Thomas Houhou

Founder of DeepProof (AI for Formal Verification) | Security researcher - found vulnerabilities in @chainlink, @OpenAI, @AnthropicAI, @X | Cybersecurity @ETH

[Thomas Houhou @Th0h0]

@cory 👋

[Thomas Houhou @Th0h0]

@karinanguyen what a time to be alive 🥹

[Thomas Houhou @Th0h0]

@xyz3va @cursor_ai Well deserved. Nice work!

[Thomas Houhou @Th0h0]

@Rhynorater Wow thanks for the shout out justin! Love your content by the way :)

[Thomas Houhou @Th0h0]

@katz3n_ so cool!

[Thomas Houhou @Th0h0]

Couldn't be more happy for the outcome that this cookie tossing research ended-up to have!
The whole idea of doing a talk came very randomly at the time and I wasn't even aware that I already had the sufficient material for it.
"you can just do things" has never been more true :D

[PortSwigger Research @PortSwiggerRes]

The results are in! We're proud to announce the Top ten web hacking techniques of 2024! https://t.co/XHPEeqPQLR

[Thomas Houhou @Th0h0]

@dpaleka god i want so much to be back... enjoy your time there!

[Thomas Houhou @Th0h0]

@InvariantLabsAI @mvechev @mbalunovic @lbeurerkellner @marc_r_fischer @florian_tramer @mvechev really is the elon musk of academia 😮
anyway, this looks really cool, congrats!

[Thomas Houhou @Th0h0]

by the way, the talk recording was also recently made available: https://t.co/ccpztMb25W

[Thomas Houhou @Th0h0]

After countless hours, the blog post associated to cookie tossing and the attacks it enables is finally ready!
It roughly covers the same topic as my area41 talk but with many additions and much more details (which made it way longer than expected...)
https://t.co/UBDDXBBLr1

[Thomas Houhou @Th0h0]

@IgNavarro1 @BSidesLV @dcskytalks what a life ahah

[Thomas Houhou @Th0h0]

@0a_yso @defcon Congrats!!

[Thomas Houhou @Th0h0]

Here are the slides of my talk at #AREA41:
https://t.co/HRUu0neheP

I might also soon write an associated blog post to give more details / discuss things i wouldn't have the time to discuss in a 45-minutes talk.

[publiclyDisclosed @disclosedh1]

X (Formerly Twitter) disclosed a bug submitted by @Th0h0: https://t.co/9Uz0uFpPdy - Bounty: $1,500 #hackerone #bugbounty

[so long and thanks for the phish @ant0inet]

«Discovering Logic Vulnerabilities in Swisscom's End-to-End Encrypted Cloud Storage» #BugBounty

https://t.co/uodcp1UoOk

[Thomas Houhou @Th0h0]

my first cve 🥹🥹

[Thomas Houhou @Th0h0]

@rez0__ do you know https://t.co/oA8n7sZCab? it appears to do what you're describing

[Thomas Houhou @Th0h0]

Thank you so much @BlackHatEvents ❤️
can't wait :)

[Thomas Houhou @Th0h0]

Thanks for sharing :)

[Intigriti @intigriti]

2⃣ autoSSRF

autoSSRF is a context-based automated SSRF scanner capable of identifying whitelisted hosts and generating possible bypasses based on the whitelisted URLs! 😎

autoSSRF is also available on Github! Check it out 👇
https://t.co/AZJoP1v0wT

[Thomas Houhou @Th0h0]

Hey @swisscyberstorm, would you mind approving my student ticket request? It's been a week since I sent you the e-mail 🥲