@eAyeP

Senior Security Researcher / Hacker

 Anywhere/Everywhere
Joined January 2019
  • Tweets40
  • Following39
  • Followers172
4Media
Well done on some awesome research @n30m1nd @sherl0ck__ !! Keep tackling those hard targets! blog.exodusintel.com/2024/01… #chrome #Exploit #vulnerabilityresearch

Google Chrome V8 CVE-2024-0517 Out-of-Bounds Write Code Execution - Exodus Intelligence

By Javier Jimenez and Vignesh Rao Overview In this blog post we take a look at a vulnerability that we found in Google Chrome’s V8 JavaScript engine a few months ago. This vulnerability was patched...

blog.exodusintel.com
92
3
210
45,219
I just had to switch to Linux from Windows to get my audio working... What has the world come to?
2
70
At @defcon, @eAyeP and @ravenousbytes debuted 9 CVEs affecting power management and supply technology in power centers, kicking off a new series investigating vulns impacting data centers. Curious how the CVEs work together to allow full system access? Watch and learn. 🧵⬇️
1
4
3
1,124
Data centers are vital infrastructure and a high value target for threat actors. Our team is investigating power management & supply technologies to expose and prevent new attacks. @eAyeP & @ravenousbytes discuss 9️⃣ vulns we discovered on the blog. bit.ly/3KDDF8J
1
3
3
1,176
#DEFCON2023 Come check out @ravenousbytes, and I present 9 0-days we found in 2 data center power management targets! 🤘😈 #hacktheplanet Title: Power Corrupts; Corrupt It Back! Hacking Power Management in Data Centers [Sat 08/12 14:00 - Track #4]
2
6
316
Check out some of @Abraxus7331 and my latest work here. We ended up finding a pretty cool CI in a Cisco router.
Trellix Advanced Research Center@TrellixARC1 Feb 2023
When Pwning Cisco, Persistence is Key - When Pwning Supply Chain, Cisco is Key NEW RESEARCH FROM @eAyeP, @Abraxus7331 & @fulmetalpackets trellix.com/en-us/about/news…
2
9
967
If you missed the presentation by @spovolny And me, check it out here for some 1337 door hacking 🤘 youtu.be/2htQvpvFex4 #DEFCON

DEF CON 30 - Sam Quinn, Steve Povolny - Perimeter Breached Hacking an Access Control System

The first critical component to any attack is an entry point. As we...

youtube.com
3
4
So awesome lugging this massive door around to all the stages in Vegas! Haha also clearly @spovolny is prettier as they cut all my interview sections out 🥲
Steve Povolny (he/him)@spovolny29 Aug 2022
.@eAyeP and I spoke with DefCon film crew recently backstage - short interview here! Sam completed the vast majority of the technical heavy lifting for this project, so major props to him! m.youtube.com/watch?v=MGcSj5…
1
Check out part one of our blog hacking the HID Mercury access controller! This first part covers how we got root access on the controller and deep dive into the hardware hacking process. trellix.com/en-hk/about/news…
1
3
🖥️🚪🔓Executed my first ever hardware hack: @spovolny & @eAyeP's physical access control bypass. I'm in! #blackhat2022
6
20
See you all tomorrow at 1:30p @ South Seas AB (level 3) for my talk about eBPF for Windows! There will be vulns and discussion of the capabilities and design of the current Windows eBPF implementation!
Trellix@Trellix29 Jul 2022
Join @TrellixLabs’ Senior Principal Security Researcher @richinseattle at @BlackHatEvents to explore #eBPF for Windows — it’s bound to be an (E)ntirely (B)reathtaking (P)resentation, (F)or sure! 💥 #BHUSA go.trellix.com/3zDDIw0
1
1
1
42
That being said, I'm super excited to be speaking at the @DC_HHV about M32C reversing (Friday @ 1pm) and practicing my goth dance moves at @dcgothcon (Friday night!) 🕺🦇
1
3
3
Also Saturday should be lots of fun. Looking forward my colleagues @spovolny and @eAyeP kickass talk on hacking HID Mercury access control panels (Sat 3:30p Track 4) forum.defcon.org/node/242288 Woot woot! Let's hack the planet y'all 🤘😃🤘
1
3
Fresh off the press, our monthly bug report for June is here! Check it out for some light Cyber Security news and comedy.
Trellix@Trellix6 Jul 2022
You may ask yourself, what do the #OGNL injection vulnerability, Follina, and #SpEL injection via parameter placeholder expressions have in common… 👀 no? Just us? Well either way, @eAyeP has the answers in our June Bug Report: go.trellix.com/3yNJ1sA

The Bug Report – June 2022 Edition

1
5
Such a great conference! Had a blast speaking.
Cooper@Ministraitor9 Jun 2022
To close off day 1 we have Steve Povolny @spovolny and Sam Quinn @eAyeP of @Trellix talking about hacking an access control system. #hardwear_io
1
3
7
Sam Quinn retweeted
Trellix@Trellix9 Jun 2022
TODAY: @spovolny and @eAyeP present on access control system security and the #LenelS2 vulnerability. 4:30pm at @hardwear_io 2022! 👏 #TeamTrellix hardwear.io/usa-2022/speaker…
1
2
8
What are these "buffer overflow" and "command injection" things? Surely those can't exist anymore! @eAyeP and I will prove otherwise at our upcoming Hardwear.io talk June 9th 4:30pst. hardwear.io/usa-2022/schedul… CISA advisory: cisa.gov/uscert/ics/advisori… #cisa #trellix
6
11
⚡Tech Talk!💡Steve @spovolny & Sam @eAyeP from @Trellix Threat Labs team uncovered 8 zero-day vulnerabilities leading to remote, unauthenticated code execution on the <Vendor/Product redacted> access control panel 🎫Find out more➡️bit.ly/3FmcBqF #hw_ioUSA2022 #IoT
10
2
13
Extremely excited to be speaking at BlackHat with @spovolny on our ICS vuln research into access control. blackhat.com/us-22/briefings… #bhusa
3
I love how ironic this very long paragraph with mandatory user interaction is to make sure you "pay attention to driving" 😂
4
Load more