cousky

AppSec @Doyensec | Pwn2Own 2026

[Luca Carettoni @lucacarettoni]

This is a post about being both proud and disappointed.

First, the proud part. My colleagues @maxenceschmitt and @cousky_ took part in the recent @thezdi p20...

Full content on LinkedIn (because I am too cheap to pay for this crap)
https://t.co/vt0Xcy7v5p

[cousky @cousky_]

@MaitaiThe Incredible, congrats !

[Lior Pachter @lpachter]

Mathematics has now fully morphed into biology:

Project costs millions $ ✅
Put out paper that nobody has read ✅
Massive paper supplement nobody will read ✅
Advertise with pretty art ✅
Vicious authorship fight ✅
Say you're curing cancer ✅

[Doyensec @Doyensec]

Congratulations to @maxenceschmitt and @cousky_ on successfully using their three bugs 🤯 to exploit Home Assistant Green (cc: @home_assistant). Tough break that they were previously known - we'll get 'em next time!

#doyensec #appsec #security #pwn2own

[TrendAI Zero Day Initiative @thezdi]

We have another collision! Yassine Bengana (@cousky_), and Maxence Schmitt (@maxenceschmitt) of Doyensec (@doyensec) used 3 bugs to exploit the Home Assistant Green, but all 3 bugs were previously known. They still earn $7,500 and 1.5 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

3 minutes - all it took for Yassine Bengana (@cousky_), and Maxence Schmitt (@maxenceschmitt) of Doyensec (@doyensec) to successfully exploit the Home Assistant Green and off to the disclosure room they go!! #Pwn2Own

[cousky @cousky_]

We'll be in Cork for the week, hit us up if you want to hang out!

[Doyensec @Doyensec]

Excited to share that 🇫🇷 @cousky_ & @maxenceschmitt 🇫🇷 will be representing #Doyensec at #PWN2OWN Ireland - targeting the Smart Home category for a total of $30,000 and 3 Master of Pwn points, Wed. Oct. 7 @ 11:15AM

https://t.co/IOLimJ4vGm

#appsec #security

[cousky @cousky_]

Our H1 report was finally disclosed, you can read more about our silly Lua bypass landing code execution on Nginx-Ingress controller here :
https://t.co/XWps0t7w9b

[Maxime Escourbiac @Fisjkars]

We were acknowledged for CVE-2026-24512 vulnerability (8.8) on Nginx-Ingress controller with @cousky_.
H1 report disclosure is on-going. It ended up being a pretty funny Lua script restriction bypass. #security #k8s

[Doyensec @Doyensec]

We’re super excited to welcome Yassine Bengana (@cousky_) to the Doyensec team! 🎉

He’s bringing serious AppSec skills and great vibes — can’t wait to see the cool stuff we’ll break (and build) together 🔥

#AppSec #infosec #Doyensec

[Maxime Escourbiac @Fisjkars]

#Michelin CERT was credited for CVE-2025-53072 and CVE-2025-62481, two pre-auth RCEs affecting #Oracle E-Business. Both are easy to exploit. Immediate remediation is advised. #security @BleepinComputer @watchtowrcyber

[Maxime Escourbiac @Fisjkars]

Little introduction for my next talk @hack_lu , this article, co-authored with @cousky_ present all details of the full exploit chain that impacted Palo Alto global protect : https://t.co/mjdvva0TSh

[Maxime Escourbiac @Fisjkars]

#Michelin CERT was also acknowledged for discovering CVE-2024-38832 and CVE-2024-38833, which affect VMware Aria Operations. Additional vulnerabilities are still undergoing the disclosure process. https://t.co/zkGj9CjqTQ #security #bugbounty @cousky_

[cousky @cousky_]

Palo Alto security advisory: https://t.co/5kiCkx9Ye3

[cousky @cousky_]

Hoping that we can release our own article soon, featuring our additional attack vectors and analysis, stay tuned 🤠

[Maxime Escourbiac @Fisjkars]

#Michelin CERT was acknowledged for identifying CVE-2024-5921, which impacts #PaloAlto GlobalProtect. A detailed report was sent to their PSIRT team on February 26th, demonstrating how to impersonate a legitimate portal and fully compromise a workstation. #security @cousky_

[YesWeHack ⠵ @yeswehack]

A new open-source tool from @BitK_ reveals how popular browsers parse HTML – simplifying the hunt for mutation XSS and opening up new horizons in security research 🔬 Read about this valuable addition to your 'Hacker's Toolbox' in our latest blog post 👇
https://t.co/rQyRdhseP5

[kl43s @__s34lk__]

Hi, here's my latest article on API hooking from a red/blue team perspective. I explore driver programming to leverage kernel callbacks to inject hooks into every new process on the system.

Also, you'll find a script to detect inline hooks in a DLL.

https://t.co/dZNMZ3adEz

[cousky @cousky_]

New article published showcasing a Client-Side Path Traversal bug in Grafana, leading to complete takeover in the worst-case scenario🤠

Props to the Grafana team for the quick response !

[Maxime Escourbiac @Fisjkars]

Write-up of Grafana vulnerability (CVE-2023–5123) found by #Michelin CERT team. Client-Side Path traversal struck again ! #Security #Writeup @cousky_
https://t.co/kK5DPTKDn1