Back at Hexacon this year — excited to share my latest research!
📢 Breaking the Vault: USB Bugs and Bug Bounty Failures by Sergei Volokitin (@hexpl0t)
Sergei Volokitin retweeted
Sergei Volokitin, @hexpl0t, is an independent Security researcher, and focuses mainly on security testing of embedded systems and mobile devices.
Sergei showcases 5 distinct vulnerabilities in @Xiaomi's Outdoor Camera & the latest Smartwatch.
More info: linkedin.com/posts/off-by-on…
Sergei Volokitin retweeted
⚠️ 🛜 Vulnerabilities Exposed: Join Sergei Volokitin at #hw_ioNL2024 as he analyzes the impact of CVE-2024-22004 and CVE-2024-22013 on the security of Google Nest Wi-Fi Routers!
Know More: hardwear.io/netherlands-2024…
#googlenest #vulnerability #android
Looking forward to presenting my research tomorrow @hexacon_fr !
I am thrilled to once again present my research at @hardwear_io this year
🔊Exploitation of a popular #smartspeaker, present in more than 3 million homes!
💡Sergei Volokitin will showcase physical attacks on the device in order to get root by manipulating unauthenticated contents of the NAND flash
Know more➡️hardwear.io/netherlands-2023…
#hw_ioNL2023
Sergei Volokitin retweeted
"This is my setup. It is quite elegant..." - @volokitinss
#hw_ioNL2022
Sergei Volokitin retweeted
In this #BHEU Briefing @jmartijnb shows how they gained root by inserting a malicious USB device that exploits a forgotten vulnerability in the USB stack of the Linux kernel, known as CVE-2016-2384. Learn more here: informatech.co/3lyMWS0
Very excited about several Samsung TA vulnerabilities, that are finally fixed (CVE-2020-13832). A complete write-up is coming soon
Sergei Volokitin retweeted
Bored in isolation? Do not despair! #OffensiveCon20 videos are now up! youtube.com/playlist?list=PL…
Sergei Volokitin retweeted
Replying to @tieknimmers
@tieknimmers will walk you through the same paths real attackers take to identify Secure Boot vulnerabilities in real devices at this #BHUSA Training. Learn more here: ow.ly/Dtu850ysUQG
Sergei Volokitin retweeted
I’m really excited I get the chance to talk about my most recent research about Android’s File Based Encryption!
Grab those keyz and learn somebodies darkest secrets! by @jmartijnb offensivecon.org/speakers/20…
Sergei Volokitin retweeted
Intel are disclosing 77 vulns today (blogs.intel.com/technology/2…), some in their CPUs - HW bugs are always painful, but hardware is never perfect. Happy to see TAA disclosed after I found it >1y ago, but @dkg0414's page size issue looks a lot more painful. JCC icache errata too.
Sergei Volokitin retweeted
Glitch in the Matrix: Exploiting Bitcoin Hardware Wallets by Sergei Volokitin youtube.com/watch?v=ZCUrm4ST…
First successful EMFI glitch on the stage @offensive_con #offensivecon19



















