Steph 🇷🇪🇫🇷 @defane

Joined April 2009

Tweets

13
Followers

268
Following

851
Likes

45K

SEC Consult @sec_consult

5 months ago

🚨 Critical vulns in dormakaba exos 9300! We’re sharing 20 CVEs in dormakaba’s physical access control system: doors can be opened without authentication with network access. Kudos to @dormakaba for excellent handling & patches. 👉 r.sec-consult.com/dormakaba #ResponsibleDisclosure

0 8 26 4K 7

View Details

kmkz @kmkz_security

5 months ago

2 y ago we tried to submit a research projet on this components to a defense CFP because this has a huge attack surface since it is used almost anywhere ! ->rejected : not innovative (yep, not AI content - literally this) ... but @sec_consult did not try: they did 👌🏻👏👏

SEC Consult @sec_consult

5 months ago

0 8 26 4K 7

0 3 7 2K 1

View Details

kmkz @kmkz_security

a year ago

After the MS process...and the reward 🙄 our #Microsoft AutoUpdate #EoP vuln. is not a #0day anymore Good job of our teammate @defane Note: it is not "just" an #LPE affecting MS products so think about this when using #O365 on your #MacBook msrc.microsoft.com/update-guide/v… #patchtuesday

0 2 14 2K 1

View Details

Mickey Jin @patch1t

2 years ago

As promised, I just dropped a dozen new sandbox escape vulnerabilities at #POC2024 If you missed the talk, here is the blog post: jhftss.github.io/A-New-Era-of-m… Slides: github.com/jhftss/jhftss.… Enjoy and find your own bugs 😎

Mickey Jin @patch1t

2 years ago

Actually, 15+ new sandbox escape vulnerabilities discovered. All of them are simple logic issues. You may find your own sandbox 0-days by yourself after listening to this talk!🔥🔥🔥

3 36 244 105K 88

12 144 493 84K 270

View Details

kmkz @kmkz_security

2 years ago

Thanks @orangecyberch for the mention of our recent publication (cc @defane) Very good paper too, I guess the Bitlocker/PIN privesc is now pretty well documented :p