talks

2023

You click, you lose: a practical look at Visual Studio Code's security @ Insomni’hack 2023

2022

Oups, il y a quelqu'un dans mon package manager ! @ DevOps D-Day You've got mail! And I'm root on your Zimbra server @ Hexacon Taking over the PHP supply chain: match retour @ Barbhack Pwn2Own'ing the TP-Link Archer A7 @ THCon Two bugs to rule them all: taking over the PHP supply chain @ THCon Two bugs to rule them all: taking over the PHP supply chain @ Insomni'hack

2017-2021

Pwn2Own'ing the TP-Link Archer A7 @ Barbhack 2021 Modern PHP Security @ sec4dev 2020 Time-efficient assessment of open-source projects @ Pass The Salt 2019 Wordpress Security: hunting bugs in a supermarket @ Security Day Lille 2017