@XploitBengineer

Android Vulnerability Researcher, Pwn2Own 202{3,5,6}

 planet earth
Joined April 2016
  • Tweets212
  • Following634
  • Followers1.1K
13Media
Verified! The 1st full win the the Wellness category has Interrupt Labs (@InterruptLabs) using an OOB Read and an OOB Write to exploit the Garmin Index BPM. They win $20,000 and 2 Master of Pwn points. #Pwn2Own
6
1
34
4,069
Ben retweeted
pam@pamoutafOct 10
Managed to get @opa334dev to talk about the TSS bug on chITchat 👀 You can listen on most platforms but here is the link to Spotify. Will upload to youtube as well. open.spotify.com/episode/5fI…

Opa334 - TSS bug and Dopamine

chITchat by pamoutaf · Episode

open.spotify.com
[email protected]@opa334devOct 9
RIP 🪦 Craziest bug I have ever seen in my 10 years of being in the iOS scene. I really wish Apple would stop being so anti consumer. Everyone who knew about this had an SRD suddenly overnight and nothing bad happened.
1
26
2
175
31,676
It was DOOMsday for the Lexmark CX532adwe printer as Interrupt Labs (@InterruptLabs) claimed victory and earned $5k & 2 Master of Pwn points! #Pwn2Own #DoomHack
5
1
14
3,687
Wow - the setup took a while (and included Starlink!), but Interrupt Labs (@InterruptLabs) successfully exploited the #Samsung Galaxy S26. They're off to the disclosure room to provide the details. #Pwn2Own
9
40
4,392
Anthropic valuation - $2 trillion Samsung valuation - $1.35 trillion Anthropic 2025 revenue - $4.6 billion Samsung 2025 revenue - $236 billion
509
4,049
336
59,714
2,745,753
a lot of people dont appreciate the difference in required effort for a 1% reliable mem corruption exploit vs 10% vs 99% . this post projectzero.google/2026/01/p… by @natashenka expresses this well. the truth is that often a 10% reliability exploit is *no progress to full reliability*
3
12
5
95
17,074
Ben retweeted
pam@pamoutafAug 14
We’re back with @yarden_shafir to talk about going from baker to hacker, windows internals, exploit techniques and more! open.spotify.com/episode/5pu… This one’s for you benoit
2
10
2
52
11,687
Ben retweeted
pam@pamoutafAug 10
Today is a good day 😁 exciting news + first report filed to Meta VRP
1
16
865
Ben retweeted
pam@pamoutafAug 5
step 1 accomplished
2
1
9
923
Security researchers become trapped into an identity that they can’t escape, life seems purposeless, reality shifts and they realize they can’t bend like a tree in the wind. It turns out that intelligence isn’t the key to happiness. For those that know. Chop wood, carry water.
L4ys
@_L4ysMay 7
0days doesn't seem cool enough anymore. what should real hackers be doing now?
6
25
1
287
25,046
📣New Android Vulnerability Researcher vacancy. Open to mid-level, senior and principal researchers. interruptlabs.teamtailor.com…
5
42
3,678
🤖Georgi G(@munmap) & Ben R(@XploitBengineer) - Promp2Pwn – LLMs Winning at Pwn2Own
6
59
4,581
Ben retweeted
pam@pamoutafMar 17
Long overdue episode with the iOS avengers @s1guza @littlelailo @iBSparkes @jonpalmisc @hdemoff_ open.spotify.com/episode/7Iy…

The iOS Avengers - Is jailbreaking dead?

chITchat by pamoutaf · Episode

open.spotify.com
1
10
1
42
8,185
Ben retweeted
rev.ng
@_revngFeb 5
🎥 How does rev.ng detect jump table? In this presentation Ale explains how the rev.ng decompiler detects jump tables and, more in general, how it devirtualizes indirect jumps.
1
4
24
2,146
Ben retweeted
Roger@r0rt1z2Jan 30
After weeks of reverse engineering MediaTek's DA2 with @shomykohai, we finally figured out how the V6 exploit works. We decided to call it heapb8 ("heapbait")! Technical writeup: blog.r0rt1z2.com/posts/explo… PoC: github.com/shomykohai/penumb…
2
64
2
235
28,106
I hear a high-profile Pwn2Own winner is fuming now that we've dropped a 0-day affecting their home setup. Perfect time to leverage that MITM access and ransack years' worth of bugs if you happen to be sitting in the right network 🙂
Interrupt Labs@InterruptLabsJan 29
Latest from our Labs - @XploitBengineer looks at how NAS vendors get TLS wrong, and why this matters. interruptlabs.co.uk/articles…
9
106
13,210
Ben retweeted
pam@pamoutafJan 5
Helloooo! BlackHoodie still has some spots for their training at DistrictCon. The class will focus on reverse engineering and exploiting an integer overflow bug in libpng, with @pinkflawd Sign up today 😊 blackhoodie.re/DistrictCon20…

Blackhoodie at DistrictCon 2026

Why, hello! BlackHoodie is super excited to be partnering with DistrictCon in 2026, bringing a day of vulnerability hunting in binaries toWashington DC! Come join us for an exciting day of reverse...

blackhoodie.re
4
14
7,305
Mildly pimped-up demo of our #Pwn2Own exploit shown on a Galaxy S23. Mind the hysterical memes-to-0day ratio 😅 Props to @thezdi for putting up with us and to all the hackers who made it a blast.
3
11
74
6,374
Bang! Interrupt Labs successfully took over the #Samsung Galaxy 25 with 1 click. They remotely enabled the camera and location services, which has some frightening privacy implications. They head off to the disclosure room to explain how it works. #Pwn2Own
1
9
3
45
15,512
NEW: breach of Discord age verification data. For some users this means their passports & drivers licenses. Discord has only run age verification for 6 months. Age verification is a badly implemented data grab wrapped in a moral panic. Mark my words, as age verification mandates expand, we'll end up more surveilled and less secure.
16
117
37
334
160,406
Load more