Maxence SCHMITT

Senior Application Security @doyensec . I am learning new stuff everyday and I love it.Sapic

[Doyensec @Doyensec]

Proud to share that @Doyensec was trusted by @AnthropicAI as one of the security partners validating #Mythos findings as part of Project #Glasswing!

Contact us to see how our research-driven approach shapes the future of #appsec!

https://t.co/jcWLyebSyA

#doyensec #security #ai

[maitai @MaitaiThe]

I'm really grateful for what I was able to achieve. Even if it's a collision, getting an RCE live on stage targeting one of the most employed software in the world it's fantastic. I will be in Berlin until tomorrow evening, ping me if you wanna hang out

[Doyensec @Doyensec]

Our CloudSecTidbits series is back with a bang 💥In the latest edition, we're releasing maSSO - A weaponized Identity Provider (IdP) for security testing! Read all about it and the dangers of Multi-SSO AWS Cognito User Pools.

#doyensec #appsec #security

https://t.co/2e5gVtkAL5

[Doyensec @Doyensec]

In our @a_denkiewicz's latest post, see how combining AFL++ with GPT-5 Codex sped up triaging the results from fuzzing NASA’s CFITSIO library and uncovered numerous vulnerabilities.

https://t.co/oXnzPaPnr2

#doyensec #appsec #security #fuzzing

[Doyensec @Doyensec]

🚨 Breaking Secure-Looking Cloud Architectures

At #defcon Singapore Demo Labs, we'll show real security bugs involving AWS Cognito multi-SSO user pools & ELB routing paths, including a Malicious OIDC Server & the ELBaph utility!

🔗 https://t.co/ERZWGh9FvN

#appsec #doyensec

[Doyensec @Doyensec]

Check out the latest edition of @pagedout_zine featuring Doyensec's own Bartłomiej "Bartek" Górkiewicz (@smnfbb ) vibing on Reversing Python Bytecode, along with plenty of great articles!

https://t.co/4xn81WIxJG
#appsec #doyensec #security #reversing

[Doyensec @Doyensec]

🚀 inQL v6.0.1 is out!
Our GraphQL security tool got big upgrades.⚡
• Schema Brute-Forcer
• Server Engine Fingerprinting
• Automatic Variable Generation
• Performance boosts & other improvements
Details: https://t.co/6BEc6KrMqx

#doyensec #graphql #appsec #securityforces

[Kévin GERVOT (Mizu) @kevin_mizu]

DOMLogger++ v1.0.9 is now out and available! 🎉

This update fixes a lot of issues, including the historical DevTools bug on Chromium 🔥

It also brings full Caido session handling, which is going to be useful in the near future! 👀

👉 https://t.co/wQHbXqzvkq

1/2

[Doyensec @Doyensec]

📢It's here! Part 2 of Norbert Szetei's (@73696e65) research into ksmbd. See how customized fuzzing & the appropriate sanitizers led to discovering 23 Linux kernel CVEs, including use-after-frees & out-of-bounds reads/writes.

https://t.co/LmigwJtB2c
#doyensec #appsec #security

[Maxence SCHMITT @maxenceschmitt]

@j_zere Nice one !

[Doyensec @Doyensec]

🚀We have just released a new Security Advisory for @NASA's CFITSIO library 🛰️. Click the link for details on the Heap Overflow, Type Confusion, Out-of-Bound Writes and other vulnerabilities discovered by our @a_denkiewicz !

https://t.co/7X6YVBzhdo

#doyensec #appsec #security

[Maxence SCHMITT @maxenceschmitt]

@xssdoctor Nice research 👍. I’m happy to know that my article was useful . Indeed, these upload bypasses an be used in many use cases.

[xssdoctor @xssdoctor]

This research is based on this article https://t.co/9c3PjDeK3r which explains that the magic bytes of a pdf (and webp) file are NOT in the beginning of the file. The article goes on to show that a valid pdf can be valid json

[Doyensec @Doyensec]

We'd like to welcome 👋@imarcex_ as our latest Application Security Intern. Welcome aboard! 🎉

#doyensec #appsec #internship

[Doyensec @Doyensec]

Our @73696e65's latest research has resulted in at least 1⃣5⃣ CVEs in ksmbd🤯, including multiple use-after-frees, bounds checks, type confusion and overflows‼️ Check it out today!

https://t.co/AiobDskF5e

#doyensec #appsec #security #linux

[Szymon Drosdzol @tell1c0]

After many late nights and busted apps as security consultant at @Doyensec , I trained my spidey senses 🕷️ to detect when an API code is practically begging for an auth vulns.

Join me at #CONFidence2025 for common pitfalls, and tips for writing secure authz from the start.

[Doyensec @Doyensec]

🚀#InQL v6.0 is here! Full Kotlin rewrite w/ improved performance & responsiveness!
🆕 Built-in GraphiQL and #GraphQL Voyager visualization regardless of the target
🆕Circular references detector
🆕Improved batch queries screen
🚀 SPEED!
#doyensec #appsec

https://t.co/UPcTE42ZMP

[Doyensec @Doyensec]

As a follow up to @maxenceschmitt 's amazing #CSPT research, we've published a list of resources to help people interested in this class of vulnerabilities. Check it out today for video, tools, challenges and variety of publications!

https://t.co/kAN5e9Yk6l

#Doyensec #appsec

[Swissky @pentest_swissky]

Bypassing File Upload Restrictions To Exploit Client-Side Path Traversal - @maxenceschmitt
https://t.co/caPYEhxE6y

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

A crazy client-side exploit chain by @busf4ctor & @xssdoctor: CSPT+JSON+SelfXSS → cookie path → XSS
This bug went through CSPT abuse, hidden params, CORs bypass, and CloudFront cache poisoning. Breakdown: