Ben

Android Vulnerability Researcher, Pwn2Own 202{3, 5}

[Ben @XploitBengineer]

Can't win them all I guess :(

[TrendAI Zero Day Initiative @thezdi]

Unfortunately, Interrupt Labs could not get their exploit of NV Container Toolkit working within the time allotted. #Pwn2Own #P2OBerlin

[Ben @XploitBengineer]

@evilsocket @IamAlch3mist I wonder if a CVE will be assigned for this

[ϻг_ϻε @steventseeley]

Security researchers become trapped into an identity that they can’t escape, life seems purposeless, reality shifts and they realize they can’t bend like a tree in the wind. It turns out that intelligence isn’t the key to happiness.

For those that know. Chop wood, carry water.

[Ben @XploitBengineer]

@halvarflake LLMs are fantastic at finding useless bugs

[Interrupt Labs @InterruptLabs]

📣New Android Vulnerability Researcher vacancy. Open to mid-level, senior and principal researchers.

https://t.co/AyrgMGG4sv

[Ben @XploitBengineer]

@POC_Crew @munmap Glad to hear 😄🙌🏻

[Ben @XploitBengineer]

Had a blast in Seoul with @munmap speaking at Zer0Con

Huge thanks to @POC_Crew and the other attendees for being so welcoming. Definitely a great event for my first speaking gig

[Ben @XploitBengineer]

@0vercl0k Cheers mate :)

[Ben @XploitBengineer]

@0x_shaq @munmap @POC_Crew Thank you!

[Ben @XploitBengineer]

@0x_shaq Or, hear me out here. Project Xoero. Pronounced Project Zero

[Ben @XploitBengineer]

@ScottyBauer1 @0x_shaq What is you current go to?

[POC_Crew @POC_Crew]

🤖Georgi G(@munmap) & Ben R(@XploitBengineer) - Promp2Pwn – LLMs Winning at Pwn2Own

[Ben @XploitBengineer]

@boredpentester I have not had much success at all with LLMs for kernel exploitation either. I'm not sure what we're doing wrong 😬

[Ben @XploitBengineer]

@iBSparkes Unfortunately it's going the opposite way. Samsung has preemptively rolled out locked bootloaders globally as of ~August 2025 - apparently due to the new "Radio Equipment Directive"

[Ben @XploitBengineer]

@pkqzy888 @0xocdsec Was this a userspace or kernel LPE?

[pam @pamoutaf]

Long overdue episode with the iOS avengers @s1guza @littlelailo @iBSparkes @jonpalmisc @hdemoff_ https://t.co/HyceaaGJcb

[Ben @XploitBengineer]

We'll be in Seoul talking about AI and Samsung 1-clicks :)

[POC_Crew @POC_Crew]

#Zer0Con2026 - SPEAKER 🤖

Georgi G(@munmap) & Ben R(@XploitBengineer) from Interrupt Labs - “Promp2Pwn - LLMs Winning at Pwn2Own”

For more: https://t.co/15bGQDgjGc

[rev.ng @_revng]

🎥 How does https://t.co/BpzWlLVUxW detect jump table?

In this presentation Ale explains how the https://t.co/BpzWlLVUxW decompiler detects jump tables and, more in general, how it devirtualizes indirect jumps.

[Roger @r0rt1z2]

After weeks of reverse engineering MediaTek's DA2 with @shomykohai, we finally figured out how the V6 exploit works. We decided to call it heapb8 ("heapbait")!

Technical writeup: https://t.co/y28MsNzJTd

PoC: https://t.co/dSvxaDnoh9

[Ben @XploitBengineer]

@SinSinology @InterruptLabs It's a mystery, for sure.

Looks like you had a great time in Japan btw, solid work 💪🏻