@xploit_dev

Principal Exploit Developer @breakpointres | https://xitter.cf/t.co/jUrxTxxq3F

 London, England
xploit.dev
Joined September 2023
  • Tweets19
  • Following395
  • Followers94
I’ll be at @warwickcybersoc misc0nfig with @InterruptLabs in February, come and discuss internships and associate roles!
Interrupt Labs@InterruptLabsJan 19
Really excited to be sponsoring and hosting a workshop at this at Warwick Uni in February! Come and chat to us if you're there - we're currently hiring summer interns and graduate-level researchers! For event details go to - warwickcybersoc.com/misc0nfi…
1
4
460
I posted a short blog about how a Samsung GPU vulnerability (CVE-2025-21479) can be leveraged for an LPE on affected devices xploitbengineer.github.io/CV…

Exploiting CVE-2025-21479 on a Samsung S23

Motivation A couple of years ago, I picked up a few of Samsung S23’s at Pwn2Own.

xploitbengineer.github.io
6
80
2
250
29,977
Bang! Interrupt Labs successfully took over the #Samsung Galaxy 25 with 1 click. They remotely enabled the camera and location services, which has some frightening privacy implications. They head off to the disclosure room to explain how it works. #Pwn2Own
1
9
3
45
15,512
📣 Exciting news for aspiring vulnerability researchers - a selection of our internal VR Development Program training resources are now available on GitHub! Check them out at github.com/interruptlabs/VRD… These ones are on software development: programming in C and Python.

GitHub - interruptlabs/VRDP-C-Python: C and Python training from our Vulnerability Researcher...

C and Python training from our Vulnerability Researcher Development Program (VRDP) - interruptlabs/VRDP-C-Python

github.com
2
42
1
145
10,031
A fantastic opportunity for an experienced vulnerability researcher to join our word-class Browsers team. Remote work, hybrid or in office opportunities available. Check out our careers page for the full range of roles available globally. buff.ly/4apXYC1
15
43
7,156
code auditing for exploitable bugs is a lot of labor. building fuzzers to find exploitable bugs is a lot of labor. stop trying to find shortcuts. expect to put in a lot of time and sustained effort. can’t be frustrated when you haven’t put in the effort
4
36
4
296
69,003
RCU stands for read, copy, use-after-free right? 🧐
2
2
1
15
3,604
Exploits are software, but Exploit Devs aren’t *just* Software Devs @chompie1337 explains the daily struggle 🙃
mdowd@mdowd26 Sep 2024
The less fun part of exdev
1
1
35
3,023
Imagine having a tool as good as Frida and literally having to ask ChatGPT how to use it 🤡 Docs be difficult
1
4
329
Exploit Mitigations, aka diversifying your attack surfaces
2
7
82
10,645
I recently found an exploitable timing leak in the reference implementation of Kyber (ML-KEM), the soon-to-be NIST standard for post-quantum key encapsulation. Let’s see if you can spot it in the source code - msg is secret:
12
151
26
694
174,541
#xzutils What an legendary change. "suddenly disappeared"
30
422
32
3,809
216,666
Waiter, can I get Semgrep with my Binja? Checkout this plugin that our intern developed to bring native Semgrep support to Binary Ninja! interruptlabs.co.uk/articles…
17
42
7,088
You don’t FIND exploits. You build them. You FIND vulnerabilities and exploit them. As an exploit developer that has failed to exploit lots of bugs that look good, the distinction is important 😭
22
82
8
706
61,534
We continue to look for Vuln Researchers in the UK, US and Australia with potential options for remote folk... jobs.gohire.io/interrupt-lab…

Jobs at Interrupt Labs

jobs.gohire.io
9
16
4,487
[Zer0Con2024⬛️🟨Speaker#3] 👨‍👩‍👦‍👦 @munmap, @patateQbool, @MateuszFruba & @maxpl0it - Beyond Android MTE: Navigating OEM's Logic Labyrinths #Zer0Con2024
5
1
40
11,551
Load more