Quentin M
@0xdagger
Followers
1K
Following
2K
Media
6
Statuses
384
So proud to talk for the first time at @offensive_con about how fun it is to escape the Safari sandbox!
Escaping the Safari Sandbox: A Tour of Webkit IPC by @0xdagger
https://t.co/1LnSKfkdLI
1
5
64
We really should be talking about this more....KASLR is just not working properly on Android right now, and it hasn't for a long time. https://t.co/AE0vBXEcob
5
57
195
A look back at our ninjas' first day at @Hexacon! We are proud of our experts Quentin and Etienne, who are leading the βiOS for Security Engineersβ training course. At the same time, Matthieu and Paul are hard at work on the βAzure intrusion for red teamersβ training course!
1
6
31
Writeup for CVE-2025-24085, an ITW mediaplaybackd vulnerability patched earlier this year
4
60
281
That time when @tehjh was just reviewing a new Linux kernel feature, found a security vuln, then went on a journey to see if he could exploit it from inside the Chrome Linux Desktop renderer sandbox (spoiler: very yes) https://t.co/Atc6toEdAj
0
49
134
We dissect a DFG compiler bug we discovered in Safari/WebKit. This post covers root cause, impact, and technical analysis: https://t.co/Q4IOsQ9dP8
#WebKit #VulnerabilityResearch #ExploitDev #Safari #CyberSecurity #ExodusIntel
blog.exodusintel.com
Overview In February 2023, researchers at Exodus Intelligence discovered a bug in the Data Flow Graph (DFG) compiler of WebKit, the browser engine used by Safari. This bug, CVE-2024-44308, was...
0
48
119
Not their best picture but definitely THE best hands-on iOS training! Come and see for yourself how Etienne and Quentin master iOS! β οΈ Warning, risk of massive skills overflow β οΈ
iOS for Security Engineers by Quentin Meffre (@0xdagger) & Etienne Helluy-Lafont https://t.co/o0ulZWXILO
0
1
11
π¨ Still a few seats left for our iOS for Security Engineers training at #HEXACON2025! 4βday hands-on labs to explore the iOS ecosystem and prepare for vulnerability research. π Paris, Oct 6β9 β‘οΈ
hexacon.fr
Offensive security conference organized by seasoned professionals, in the heart of Paris. 10-11th October 2025, save the date!
iOS for Security Engineers by Quentin Meffre (@0xdagger) & Etienne Helluy-Lafont https://t.co/o0ulZWXILO
0
4
13
If you are planning to learn about iOS, don't miss this training. Quentin and Etienne are exceptional researchers. No CVE β no 0-days ππ
There are still seats available for our "iOS for Security Engineers" training at #HEXACON2025! Book it while it's hot π Conference tickets are also still available if you register for a training.
0
7
18
It's never too late to start vulnerability research on iOS! Our training has been made by experienced iOS security researchers for newcomers in the iOS area who want to start developing "extremely sophisticated attacks"! :-)
hexacon.fr
Offensive security conference organized by seasoned professionals, in the heart of Paris. 10-11th October 2025, save the date!
There are still seats available for our "iOS for Security Engineers" training at #HEXACON2025! Book it while it's hot π Conference tickets are also still available if you register for a training.
3
6
34
Don't miss our 2 trainings π π iOS for Security Engineers βοΈ Azure intrusion for red teamers
π Training ticket sales for HEXACON 2025 open TODAY at 2PM UTC+2! Limited spots available π₯ https://t.co/vZUo5mOvyw
0
7
15
Just wrapped up two fantastic training sessions at #Hexacon! A big thank you to everyone who joined us for our deep dives into Active Directory/Azure and iOS internals. It was great to share knowledge and learn together!
1
5
25
Escaping the Safari Sandbox: A tour of WebKit IPC #MobileSecurity #iOSsecurity [SLIDES] by @Synacktiv
https://t.co/cSnAac9Kee
0
16
96
Half the tickets already sold! Checkout our four-day trainings on advanced AD and Azure exploitation and iOS internals at Hexacon in Paris this year (Sept 30th - Oct 3rd): π https://t.co/33oRFOFgmh π
0
10
19
iOS is being touted as the "most secure OS", but is this claim substancial? Discover the many security features implemented by Apple with "iOS for Security Engineers" training: β‘οΈ https://t.co/o0ulZWXILO π 30/09-03/10 2024 πEspace Vinci, Rue des Jeuneurs, Paris
hexacon.fr
Offensive security conference organized by seasoned professionals, in the heart of Paris. 10-11th October 2025, save the date!
1
2
14
A few tickets for #HEXACON2024 are still on sale, don't miss them! Register for our top-notch trainings and learn from the best in the industry π https://t.co/vZUo5mOvyw
1
9
21
WebKit developpers are always Faster Than Light π
github.com
https://bugs.webkit.org/show_bug.cgi?id=274132 rdar://128008234 Reviewed by Yusuke Suzuki and Keith Miller. * Source/WebKit/GPUProcess/EntryPoint/Cocoa/XPCService/GPUServiceEntryPoint.mm: (GPU_SE...
0
3
19