truff @truffzor

Joined June 2009

Tweets

140
Followers

292
Following

507
Likes

2K

Kévin GERVOT (Mizu) @kevin_mizu

2 months ago

I'm happy to release a script gadgets wiki inspired by the work of @slekies, @kkotowicz, and @sirdarckcat in their Black Hat USA 2017 talk! 🔥 The goal is to provide quick access to gadgets that help bypass HTML sanitizers and CSPs 👇 gmsgadget.com 1/4

11 167 438 34K 285

Download Image

Blaklis @Blaklis_

4 months ago

My french team, for the world cup, and in collaboration with my wife, printed me a hoodie with a redacted payload on it. That bug was super fun, but quite hard to exploit! If encoded words, RFC2047 and so on are strange words to you, @garethheyes presented at the same time their…

Bug Bounty Village @BugBountyDEFCON

4 months ago

0 1 25 14K 14

Download Video

9 10 136 13K 39

Download Image

truff @truffzor

4 months ago

Some time ago while hunting with @Icare1337 and looking for bugs in Ghostscript I found a vulnerability that allows to local file read / write. This led to CVE-2025-46646. nvd.nist.gov/vuln/detail/CV… - #infosec #bugbounty

4 6 35 3K 9

truff @truffzor

5 months ago

Some time ago I found 2 vulns in Collabora Online that when chained allowed to arbitrary file write. When digging further with my colleague @Icare1337 we found out a pre auth RCE in a largely used open source software. We'll do a write up later. CVE below: github.com/CollaboraOnlin…

1 1 14 546 2

YesWeHack ⠵ @yeswehack

7 months ago

Half of our 2025 Bucket List has already been achieved 🤯 Kudos to @truffzor, @Icare1337 & @LdrTom for the epic collab, and to @XelBounty for the massive impact! Bug hunters, keep crushing it - swag packs are up for grabs! 🎁 #YesWeRHackers

2 5 26 3K 4

Download Image

Icare @Icare1337

8 months ago

medium.com/@amellb/the-gr… #BugBounty

3 8 38 2K 7

Nicolas Verdier @n1nj4sec

9 months ago

I recently found a blind FreeMarker SSTI on a bbp. It was not possible to RCE but I found some nice gadgets to enumerate accessible variables, read data blindly or perform some DoS. I documented that here if someone is interested gist.github.com/n1nj4sec/5e3ff…

3 52 197 14K 128

Kévin GERVOT (Mizu) @kevin_mizu

10 months ago

I'm thrilled to finally share my research on HTML parsing and DOMPurify at @grehack 2024 📜 The research article is available here: mizu.re/post/exploring… The slides are available here: slides.com/kevin-mizu/gre… 1/3

18 180 704 75K 375

Download Image

YesWeHack ⠵ @yeswehack

10 months ago

🎬 #TalkiePwnii is LIVE! Introducing our new series starring @pwnwithlove! In each video, Pwnii will break down Dojo challenges, sharing various solutions & technical tips 😎 Catch the first episode about our ‘Shell Escape’ challenge 👇 #YesWeRHackers youtube.com/watch?v=Rw3wWi…

2 17 96 14K 27

Phrack Zine @phrack

a year ago

The time has come, and with it your reading material for the week. Phrack #71 is officially released ONLINE! Let us know what you think! phrack.org/issues/71/1.ht…

14 503 1K 155K 230

Download Image

SwiftOnSecurity @SwiftOnSecurity

11 years ago

One time I tried to explain Kerberos to someone. Then we both didn't understand it.

22 383 834 0 18

truff @truffzor

a year ago

My team (France) finishes first at the @Hacker0x01 #AmbassadorWorldCup qualification round. What a pleasure to be part of such an engaged and skilled team !

HackerOne @Hacker0x01

a year ago

My team (France) finishes first at the @Hacker0x01 #AmbassadorWorldCup qualification round. What a pleasure to be part of such an engaged and skilled team !

45 53 307 182K 25

Download Image

1 0 15 916 0

Thomas Rinsma @thomasrinsma

a year ago

I'm very excited to finally share the first part of the research I did into Ghostscript. This post details the exploitation of CVE-2024-29510, a classic format string bug, which we abuse to bypass the SAFER sandbox and gain RCE. codeanlabs.com/blog/research/…

3 94 266 31K 112

truff @truffzor

a year ago

A few weeks ago I found a vulnerability in Apache Allura while reading an excellent paper from @Sonar_Research and the according fix. CVE has been published today. allura.apache.org/posts/2024-all… #offensivesec #infosec

4 2 27 2K 2

Aituglo @aituglo

a year ago

New update on Hackyx! You can now share with us any technical content, blog post, or writeup that you found interesting. It will then be moderated before being added to Hackyx. hackyx.io

0 9 34 4K 12

Download Video

Kévin GERVOT (Mizu) @kevin_mizu

a year ago

DOMLogger++ v1.0.4 is now out and available in stores! It comes with new features that allow you, for example, to easily dig into DOM gadget occurrences after an innerHTML sink 🔥 More details can be found here 👇 github.com/kevin-mizu/dom… 1/3

2 41 192 16K 82

Download Image

Kévin GERVOT (Mizu) @kevin_mizu

a year ago

Really proud of those bypass/mXSS variations. They involve some cool second-order DOM Clobbering and a new mutation gadget that I would like to call the elevator x) 1/2

5 13 93 11K 28

Icare @Icare1337

a year ago

github.com/Icare1337/Libr… #BugBounty #BugBountytips #libreoffice

4 37 122 17K 77

truff @truffzor

a year ago

Sometime ago I found another vulnerability on Adobe Commerce while hunting with the French team during @Hacker0x01 world cup. What a pleasure to hunt with one of the best hackers I know => @Blaklis_ 🔥