Joined June 2018
Our website is now live! Everything you need to know about Entrypoint 2027 is now in one place. 📅 19-20 March 2027 📍 Paris, France 🎤 CFP is open Explore the event and submit your talk ⬇️ entrypoint.fr/
8
14
786
I've published UniBLEed, a fully wormable proximity Bluetooth RCE affecting Unitree's G1 humanoids. Blog spans cloud, mobile, firmware, Bluetooth & hardware. Two multi-bug RCE chains. 3 months into ~80 minutes, $6,700 in bounties. Go jailbreak your G1s!! boschko.ca/g1-ble-rce/
9
83
10
226
24,326
🚨 The Entrypoint 2027 CFP is still open! AD, Cloud, CI/CD, Initial Access, web exploitation... if you've got a technique or a real-world engagement story, we want to hear it. ➡️ cfp.entrypoint.fr/entrypoint… 🎫 Website and ticketing information will be released soon!
9
1
13
907
The Review Board for Entrypoint 2027 is complete🔒 10 security experts from around the world will be reading your submissions this year ! Reminder: CFP closes on September 20, 2026 at 23:59 UTC Submit your paper now at entrypoint.fr/ Meet the team below (A-Z)👇
2
25
2
34
6,173
🚨 The #Entrypoint2027 Call For Papers is now open! Have original offensive security research to share? New techniques, tools, or attack stories ? We want to hear from you. 📅 CFP closes: Sept 20, 2026. Our review board will be revealed soon. 👉 cfp.entrypoint.fr/entrypoint…
28
4
43
8,766
We've been working on something for a while. The talks your blue team doesn't want you to see. 🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation. 📍 Paris - Le Dernier Étage 📅 March 19–20, 2027 entrypoint.fr CFP and additional details coming soon.
1
54
2
102
20,763
Wrote a blogpost about how you can use the Windows server 2003 source code as a red teamer to make your tools look less like tools. I also go over and map out the main/important files and practical examples of using it to augment MS-*/RFC specs: abdulmhsblog.com/posts/usein…
2
68
1
254
18,133
I am excited to release the extended version of the sixth article in the Exploiting Reversing Series (ERS). Titled "A Deep Dive Into Exploiting a Minifilter Driver (N-day)" this 293-page deep dive offers a comprehensive roadmap for vulnerability exploitation: exploitreversing.com/2026/02… Key updates in this extended edition: [+] Dual Exploit Strategies: Two distinct exploit versions. [+] Exploit ALPC Write Primitive Edition: elevation of privilege of a regular user to SYSTEM. [+] Exploit Parent Process ID Spoofing Edition: elevation of privilege of an administrator to SYSTEM. [+] Solid Reliability: A completely stable and working ALPC write primitive. [+] Optimized Exploit Logic: Significant refinements to the codebase and technical execution for better stability and predictability. For those who have read the original release, whose exploit was working, my strong recommendation is that you adopt this extended edition as definitive. The article guides you through the entire lifecycle of an exploit: from initial reverse engineering and vulnerability analysis to multiple PoC developments and full exploitation. I hope this serves as a definitive resource for your research. If you find it helpful, please feel free to share it or reach out with your feedback! Enjoy your reading and have an excellent day day.
4
78
2
295
14,777
At #Pwn2Own Berlin 2025, a full exploit chain against VMware Workstation was demonstrated via a heap overflow in the PVSCSI controller. Despite Windows 11 LFH mitigations, advanced heap shaping and side-channel techniques enabled a reliable exploit. 🔍 Full technical write-up 👇 synacktiv.com/en/publication…
4
149
2
525
50,308
We're back, baby! This time with 19+ bugs I reported to MediaTek over the past year + PoCs for each one! I'll also tell you a *fun* story about MediaTek's "creative" impact assessment process. They earned a spot on the naughty list this year :) Check it ⬇️
8
28
1
176
27,037
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-global…
138
899
112
3,174
481,886
Si te gusta el mundo del NFC, o simplemente tienes curiosidad por aprender, prueba la nueva versión del nfc-laboratory github.com/josevcm/nfc-labor…
1
1
5
Ever thought your kitchen appliance could harbor a persistent threat? We reverse-engineered the Thermomix TM5 and uncovered vulnerabilities allowing arbitrary code execution, persistence, and secure boot bypass. Discover our step-by-step breakdown! synacktiv.com/en/publication…
2
44
4
126
10,024
Yesterday at #Troopers25, @twillnix and I published some of our research on Bluetooth headphones and earbuds. We found that there is a large number of Airoha-based headphones that can be fully compromised via Bluetooth. insinuator.net/2025/06/airoh…
2
11
13
3,413
Exploiting the IKKO Activebuds "AI powered" earbuds blog.mgdproductions.com/ikko…
3
11
1,578
Interested in vulnerabilities in video games? 🎮 @tomtombinary presented critical flaws in Neverwinter Nights Enhanced Edition at #Hexacon, which could allow attackers to take control of players' computers. 🛡️ Check out the full details of these bugs!👇 synacktiv.com/en/publication…
2
28
82
5,095
🚀 This week, @us3r777 & @__pierreg kick off our new Whitebox Vulnerability Research training! Students will dive into PHP, Java, and .NET, analyzing & exploiting 1-day vulnerabilities. Let’s get started! 💻🔍
1
15
49
3,813