Pablo Artuso 🗿🇦🇷

Security researcher @onapsis. I write about stuff at and develop ugly tools that you can find at

[Pablo Artuso 🗿🇦🇷 @lmkalg]

Just finished our presentation at #BHUSA of how attackers may root your enterprise servers!
I hope attendees understood and enjoyed our research.
Now is time to grab a beer and enjoy the rest of the conference @BlackHatEvents.
@_1ggy, it was a pleasure working with you mate!

[Andrés Blanco @6e726d]

Arranca la @ekoparty mañana, arme unas calcos y un challenge usando Raspberry Pi Pico. Mañana publico más información del challenge para los que quieran participar, se pueden ganar unas Raspberry Pi Pico y algún otro premio sorpresa. #ekoparty #hardwarehacking

[Andrés Blanco @6e726d]

No tires tus electrónicos en la calle, llévalos a la @ekoparty y deja que alguien los reutilice o los recicle. Si no tomamos conciencia ahora, dudo que pueda escalar mucho más tirar las cosas fuera de nuestra vista. #basuraelectronica #etrash #reducir #reutilizar #reciclar

[Andrés Blanco @6e726d]

Así como el año pasado, este año también se va a poder llevar dispositivos electrónicos a la @ekoparty para ser reutilizados o reciclados. No tiremos dispositivos electrónicos, hagamos un esfuerzo para que haya menos basura electrónica. Si tenes algo llévalo, por favor colabora.

[Martin Doyhenard @tincho_508]

I'm thrilled to announce that my talk "Gotta Cache Em All: Bending the Rules of Web Cache Exploitation" was accepted at Black Hat USA 2024!

I'll be showing how to abuse web cache parsers to completely compromise thousands of sites!
#BHUSA @BlackHatEvents https://t.co/4G4CtO89GA

[Pablo Artuso 🗿🇦🇷 @lmkalg]

My talk at Ekoparty about how I was able to combine two independent research projects in order to compromise SAP systems though the Internet and without authentication is out! Thanks #ekoparty for everything! It was an outstanding experience!
https://t.co/rxsy1NKEAr

[Andrés Blanco @6e726d]

A todos los participantes de la @ekoparty les recomiendo que traigan su hardware viejo y en desuso. Esto incluye computadoras, teléfonos, tableta, baterías, etc. Colaboremos entre todos para que la “basura” electrónica sea tratada de forma responsable.

[Onapsis @onapsis]

👀 .@lmkalg and @_1ggy killing it at #BHUSA last week! And #ICYMI the full report around their recent #P4CHAINS findings is live 🎉

Check it out here: https://t.co/fpkPWTeYzg

#SAPsecurity

[Faraday Security @faradaysec]

We have a special recommendation for you: @BlackHatEvents talks that are not to be missed! 🎉
🔗 https://t.co/VtupW8LhqR by @lmkalg & @_1ggy
🔗 https://t.co/xMiPc4rqyV by @marcosd4h & @thezachw
🔗 https://t.co/Df2mPNPMCY by @UnaPibaGeek
Good luck to everyone! ⚡

[Pablo Artuso 🗿🇦🇷 @lmkalg]

* +18 years
* Full academic status at College/Univ
* College/Univ id card

Keep in mind that you should deal the rest of the expenses (hotel, food, travel, etc)

If you want to apply, DM me explaining why would you like to be part, and with @_1ggy we'll try to select some of you.

[Pablo Artuso 🗿🇦🇷 @lmkalg]

Are you a student willing to be part of the security industry? Would you like to receive a complimentary briefing pass for this year's @BlackHatEvents ?

If you may be a fit, keep reading ..

(Retweets to help spread the word will be really much appreciated)

[Pablo Artuso 🗿🇦🇷 @lmkalg]

@BlackHatEvents has this amazing idea of letting speakers propose students who will receive a complimentary briefing pass for the conference.

An exciting opportunity to keep building the security industry. There are some requirements you must accomplish to be a fit:

[Pablo Artuso 🗿🇦🇷 @lmkalg]

Our talk was accepted for @BlackHatEvents. I'm super happy but still shocked about this news. I wrote some paragraphs about this achievement https://t.co/Ll5zEzjvFR

Hope you enjoy our new talk with @_1ggy

[Aleksandr Volodarsky @volodarik]

Sunday read.

This is hilarious. Engineers are competing who creates the worst UI on Reddit.

I think the winners are:

1/ Enter your phone number

[Alex Matrosov @matrosov]

⛓️Confirmed, Intel OEM private key leaked, causing an impact on the entire ecosystem. It appears that Intel BootGuard may not be effective on certain devices based on the 11th Tiger Lake, 12th Adler Lake, and 13th Raptor Lake. Our investigation is ongoing, stay tuned for updates.

[Pablo Artuso 🗿🇦🇷 @lmkalg]

It was decided to name this chainable bugs as #P4CHAINS. Want to read a bit more about it?
* https://t.co/xCDzhliFoi

* https://t.co/78VCEfs9wx

Still interested? Join Onapsis' briefing: https://t.co/YCN02P0R9h

[Pablo Artuso 🗿🇦🇷 @lmkalg]

Since 12/22, SAP is patching critical vulnerabilities as a result of a research project that I've been doing for some time. Today, my key finding was patched: CVE-2023-28761. An innocent 6.5 bug, that opens the door to abusing all those critical patched bugs through the Internet.

[Ekoparty | Hacking everything @ekoparty]

¡A las 10.30hs inicia el Sponsor Track en la SALA E de la #Eko202 con la charla de @idfavro de @onapsis: "Lessons learned from pentesting 100's of SAP systems"!

[Andrés Blanco @6e726d]

¿Queres aprender sobre hardware hacking? ¿Tu empresa o productos utiliza hardware de terceros y no sabes cómo auditarlos? ¿Tenes dispositivos IoT en tu red y queres hacer un pentest? Anótate en mi training de la @ekoparty y aprende de forma práctica.

https://t.co/UgVb6aAJeM

[Pablo Artuso 🗿🇦🇷 @lmkalg]

@Enno_Insinuator @nicowaisman @ERNW_ITSec Indeed! An ex-Intern here :)

[Pablo Artuso 🗿🇦🇷 @lmkalg]

Hice la versión 0.01 del training y me voló la cabeza. Ni me imagino lo que debe ser la final. Y en español? Diría que es único. Súper recomendado!

[Andrés Blanco @6e726d]

Este año voy a estar dando un training sobre cómo auditar sistemas embebidos. Podes aprender a auditar desde un wireless router a un aire acondicionado smart de manera práctica.