Honored to receive the MVH award (Most Valuable Hacker) & the BIGGEST bounty Epic Games ever paid: $130,000! 🏆💰
Leaving the @EpicGames Live Hacking Event with a surreal win with my teammates with @Blaklis_ and Snorlhax. 🤯
My first LHE was with Epic in 2022, so this closes the loop perfectly. Having my parents there to see it meant the world. ❤️
Oh, and I beat Popeye at arm wrestling. 💪 What a month!
You just can't understand how much of an impact on cyber this will have.
Fellow hackers : PLEASE, go out and try our Le Chaton Fat (aka Le CHONK). We are so back !
Replying to @GuillaumeLample
We pushed the performance of ML4 on a very wide range of capabilities. On many of them, it reaches SOTA performance with the open models. In some domains such as visual grounding, legal, or spreadsheet manipulation, it even outperforms the best models.
ML4 ranks among the bests on AA Cyber Index, scores 82% on vulnerability reproduction and patching, and 93% on Cybench. Open models are the best defense for enterprises today: capable, auditable, self-hosted and governed under enterprise policies -- and more importantly, they do not refuse to help.
3/n
(っ◔◡◔)っ We are joining @MistralAI ! c(◔◡◔c)
I’m thrilled to announce that we are merging forces with @MistralAI
I am officially starting a new chapter as Cyber Ops Lead, and the best part is I’m not coming alone! I’m bringing part of the AllVei team with me to build the future of AI for Cyber :D
After talking with @GuillaumeLample and the founding team, it quickly became clear that we share the exact same obsession and mindset.
With Mistral, we’re scaling up to a whole new level: the innovative spirit of the French AI champion, incredible resources, and absolutely brilliant people to work with every day.
The fit was just too obvious 😄
A huge thanks to Guillaume and the entire Mistral team for their trust.
I also want to thank everyone who believed in AllVei over the last few months. Thank you to the incredible tech ecosystem in Brittany (Village By CA Finistère, @regionbretagne , @FTBrestPlus , @Bpifrance ), to the VCs, and to our amazing design partners.
Your support meant the world ❤️
Can’t wait to show you what we’re building. Let’s get to work 🔥
𝑯𝑨𝑪𝑲 𝑻𝑯𝑬 𝑷𝑳𝑨𝑵𝑬𝑻 :𝑫
doomerhunter (Victor Poucheret) retweeted
The threat actor who exploited elementary-data also probed cross-fetch:
github.com/lquixada/cross-fe…
@0xLupin and I had reported a vulnerability to the maintainer over a year ago that cut off the escalation path to impact releases via cache poisoning.
landh.tech/blog/20251003-36m…
doomerhunter (Victor Poucheret) retweeted
This is only part 1 of my cross-tenant research series. There are many more #CloudSecurity and #InfoSec writeups to come!
Read the full technical deep-dive here: omeramiad.com/posts/gatewayt…
doomerhunter (Victor Poucheret) retweeted
Yay, we (@DoomerOutrun Snorlhax and I) were awarded a $125,000 bounty on @Hacker0x01, for a single bug! Thanks, Epic!
hackerone.com/blaklis #TogetherWeHitHarder
doomerhunter (Victor Poucheret) retweeted
Congratulations to the #H1468 award winners! 🎉 Thank you for your incredible work in Stockholm. Your contributions help make the digital world safer for everyone.
Most Valuable Hackers & Best Collaboration:
-blaklis
-snorlhax
-doomerhunter
Eliminator:
-holyfield
Eradicator & Exterminator:
-rhynorator
Community Choice:
-joaxcar
Epic Unreal Hacker:
-ali
doomerhunter (Victor Poucheret) retweeted
🇫🇷🎙️Nouvel épisode du podcast Hack'n Speak accompagné de @DoomerOutrun 🌺
On parle de son parcours, de bug bounty, d'évènement on site et d'IA ! 🥇
Bonne écoute à toutes et à tous 🎶
creators.spotify.com/pod/pro…
Hack in Milan : Went on a trip, found a few crits with the boys @Geluchat @n1nj4sec :D Check out the edit below.
📣 Nujabes - Feather
Really great challenge by @Hacker0x01 can't wait for the next one !
doomerhunter (Victor Poucheret) retweeted
I'm happy to release a script gadgets wiki inspired by the work of @slekies, @kkotowicz, and @sirdarckcat in their Black Hat USA 2017 talk! 🔥
The goal is to provide quick access to gadgets that help bypass HTML sanitizers and CSPs 👇
gmsgadget.com/
1/4
Sadly, my talk on AI Hackbots was turned down at @UYBHYS !
Where should I perform it now ? :D
doomerhunter (Victor Poucheret) retweeted
Ready to explore how AI is transforming Ethical Hacking?
We've put together some introductory hands-on examples including:
🔍 Recon & Discovery
Contextual subdomain enum, screenshot analysis, and content discovery
⚡ Exploit Development
Automated vulnerability detection
🤖 Hackbots
Using and extending open-source AI agents, leveraging Burp AI
🧠 Integrations & Plugins
MCP servers for Burp Suite and Ghidra, Caido Shift Plugin and custom tool orchestration
🏆 CTF Challenges
3 simple scenarios to test your skills
This repository contains a workshop guide, educational tools and scripts for learning how AI can be applied in offensive security.
Check it out: github.com/ethiack/ai4eh
Vibe hacking : Besides creating complex PoCs recently with agents, I've been using @NotebookLM to increase my efficiency.
Pretty crazy increase in performance on my side, ranging from :
- Providing perfect context to my AI agents to generate PoCs (got a couple very severe bugs with that)
- Scanning hundreds of page of documentation for the tiniest features and exploit them (should land us at least one Crit bug)
- Constructing better reports by pinpointing the right arguments / contexts / instructions
The more I build hackbots / hacking agents / toolings, the more I feel the definitive gap it will create in the long run with people who are able to leverage these tools to better learn / understand / exploit the attack surface.
Got the cutest fridge magnet after the @Hacker0x01 Milan event 🥹
Might be quite interesting for the AWS hackers out there
In case anyone is worried I have inside knowledge or broke an NDA for this.....I didn't. This is publicly available information that gets scrapped by my automation automatically.
You can find this API model here: a.b.cdn.console.awsstatic.co…
Publicly available, without auth :)
doomerhunter (Victor Poucheret) retweeted
I thought Golang had pretty secure defaults for parsing JSON, XML, YAML.
But apparently there are some unexpected security footguns...
@trailofbits' Vasco Franco explores unexpected behaviors in Go's JSON, XML, and YAML parsers that can lead to security vulnerabilities, including:
* Misuse of the "-" tag allowing unintended field (un)marshaling
* Case-insensitive key matching in JSON
* Parser differentials when processing the same input across services.
The post provides concrete examples and @semgrep rules for detection.
Mitigation recommendations:
* Use DisallowUnknownFields
* Implement custom strict parsing
* Watch for JSON v2 which addresses many issues
blog.trailofbits.com/2025/06…
#cybersecurity
doomerhunter (Victor Poucheret) retweeted
Does your WAF use IP restrictions, or are they more like IP recommendations? @nyxgeek reveals the difference between RemoteAddr and SocketAddr, a distinction that could create a 'sleeper' rule that looks secure but is easily bypassed. trustedsec.com/blog/azures-f…
I will now exclusively submit reports using video pocs in this tiktok format
doomerhunter (Victor Poucheret) retweeted
Turns out you can just hack any train in the USA and take control over the brakes. This is CVE-2025-1727 and it took me 12 years to get this published. This vulnerability is still not patched. Here's the story:
Perhaps one of the most badass CVE's I've ever seen from @midwestneil 💪😤
cisa.gov/news-events/ics-adv…



































