@pixiepointsec

A Cybersecurity Consultancy Boutique that Provides Niche & Bespoke Research Services

 Singapore
pixiepointsecurity.com
Joined September 2019
  • Tweets30
  • Following0
  • Followers798
4Media
If you like 0-day and N-day research, we'll love to hear from you! pixiepointsecurity.com/caree…

Join The Team | PixiePoint Security

PixiePoint Security is a cybersecurity consultancy boutique that offers niche and bespoke research services

pixiepointsecurity.com
2
2
8
9% into 2026 and look what @cloudlldb already have... :)
1
1
16
4,129
What better way to get into x'mas vibes than @flyingpassword dropping a BFS n-day (CVE-2025-29970) blog post! (Santa would approve :)) Merry X-mas! pixiepointsecurity.com/blog/…

Microsoft Brokering File System Elevation of Privilege Vulnerability | PixiePoint Security

About 2 years ago, Microsoft first released Win32-App-isolation which is a sandbox-like mechanism to further separate application access to resources on Windows clients. Brokering File System (BFS)...

pixiepointsecurity.com
2
12
2
42
9,363
And... hot on the heels will be @voix44er attempting the Philips Hue Bridge this week! All the best and have fun!
1
1
1
7
3,310
Looks like @__neverm0r_ and @b1thvn_ TyphoonPwn entry is patched this month as CVE-2025-55681... thanks @SecuriTeam_SSD for the fun experience!
2
1
17
4,573
If u think that Windows research is all we do, think again! In our first IOT blog, @voix44er details the Wolfbox EV charger setup, attack surface, his #Pwn2Own Automotive 2025 bug, exploitation, and best of all, displaying our name on it (in styleee...)! pixiepointsecurity.com/blog/…
19
2
68
6,303
Happy Friday! Our intern, @__neverm0r_ , discovered and reported a NPD due to race-condition in afd.sys. Wasn’t assigned a cve doesn’t mean it’s less interesting, right!? pixiepointsecurity.com/blog/…

Windows Ancillary Function Driver (afd.sys) Race-Condition Null-Pointer Dereference | PixiePoint...

This blog will demonstrate a crash I found in Ancillary Function Driver for winsock (afd.sys). The bug was a race condition in Windows Registered Input/Output component that led to a NULL pointer...

pixiepointsecurity.com
23
4
111
35,803
Proud to see @_jaelkoh (with @saidelike) talking about undocumented internals of KTM, the bugs and exploits in 'Hunting for Overlooked Cookies in Windows 11 KTM and Baking Exploits for Them'. No ovens required for this recipe!
offensivecon
@offensive_con25 Apr 2025
2025 agenda is out! offensivecon.org/agenda/2025…
3
1
10
2,647
Unfortunate, but still a good showing! 🫡
TrendAI Zero Day Initiative
@thezdi23 Jan 2025
Replying to @thezdi
Confirmed (with a collision)! Rafal Goryl of PixiePoint Security used a 2 bug chain to exploit the WOLFBOX Level 2 EV Charger, but one of the bugs was previously known. He earns himself $18,750 and 3.75 Master of Pwn points. #P2OAuto
1
3
797
Annnddd... the odds ARE in your favor! Congrats @voix44er ! This result is just the cherry on the cake. Regardless of what it may be, what we don't see is the dedication and hard work put into the research.. 💪💪💪
TrendAI Zero Day Initiative
@thezdi23 Jan 2025
Success! On his second attempt, Rafal Goryl of PixiePoint Security was able to exploit the WOLFBOX EV charger. He heads off the the disclosure room to provide us with all the details. #P2OAuto #Pwn2Own
3
1
9
1,582
Hello world! First post in 2025; @voix44er attempting to pwn WolfBox EV charger at #P2OAuto on Day 2. “May the odds be ever in your favor”!
5
1
13
2,207
Replying to @b1thvn_
@b1thvn_ did this for fun… POC for CVE-2024-38106 pixiepointsecurity.com/blog/…

Dissecting the CVE-2024-38106 Fix | PixiePoint Security

In the security patches for August, Microsoft fixed several ntoskrnl.exe bugs, and one of them (CVE-2024-38106) being exploited in the wild. As anything ITW always require closer attention, we...

pixiepointsecurity.com
1
19
1
45
7,741
Sometimes your past has a way of sneaking up/"garbage-collecting" on you.. Well done @b1thvn_, and thanks @TheZDIBugs for tracking these zerodayinitiative.com/adviso… zerodayinitiative.com/adviso…
1
3
1,178
Credit: Dewang Ahluwalia
1,408
All shells are spawned equal, regardless of memory-corruption bugs or not! CVE-2021-34462: Exploiting the Windows AppXSvc Service Logic-Error Vulnerability pixiepointsecurity.com/blog/…
1
31
2
65
13,749
Credit: Wei Lei
4
1,407
New year, new blog post! CVE-2021-31985: Exploiting the Windows Defender AsProtect Heap Overflow Vulnerability pixiepointsecurity.com/blog/…
1
62
2
152
30,711
Corrected url: googleprojectzero.github.io/…

CVE-2022-24521: Windows Common Log File System (CLFS) Logical-Error Vulnerability

Information about 0-days exploited in-the-wild!

googleprojectzero.github.io
5
Props to @maddiestone for maintaining this ITW RCA program :)
1
4
As it is confirmed to be the ITW CVE-2022-24521, we also contributed the content to GP0 for interested folks googleprojectzero.github.io/…
PixiePoint Security@pixiepointsec25 Apr 2022
RCA for 1 of the 2 CLFS bugs patched in April 2022. While we can't determine the CVE, we did managed to exploit it ;) ... credit: @b1thvn_ pixiepointsecurity.com/blog/…
1
14
2
51
RCA for 1 of the 2 CLFS bugs patched in April 2022. While we can't determine the CVE, we did managed to exploit it ;) ... credit: @b1thvn_ pixiepointsecurity.com/blog/…
56
4
141
Load more