Security Researcher & Exploit Developer @VulnCheckAI
- Tweets 2,221
- Following 323
- Followers 4,060
- Likes 5,515
ʞʞıdɐɔoɥƆ retweeted
Quand un non-dev me demande comment je travaille avec l’IA :
102
394
3,702
220,313
ʞʞıdɐɔoɥƆ retweeted
Did I mention they also shipped 100+ exploits this week, including a new MikroTik disclosure and an original exploit for Citrix NetScaler CVE-2026-107406?
docs.vulncheck.com/initial-a…
Our team's (private) #php2shell exploit now supports:
- PHP 8.4.10 - 8.4.26 on AMD64 + ARM64 with ASLR
- PHP 8.5.10 and 8.5.11 on AMD64 + ARM64 with ASLR
* WordPress exploitation on default Docker installs running the above versions of PHP
vulncheck.com/blog/php2shell…
3
1
26
2,555
ʞʞıdɐɔoɥƆ retweeted
Reprise de Stream en vue ! 🔭
La rentrée x41 - Retex 1A, 2A, et Profs 🍀
- Date : Mardi 20 Octobre à 20h 🗓️
- Location : twitch.tv/thelaluka + rediffs on @OteriaCS
- Guests Staff : @TheLaluka @itsmebeemo @spritz_41
- Guests Studs : @thismathis1 @wyshteria @anska_ Erwan
2
11
848
ʞʞıdɐɔoɥƆ retweeted
"Un ingé IA en France ne gagne que 50k/ans à Paris alors qu'aux US il en gagnerai 500k"
job-boards.greenhouse.io/ant…
41
12
177
44,518
ʞʞıdɐɔoɥƆ retweeted
A hell of a week indeed — though @Chocapikk_ is underselling just how many of these exploits were his own 😂 🐚
Hell of a week with the IAI team at @VulnCheckAI. 26 exploits shipped in a single release. Grateful to work alongside people this sharp. Full coverage here: docs.vulncheck.com/initial-a…
2
7
1,107
Hell of a week with the IAI team at @VulnCheckAI. 26 exploits shipped in a single release. Grateful to work alongside people this sharp. Full coverage here: docs.vulncheck.com/initial-a…
1
4
1,558
ʞʞıdɐɔoɥƆ retweeted
The @VulnCheckAI research team has a root cause analysis and exploit walk-through on Cisco SD-WAN CVE-2026-76504 here. Big ups to Landon Rice on our exploit dev squad! Private exploit and detections (etc.) available to customers as of this morning.
vulncheck.com/blog/revenge-o…
3
4
13
1,794
CVE-2026-76570: unauth SQLi in JCTables (JoomCode's Joomla data-table), read/write to RCE.
No auth, no CSRF, broken escaping. One request leaks the admin creds, then reset the password, log in, and drop a webshell.
Affected through 1.10.31.2, fixed 1.21.1.
vulncheck.com/blog/jctables-…
3
9
26
1,723
On Virtualizor, the way past the login is to... send act=login 😄 That value skips the guard into a billing hook that pastes your uid field straight into a root shell command. The password to bypass logging in was 'login' all along. CVE-2026-43641 (9.8)
vulncheck.com/blog/virtualiz…
2
387
ʞʞıdɐɔoɥƆ retweeted
As a French 9/11 should not be that impactful for me
BUT:
I was 20, just released from jail and I was in Spain (Alicante) in order to change my whole life and never do bad choices again.
That shit happened at the exact moment my life was turning around (for the better) so I find myself connected to that event, just like thousands upon thousands of other people.
So from Europe, to my American followers: my thoughts are for you today 🙏
1
1
17
2,461
ʞʞıdɐɔoɥƆ retweeted
ma mère a visité mon appart elle m'a demandé de faire mon lit j'ai dit non
36
740
20,876
262,177
ʞʞıdɐɔoɥƆ retweeted
We bought an $88 router on Amazon looking for the ENDLESSDOORS implant. We found two others instead
DARKLANTERN gives anyone on the Internet an unauthenticated root shell.
SPEAKINGSTONE phones home to ZBT infrastructure and supports remote surveillance.
vulncheck.com/blog/zbt-darkl…
25
267
1,180
115,105
ʞʞıdɐɔoɥƆ retweeted
Gg to my guys TableBasse & Midfirewear, students at @OteriaCS for their frappe RCE under @OffenSkillCorp supervised research! 🍻
A few months ago, I suggested researching wkhtmltopdf, but this lead them to unexpected places! 😻
thinkloveshare.com/offenskil…
5
12
1,572
Some vendors sanitize their inputs. Others just buy ionCube.
New vulnerability disclosure from @Chocapikk_ : CVE-2026-14863 is an OS command injection-to-RCE in FileRun, a commercial self-hosted file manager. Internet footprint is an appreciable 3.5K+ based on the team's ASM queries. Good stuff as always 🎉
vulncheck.com/blog/filerun-t…
1
1
9
997