Jack (@xploit_dev) header
Jack (@xploit_dev) profile picture

Jack

@xploit_dev

Principal Exploit Developer @breakpointres | https://teapawt.net/t.co/jUrxTxxq3F

 London, England
xploit.dev
Joined September 2023
  • Tweets19
  • Following395
  • Followers94
I posted a short blog about how a Samsung GPU vulnerability (CVE-2025-21479) can be leveraged for an LPE on affected devices xploitbengineer.github.io/CV…

Exploiting CVE-2025-21479 on a Samsung S23

Motivation A couple of years ago, I picked up a few of Samsung S23’s at Pwn2Own.

xploitbengineer.github.io
6
80
2
250
29,979
Bang! Interrupt Labs successfully took over the #Samsung Galaxy 25 with 1 click. They remotely enabled the camera and location services, which has some frightening privacy implications. They head off to the disclosure room to explain how it works. #Pwn2Own
1
9
3
45
15,512
📣 Exciting news for aspiring vulnerability researchers - a selection of our internal VR Development Program training resources are now available on GitHub! Check them out at github.com/interruptlabs/VRD… These ones are on software development: programming in C and Python.
GitHub - interruptlabs/VRDP-C-Python: C and Python training from our Vulnerability Researcher...

GitHub - interruptlabs/VRDP-C-Python: C and Python training from our Vulnerability Researcher...

C and Python training from our Vulnerability Researcher Development Program (VRDP) - interruptlabs/VRDP-C-Python

github.com
2
42
1
145
10,031
A fantastic opportunity for an experienced vulnerability researcher to join our word-class Browsers team. Remote work, hybrid or in office opportunities available. Check out our careers page for the full range of roles available globally. buff.ly/4apXYC1
15
43
7,156
code auditing for exploitable bugs is a lot of labor. building fuzzers to find exploitable bugs is a lot of labor. stop trying to find shortcuts. expect to put in a lot of time and sustained effort. can’t be frustrated when you haven’t put in the effort
4
36
4
296
69,003
RCU stands for read, copy, use-after-free right? 🧐
2
2
1
15
3,604
Exploit Mitigations, aka diversifying your attack surfaces
2
7
82
10,645
I recently found an exploitable timing leak in the reference implementation of Kyber (ML-KEM), the soon-to-be NIST standard for post-quantum key encapsulation. Let’s see if you can spot it in the source code - msg is secret:
Image from Antoon Purnal (@PurnalToon)
12
151
26
694
174,541
#xzutils What an legendary change. "suddenly disappeared"
Image from Iceman (@herrmann1001)
30
422
32
3,810
216,666
Waiter, can I get Semgrep with my Binja? Checkout this plugin that our intern developed to bring native Semgrep support to Binary Ninja! interruptlabs.co.uk/articles…
17
42
7,088
You don’t FIND exploits. You build them. You FIND vulnerabilities and exploit them. As an exploit developer that has failed to exploit lots of bugs that look good, the distinction is important 😭
22
82
8
706
61,534
We continue to look for Vuln Researchers in the UK, US and Australia with potential options for remote folk... jobs.gohire.io/interrupt-lab…

Jobs at Interrupt Labs

jobs.gohire.io
9
16
4,487
[Zer0Con2024⬛️🟨Speaker#3] 👨‍👩‍👦‍👦 @munmap, @patateQbool, @MateuszFruba & @maxpl0it - Beyond Android MTE: Navigating OEM's Logic Labyrinths #Zer0Con2024
Image from POC_Crew (@POC_Crew)
5
1
40
11,551
Load more