@XploitBengineer

Android Vulnerability Researcher, Pwn2Own 202{3,5,6}

 planet earth
Joined April 2016
  • Tweets212
  • Following634
  • Followers1.1K
13Media
Verified! The 1st full win the the Wellness category has Interrupt Labs (@InterruptLabs) using an OOB Read and an OOB Write to exploit the Garmin Index BPM. They win $20,000 and 2 Master of Pwn points. #Pwn2Own
6
1
34
4,063
Ben retweeted
pam@pamoutafOct 10
Managed to get @opa334dev to talk about the TSS bug on chITchat 👀 You can listen on most platforms but here is the link to Spotify. Will upload to youtube as well. open.spotify.com/episode/5fI…

Opa334 - TSS bug and Dopamine

chITchat by pamoutaf · Episode

open.spotify.com
[email protected]@opa334devOct 9
RIP 🪦 Craziest bug I have ever seen in my 10 years of being in the iOS scene. I really wish Apple would stop being so anti consumer. Everyone who knew about this had an SRD suddenly overnight and nothing bad happened.
1
26
2
177
31,429
It was DOOMsday for the Lexmark CX532adwe printer as Interrupt Labs (@InterruptLabs) claimed victory and earned $5k & 2 Master of Pwn points! #Pwn2Own #DoomHack
5
1
14
3,674
Wow - the setup took a while (and included Starlink!), but Interrupt Labs (@InterruptLabs) successfully exploited the #Samsung Galaxy S26. They're off to the disclosure room to provide the details. #Pwn2Own
9
40
4,390
Anthropic valuation - $2 trillion Samsung valuation - $1.35 trillion Anthropic 2025 revenue - $4.6 billion Samsung 2025 revenue - $236 billion
510
4,049
336
59,764
2,745,046
a lot of people dont appreciate the difference in required effort for a 1% reliable mem corruption exploit vs 10% vs 99% . this post projectzero.google/2026/01/p… by @natashenka expresses this well. the truth is that often a 10% reliability exploit is *no progress to full reliability*
3
12
5
95
17,050
$6,500... I guess next time you can just sell the access to the Chinese
s1r1us
@S1r1u5_Sep 18
Replying to @S1r1u5_
We reported the bug to Discourse and OpenAI. OpenAI fixed the SSO issue roughly 14 hours after our initial submission. Discourse received our separate report Saturday, replied Sunday, and had a fix Monday. OpenAI awarded us $6,500.
19
1,286
Ben retweeted
pam@pamoutafAug 14
We’re back with @yarden_shafir to talk about going from baker to hacker, windows internals, exploit techniques and more! open.spotify.com/episode/5pu… This one’s for you benoit
2
10
2
51
11,682
Ben retweeted
pam@pamoutafAug 10
Today is a good day 😁 exciting news + first report filed to Meta VRP
1
16
864
Ben retweeted
pam@pamoutafAug 5
step 1 accomplished
2
1
9
922
Anthropic marketing: *checks notes* don't forget about us! We also let our models commit crimes
Ben@XploitBengineerJul 23
Let me get this straight Anthropic made a LLM so intelligent that cybersec is doomed, but have a flagship product riddled with bugs Now OpenAI made an LLM so intelligent that cybersec is doomed, but can't design a suitable environment to test it in 🤔
7
526
Let me get this straight Anthropic made a LLM so intelligent that cybersec is doomed, but have a flagship product riddled with bugs Now OpenAI made an LLM so intelligent that cybersec is doomed, but can't design a suitable environment to test it in 🤔
5
2
2
49
4,810
Can't win them all I guess :(
TrendAI Zero Day Initiative
@thezdiMay 14
Unfortunately, Interrupt Labs could not get their exploit of NV Container Toolkit working within the time allotted. #Pwn2Own #P2OBerlin
2
26
2,974
Security researchers become trapped into an identity that they can’t escape, life seems purposeless, reality shifts and they realize they can’t bend like a tree in the wind. It turns out that intelligence isn’t the key to happiness. For those that know. Chop wood, carry water.
L4ys
@_L4ysMay 7
0days doesn't seem cool enough anymore. what should real hackers be doing now?
6
25
1
287
25,046
📣New Android Vulnerability Researcher vacancy. Open to mid-level, senior and principal researchers. interruptlabs.teamtailor.com…
5
42
3,676
Had a blast in Seoul with @munmap speaking at Zer0Con Huge thanks to @POC_Crew and the other attendees for being so welcoming. Definitely a great event for my first speaking gig
3
1
41
2,551
🤖Georgi G(@munmap) & Ben R(@XploitBengineer) - Promp2Pwn – LLMs Winning at Pwn2Own
6
59
4,580
Ben retweeted
pam@pamoutafMar 17
Long overdue episode with the iOS avengers @s1guza @littlelailo @iBSparkes @jonpalmisc @hdemoff_ open.spotify.com/episode/7Iy…

The iOS Avengers - Is jailbreaking dead?

chITchat by pamoutaf · Episode

open.spotify.com
1
10
1
42
8,183
We'll be in Seoul talking about AI and Samsung 1-clicks :)
POC_Crew
@POC_CrewMar 9
#Zer0Con2026 - SPEAKER 🤖 Georgi G(@munmap) & Ben R(@XploitBengineer) from Interrupt Labs - “Promp2Pwn - LLMs Winning at Pwn2Own” For more: zer0con.org
1
3
42
3,357
Ben retweeted
rev.ng
@_revngFeb 5
🎥 How does rev.ng detect jump table? In this presentation Ale explains how the rev.ng decompiler detects jump tables and, more in general, how it devirtualizes indirect jumps.
1
4
24
2,143
Load more