We're at @typhooncon 📍🇰🇷
We're here all week showing everyone how to master Time Travel Debugging. If you're around, stop by our booth to take on the challenge!
TyphoonCon🌪️ retweeted
We are already preparing for the training in @typhooncon!
Yesterday we arrived in Korea and enjoyed the city a bit, but today is time for working hard to offer our best training. We hope the students enjoy and learn as much as possible.
Again, thank you very much to @HexRaysSA for giving us licenses for our students and trainers!
CC @jeppojeps @Farenain
#qemu #reversing #triton #miasm #unicorn #qiling #idapro
TyphoonCon🌪️ retweeted
Automated firmware reverse engineering + type recognition + labeling + debug via #qemu #renode #unicorn
ONLY AT OUR @typhooncon training with @Farenain @jeppojeps
Link in next 🧵
Featuring @HexRaysSA IDA licenses for our student, don't miss it so we show you how we mixed svd files with QEMU Source analysis + @claudeai to build this system.
TyphoonCon🌪️ retweeted
We’re happy to share that Horizon Secured is an official partner of 𝗧𝘆𝗽𝗵𝗼𝗼𝗻𝗖𝗼𝗻 𝟮𝟬𝟮𝟲 in Seoul! ⚡
TyphoonCon is a highly technical conference focused on offensive security research, vulnerability discovery, advanced exploitation techniques, reverse engineering, and more.
Attendees will also have 𝗮 𝗰𝗵𝗮𝗻𝗰𝗲 𝘁𝗼 𝘄𝗶𝗻 𝗼𝘂𝗿 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗰𝗼𝘂𝗿𝘀𝗲𝘀 focused on Windows Infrastructure Security and Active Directory.
𝗧𝘆𝗽𝗵𝗼𝗼𝗻𝗖𝗼𝗻 𝟮𝟬𝟮𝟲
📍 Seoul, South Korea
📅 Date: 25.–29.5.2026
🎟️ Registration: eventbrite.com/e/typhooncon-…
Registrations are still open — don’t miss it!
#TyphoonCon #TyphoonCon2026 #HorizonSecured #CyberSecurity #InfoSec #ActiveDirectory #WindowsSecurity @typhooncon
TyphoonCon🌪️ retweeted
🌪️ Starting day 2 with our keynote Phuong Nguyen and his wonderful talk about building a low profile elite hacking team!
TyphoonCon🌪️ retweeted
🌪️ Kicking things off with our keynote by @theflow0 sharing how console hacking sparked his journey into cybersecurity.
TyphoonCon🌪️ retweeted
🚗 System setup in progress! Tomorrow at @typhooncon we’re unveiling a game-changer: remote access to automotive platforms for security researchers. No physical car needed. Come see the future of car hacking at the SSD Labs display at #TyphoonCon2025
typhooncon.com/typhooncon-au…
TyphoonCon🌪️ retweeted
When input becomes a weapon – Command Injection vulnerabilities can turn seemingly innocent user input into a gateway for attackers to take control of your system. In this article, we dive into how Command Injection works, real-world examples, and how you can secure your applications against this serious threat. Don't miss it! 🚨
medium.com/ssd-secure-disclo…
TyphoonCon🌪️ retweeted
🚨 New advisory was just published! 🚨
A vulnerability in the Common Log File System (CLFS) driver allows a local user to gain elevated privileges on Windows 11
ssd-disclosure.com/ssd-advis…
TyphoonCon🌪️ retweeted
🚨 New advisory was just published! 🚨
A vulnerability in the Nortek Linear eMerge E3 allows remote unauthenticated attackers to cause the device to execute arbitrary commands.
ssd-disclosure.com/ssd-advis…
TyphoonCon🌪️ retweeted
🚨 New advisory was just published! 🚨
A vulnerability in LANCOM LCOS web interface (usually listening on port 443) allows a remote attacker to trigger a heap overflow in the service listening on this port:
ssd-disclosure.com/ssd-advis…
TyphoonCon🌪️ retweeted
Part 3 in our series on identifying and exploiting router vulnerabilities, including comprehensive walkthroughs and methodologies is now out: medium.com/@odedvk/identify-…
TyphoonCon🌪️ retweeted
🚨 New advisory was just published! 🚨
A vulnerability in Arcadyan FMIMG51AX000J model allows remote attackers to execute arbitrary code:
ssd-disclosure.com/ssd-advis…
TyphoonCon🌪️ retweeted
Found a vulnerability in OpenWRT?
Get up to $100K in payouts for your OpenWRT vulnerabilities!
Submit your findings today at ssd-disclosure.com/openwrt-v… and see how much your research is really worth 💸💸💸
TyphoonCon🌪️ retweeted
🚨 New advisory was just published! 🚨
A Chrome RCE has been disclosed during TyphoonPWN 2024. The vulnerability stems from a JS-to-WASM conversion function which leads to a type confusion between arbitrary WASM types. Credit: Seunghyun Lee (@0x10n).
ssd-disclosure.com/ssd-advis…
TyphoonCon🌪️ retweeted
Found a vulnerability in IceWarp?
Submit your findings today at ssd-disclosure.com/icewarp-v… and get the BIG payouts you deserve 💰💰💰
TyphoonCon🌪️ retweeted
Understanding router architecture is crucial for identifying attack surfaces and uncovering vulnerabilities in network protocols, firmware, and web interfaces.
Read the first part of our new series of articles on identifying and exploiting router vulnerabilities, including practical examples from real-world cases:
medium.com/ssd-secure-disclo…
TyphoonCon🌪️ retweeted
Teaching how to do a Soju twister, is definitely the highlight of the con 🤣 till next time @typhooncon
Check out the highlights from TyphoonCon 2024:
youtu.be/KUUnYMes1NI
TyphoonCon🌪️ retweeted
🚨 New advisory was just published! 🚨
There are pre-auth stored XSS and post-auth remote command injection vulnerabilities in SonicWall SMA100 that allow unauthenticated attackers to execute arbitrary commands when an authenticated user is exposed to the stored XSS: ssd-disclosure.com/ssd-advis…
























