Embedded device security researcher / VR / Pwn2Own
Joined September 2018
- Tweets1.6K
- Following823
- Followers1.3K
- Likes6.8K
Pinned Tweet
The story of how I almost pwned the Lexmark Postscript stack for Pwn2Own 2025... And I would have gotten away with it too, if it hadn't been for those meddling firmware updates!
boredpentester.com/pwn2own-2…
Josh retweeted
This is required reading for anyone who has complicated feelings on the state of offensive security.
One of the best posts I've read in a long time. atredis.com/blog/2026/10/22/…
Speakers at #TheSAS2026 got gifted legendary loot in the form of personalised jackets, btw! Look how cool they are! The organisers didn't have to be this awesome and it shows how much effort is put into the conference's finer details! Going to wear it everyday in the office! 🔥
Josh retweeted
Bluetooth sync is supposed to import your contacts. But Joshua Foote (@BoredPentester) had a different idea, and it became a path to root on a Kenwood DNR infotainment unit. Amazing how much you can get from one of the less scary looking Bluetooth profiles, PBAP (phonebook access). #theSAS2026
Insane effort 🔥
Team work makes the dream work <3
We wanted to do something a bit different than using LLM's to generate all the pieces from exploit, writeup and art. We decided on a human created comic to offset the LLM usage in our release, that tells the tale with some exaggerated scenarios inspired from a few movies.
If you liked the art (or want your own exploit story/comic..) check out her work at ibiscraft.art
Josh retweeted
Name another conference where the main stage turns into a rock concert during lunch break. 🤘 Only at #TheSAS2026! 🔥
Proctored / offline might be the only way🤞#theSAS2026
Watch these brilliant people breaking a system without Googling a single thing.
No internet, no shortcuts. Just skill and increasingly personal relationships with the debugger.
That’s why this offline #CTF might be our favorite attraction at #TheSAS2026.
A few from Bali ahead of speaking at #theSAS2026 on attacking IVIs over Bluetooth later this week 🪲🔥
One of mine and my team (once they update/correct the credits)🔥. You may want to patch 👀
We have issued immediate guidance for CVE-2026-107406 in NetScaler ADC and NetScaler Gateway: bit.ly/4rWRBz4
We strongly urge affected customers to review the advisory and upgrade impacted NetScaler instances to the recommended versions as soon as possible.
Josh retweeted
I work with cool people 🔥 @boredpentester
Exploit Confirmed! @BoredPentester successfully exploited Lexmark CX532adwe in the Printers category with 1 collision and 2 zero-days for a net total of $4250 and 1.25 Master of Pwn points #Pwn2Own
Josh retweeted
Exploit Confirmed! @BoredPentester successfully exploited Lexmark CX532adwe in the Printers category with 1 collision and 2 zero-days for a net total of $4250 and 1.25 Master of Pwn points #Pwn2Own
Josh retweeted
Very impressive that this is a memory corruption issue.
BTW I'm curious about the bounty. We've got a wormable RCE in a similar APP with hundreds of millions of users, and their SRC's bounty is like ~$500 for that 🤡
Today we published WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android.
We call you on WeChat and, without you answering or doing anything, take over your account within seconds. Then we use your phone to call your friends.
Story and demos: calif.io/research/weworm
