@masthoon

Security Researcher

Joined March 2014
  • Tweets146
  • Following635
  • Followers1.5K
2Media
Mastho retweeted
Hexacon@hexacon_frSep 11
The wait is over! 🚀 The talks for Hexacon 2026 are officially out, and the lineup is absolute fire 🔥 hexacon.fr/conference/speake…

Hexacon - Conference – Speakers

Discover the accepted talks for this edition!

hexacon.fr
2
23
5
53
17,566
Mastho retweeted
Iskuri@Iskuri1Aug 25
youtube.com/watch?v=0hItwQVp…

Black Hat Asia 2026 | Practical Attacks Against Smartphone Boot ROMs

Boot ROMs are an immutable component of any hardware platform, and ...

youtube.com
1
12
1,151
Mastho retweeted
Angelboy
@scwuaptxAug 7
My #BHUSA 2026 slides are online! It was an honor to share our AFD research and how a different perspective led to 30+ Windows kernel vulnerabilities. Blog post coming soon — check out the slides here: i.blackhat.com/BH-USA-26/Pre…
4
148
6
512
71,064
Mastho retweeted
REcon
@reconmtlApr 27
We have started announcing Recon 2026 Presentations recon.cx/2026/en/speakers.ht… More talks to be announced soon once we have confirmations @frodosobon @realytcracker @allthingsida @hexnomad @0x464D @hunterbr72 @joegrand @clearbluejar @InvokeReversing @LennertWo @pinkflawd @Coiffeur0x90 @MathildeVenault @NicoleFishi19 @nicolodev @phLaul @SinSinology @i0n1c @mr_phrazer @tmanning @hex86_64 #REcon2026 #ReverseEngineering #InfoSec #cybersecurity
1
24
1
86
12,505
Our training "Bug Hunting in Hypervisors"  returns at @reconmtl in 2026! Taught by researchers actively working on real-world hypervisor exploitation #Pwn2Own Designed for security researchers, we will dive into VM escapes, hypervisor attack surfaces, and real-world exploitation
2
6
1
20
5,063
stop using ubuntu 24.04 to host your kernel pwn challenges lmao kqx.io/post/qemu-nday/
5
87
3
560
71,913
If you missed HEXACON 2025 or want to rewatch some of the talks, they’re now available on our YouTube channel 📽️ Enjoy the content, and see you in 2026! youtube.com/playlist?list=PL…

HEXACON 2025

youtube.com
1
58
2
130
29,066
finally got around to writing up my windows exploit from pwn2own vancouver 2024! (plus some notes about using it on xbox) exploits.forsale/pwn2own-202…
6
91
1
351
40,751
Our new blog post is live: blog.dfsec.com/ios/2025/05/3…

Blasting Past iOS 18

Dataflow Security blog

blog.dfsec.com
2
83
2
262
60,825
Replying to @typhooncon
@typhooncon is already over, but we enjoyed every minute ! During our talk "Journey To Freedom", we disclosed for the first time the details on the Windows LPE we used at Pwn2Own Vancouver 2024 after escaping from VirtualBox. Slides are already available: reversetactics.com/publicati…
13
1
42
5,213
Thrilled to share our latest deep dive into Windows Kernel Streaming! Just presented this research at @offensive_con. Check it out: devco.re/blog/2025/05/17/fra…

Frame by Frame, Kernel Streaming Keeps Giving Vulnerabilities | DEVCORE 戴夫寇爾

In-depth research into Windows Kernel Streaming vulnerabilities, revealing MDL misuse, buffer misalignment, and exploitation techniques used in CVE-2024-38238 and others.

devco.re
2
82
2
299
31,192
Our latest blog post: Tracing Back to the Source | #SPTM Round 3 #TXM #iOS #macOS #DFF df-f.com/blog/sptm3

Tracing Back to the Source | SPTM Round 3

Our goal at DFF is to reveal any threats on mobile devices, and that requires us to keep up to date with every single version of Android and iOS, including the beta and "Developer Preview" phases....

df-f.com
2
49
2
111
23,074
The report of the #FreeBSD audit conducted by @masthoon and @jbcayrou is finally out! freebsdfoundation.org/blog/s…

Strengthening FreeBSD: Addressing Vulnerabilities Through Synacktiv’s Code Audit | FreeBSD Founda...

With funding from the Alpha-Omega Project, the FreeBSD Foundation recently partnered with the offensive security firm Synacktiv to perform an in-depth security audit of critical FreeBSD components,...

freebsdfoundation.org
38
72
7,984
"0-click RCE on Tesla Model 3 through TPMS Sensors" 🚗 by David BERARD (@_p0ly_) & Thomas Imbert (@masthoon)
1
32
6
124
18,431
Excited to share our research on Kernel Streaming! We discovered several vulnerabilities in it that we used at Pwn2Own this year. Check it out: devco.re/blog/2024/08/23/str…

Streaming vulnerabilities from Windows Kernel - Proxying to Kernel - Part I | DEVCORE 戴夫寇爾

This research will discuss an overlooked attack surface that allowed us to find more than ten vulnerabilities within two months. Additionally, we will delve into a proxy-based logical vulnerability...

devco.re
5
124
4
325
46,268
After nearly 10 years of existence, years of use in production on 10k+ computers. The new PythonForWindows release is 1.0.0 \o/ This release adds three important things: official python 3 support, full Unicode support for py2/py3 & CI testing on GitHub ! github.com/hakril/PythonForW…

GitHub - hakril/PythonForWindows: A codebase aimed to make interaction with Windows and native...

A codebase aimed to make interaction with Windows and native execution easier - hakril/PythonForWindows

github.com
2
25
1
57
6,987
Ticket sales for #HEXACON2024 are now OPEN! 📆 4th & 5th of October 2024 🎫 Standard price: 1210€ 🎟 Reduced price: 660€ hexacon.fr/register/

Hexacon - Register

Offensive security conference organized by seasoned professionals, in the heart of Paris. 16-17th October 2026, save the date!

hexacon.fr
18
2
29
5,465
#HEXACON2024's call for paper is officially open! 📅 29 May - Mid July ▶️ cfp.hexacon.fr/hexacon-2024/ As always, thanks again for our committee members who are willing to dedicate some of their valuable time to assess and review the submissions!
1
18
1
27
9,417
Registration for trainings is now open! ⏳ Don't miss your chance to learn from the best and have a great time in Paris 🥐 hexacon.fr/register/
13
26
5,271
The team is getting ready for the next #Pwn2Own with some good stuff, stay tuned 😉
TrendAI Zero Day Initiative
@thezdi14 Mar 2024
Just hours left to enter. See you next week!
12
1
90
12,512
Load more