Principal Vulnerability Researcher. Occasional Pwn2Owner

London, England
Joined March 2017
Was a lot of fun giving this talk with @patateQbool showing off the stupid stupid stuff we do to pop mobile devices at Pwn2Own
1
9
53
12,241
It's the bug of the day for Day Two of #Pwn2Own Ireland! Interrupt Labs shows us how it's done.
4
2
36
4,573
It was DOOMsday for the Lexmark CX532adwe printer as Interrupt Labs (@InterruptLabs) claimed victory and earned $5k & 2 Master of Pwn points! #Pwn2Own #DoomHack
5
1
14
3,632
Sweet! In the final attempt of the day, Interrupt Labs (@InterruptLabs) successfully targeted the Garmin Index BPM in the Wellness category. They head off for the final disclosure of #Pwn2Own Ireland 2026 Day One. #P2OIreland
5
16
3,339
Another Collision 💥 4 bugs - 3 collisions & 1 zero-day successfully exploit the Samsung Galaxy S26 and Interrupt Labs (@InterruptLabs) takes home $15,750 and 3.25 Master of Pwn points #Pwn2Own
10
113
6,390
maxpl0it retweeted
[ZDI-26-252|CVE-2026-4698] Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability (CVSS 8.8; Credit: maxpl0it) zerodayinitiative.com/adviso…
2
11
2,147
Another big confirmation! Ben R. And Georgi G. of Interrupt Labs used an improper input validation bug to take over the Samsung Galaxy S25 - enabling the camera and location tracking in the process. They earn $50,000 and 5 Master of Pwn points. #Pwn2Own
3
13
3
112
52,083
Sweet! The team from Interrupt Labs used hardly any time at all exploiting the Lexmark CX532adwe and posting their message on the LCD. They head off tot the disclosure room to explain themselves. #Pwn2Own
1
4
4,236
Was amazing being a part of this. Thank you everyone who made it such a success and congratulations to the CTF competition winners! 🎉
2
6
2,333
Checkout this 'Pathway to VR' profile from Axel, a Principal Researcher in our Browsers team in the US. Axel chats about how forming a community and presence for yourself online can be a great door-opener in the world of VR.
6
35
3,144
📣 The latest instalment of our VR Development Programme resources is now available on YouTube! 📣 An introduction to ARM64, ARM32 and x86-64 assembly for vulnerability research. youtube.com/watch?v=c7utLPD1…
21
1
63
12,466
📣 Exciting news for aspiring vulnerability researchers - a selection of our internal VR Development Program training resources are now available on GitHub! Check them out at github.com/interruptlabs/VRD… These ones are on software development: programming in C and Python.
2
43
1
145
10,031
I guess this mf of @patateQbool is finally hanging out with the cool kids @maxpl0it @sam4k1
1
3
20
5,365
This guy is way too nice. @SinSinology is one of the greats and it’s great to finally meet him face-to-face 💪
I finally met Max (@maxpl0it) irl, one of the browser gods, He has always been one of my idols impossible to reach his level (^_^)
2
75
6,196
Many thanks to @InterruptLabs for supporting this year’s Offensivecon as a gold sponsor!
1
1
15
6,294
🤡 Best Meme Target 🤡 WINNER: yltsi: manipulating operator menu settings on a Pump It Up XX: 20th Anniversary Dance Machine 🕺 RUNNER UP: @maxpl0it , @InterruptLabs: demoing a 1-Click RCE (XSS + Auth RCE) in mFi mPower Pro WiFi-Enabled Power Extender 🔌
1
3
6
1,411
Great match with @0f01c1, @munmap, and some other colleagues A nail-biting win against Spain
Another great team trip on Wednesday, watching England's Lionesses vs Spain at Wembley. #itscominghome
9
1,945
Announcing #Pwn2Own Berlin! We're moving our enterprise-focused event to @offensive_con and introducing an AI category. More than $1,000,000 in cash & prizes (Incl. a Tesla) are available to win. Check out the details at zerodayinitiative.com/blog/2…
5
58
12
248
98,423
Really happy I got to be a part of the inaugural DistrictCon Junkyard contest Was lucky enough to be the runner up for the ‘Best Meme Target’ prize! Huge props to the @DistrictCon crew for overcoming some extremely difficult circumstances Will absolutely be back next year!
🔟 ClickShock ⚡🖱️ @Maxpl0it from @InterruptLabs achieves 1-click RCE (XSS + Auth RCE) in the mFi mPower Pro smart power extender.
1
4
35
4,478