enabled cyber reasoning systems that automatically find and fix software vulnerabilities as part of the #AIxCC Small Business Track! Full announcement: darpa.mil/news-events/2024-0….
Image from DARPA (@DARPA)
1
1
12
2,014
Qinrun Dai retweeted
Theori (@theori_io) profile picture
Theori
@theori_io4 Mar 2024
Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802
22
255
40
911
139,975
Uploaded all my Offensive Security & Reverse Engineering (OSRE) course labs (docx) to my repo found below. Most of them have very detailed instructions and should be great to get you started in Software Exploitation. 1/n #Offsec #SoftwareExploitation #RE exploitation.ashemery.com/
Image from Ali Hadi | B!n@ry (@binaryz0ne)
92
1,731
31
5,378
534,406
How to Reverse and Exploit iOS for BEGINNERS😈 👇My 3 part series👇 Part 1: How to Reverse & Patch iOS Apps bit.ly/3inJgop Part 2: Exploiting iOS binaries: ARM64 ROP Chains bit.ly/3BgvLxt Part 3: Heap Overflows on ARM64: Spraying, UAF bit.ly/3gGI7rx
Image from inversecos (@inversecos)
Image from inversecos (@inversecos)
32
493
8
1,728
Qinrun Dai retweeted
Eviatar Gerzi (@g3rzi) profile picture
Eviatar Gerzi@g3rzi8 Sep 2022
Check out our new blog post about analyzing the #RPC communication between #Windows #container to the host. 😃 cyberark.com/resources/threa… We also released a new tool named #RPCMon to show RPC calls with functions names: github.com/cyberark/RPCMon (1/2) #malware #redteam #Pentesting
Image from Eviatar Gerzi (@g3rzi)
3
73
3
231
If you ever wonder how it is possible to develop #IDAPython scripts in fast-effective way just try these 2 #IDA plugins: IPyIDA - github.com/eset/ipyida @ESETresearch IDACode - github.com/ioncodes/idacode @layle_ctf IntelliSense, debugging etc. Just excellent hats off to devs🙏👏🤠
Image from Jiří Vinopal (@vinopaljiri)
Image from Jiří Vinopal (@vinopaljiri)
Image from Jiří Vinopal (@vinopaljiri)
Image from Jiří Vinopal (@vinopaljiri)
5
87
3
303
How to Reverse Engineer and Patch an iOS Application for Beginners: Part I inversecos.com/2022/06/how-t…
55
1
178
Load more