maxpl0it

Principal Vulnerability Researcher at @InterruptLabs. Occasional Pwn2Owner

[maxpl0it @maxpl0it]

Was a lot of fun giving this talk with @patateQbool showing off the stupid stupid stuff we do to pop mobile devices at Pwn2Own

[Interrupt Labs @InterruptLabs]

Our OffensiveCon talk is now up on YouTube!

https://t.co/ECyDhV4TCc

[TheZDIBugs @TheZDIBugs]

[ZDI-26-252|CVE-2026-4698] Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability (CVSS 8.8; Credit: maxpl0it) https://t.co/XesYWJb7xv

[TrendAI Zero Day Initiative @thezdi]

Another big confirmation! Ben R. And Georgi G. of Interrupt Labs used an improper input validation bug to take over the Samsung Galaxy S25 - enabling the camera and location tracking in the process. They earn $50,000 and 5 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Sweet! The team from Interrupt Labs used hardly any time at all exploiting the Lexmark CX532adwe and posting their message on the LCD. They head off tot the disclosure room to explain themselves. #Pwn2Own

[Interrupt Labs @InterruptLabs]

Absolutely buzzing!

The moment @XploitBengineer and @munmap successfully pwned the Samsung Galaxy S25 at @thezdi Pwn2Own!

https://t.co/10EGx2vkH7

[Interrupt Labs @InterruptLabs]

Was amazing being a part of this. Thank you everyone who made it such a success and congratulations to the CTF competition winners! 🎉

[Interrupt Labs @InterruptLabs]

Checkout this 'Pathway to VR' profile from Axel, a Principal Researcher in our Browsers team in the US.

Axel chats about how forming a community and presence for yourself online can be a great door-opener in the world of VR.

[Interrupt Labs @InterruptLabs]

📣 The latest instalment of our VR Development Programme resources is now available on YouTube! 📣

An introduction to ARM64, ARM32 and x86-64 assembly for vulnerability research.

https://t.co/F7Y8ktxJEc

[Interrupt Labs @InterruptLabs]

📣 Exciting opportunity in our iOS team for a Senior Vulnerability Researcher with experience in Apple platforms.

Remote or office based.

https://t.co/kxJpQCYNse

[Interrupt Labs @InterruptLabs]

📣 Exciting news for aspiring vulnerability researchers - a selection of our internal VR Development Program training resources are now available on GitHub!

Check them out at https://t.co/B53uulp9Th

These ones are on software development: programming in C and Python.

[Yarden Shafir @yarden_shafir]

I guess this mf of @patateQbool is finally hanging out with the cool kids @maxpl0it @sam4k1

[maxpl0it @maxpl0it]

This guy is way too nice. @SinSinology is one of the greats and it’s great to finally meet him face-to-face 💪

[SinSinology @SinSinology]

I finally met Max (@maxpl0it) irl, one of the browser gods, He has always been one of my idols impossible to reach his level (^_^)

[offensivecon @offensive_con]

Many thanks to @InterruptLabs for supporting this year’s Offensivecon as a gold sponsor!

[DistrictCon @DistrictCon]

🤡 Best Meme Target 🤡
WINNER: yltsi: manipulating operator menu settings on a Pump It Up XX: 20th Anniversary Dance Machine 🕺

RUNNER UP: @maxpl0it , @InterruptLabs: demoing a 1-Click RCE (XSS + Auth RCE) in mFi mPower Pro WiFi-Enabled Power Extender 🔌

[maxpl0it @maxpl0it]

Great match with @0f01c1, @munmap, and some other colleagues

A nail-biting win against Spain

[Interrupt Labs @InterruptLabs]

Another great team trip on Wednesday, watching England's Lionesses vs Spain at Wembley.
#itscominghome

[TrendAI Zero Day Initiative @thezdi]

Announcing #Pwn2Own Berlin! We're moving our enterprise-focused event to @offensive_con and introducing an AI category. More than $1,000,000 in cash & prizes (Incl. a Tesla) are available to win. Check out the details at https://t.co/9SorA5wpnS

[maxpl0it @maxpl0it]

Really happy I got to be a part of the inaugural DistrictCon Junkyard contest

Was lucky enough to be the runner up for the ‘Best Meme Target’ prize!

Huge props to the @DistrictCon crew for overcoming some extremely difficult circumstances

Will absolutely be back next year!

[DistrictCon @DistrictCon]

@seeinglogic @InterruptLabs @vigilant_labs @Bugcrowd @ex0dus_0x @Ninja3047_ @annatea16 🔟 ClickShock ⚡🖱️
@Maxpl0it from @InterruptLabs achieves 1-click RCE (XSS + Auth RCE) in the mFi mPower Pro smart power extender.

[maxpl0it @maxpl0it]

With the @InterruptLabs crew in D.C. for @DistrictCon - give us a shout if you’re about!

[Interrupt Labs @InterruptLabs]

A fantastic opportunity for an experienced vulnerability researcher to join our word-class Browsers team. Remote work, hybrid or in office opportunities available.
Check out our careers page for the full range of roles available globally.
https://t.co/e2QsB7whe9

[maxpl0it @maxpl0it]

@XploitBengineer Forbidden colour

[wintercoats @w1ntercoats]

Come for a chat at @DistrictCon to hear about all the exciting things @InterruptLabs is working on. Who doesn’t want to work alongside these legends…. @munmap @maxpl0it