talks
2023
Visual Studio Code is why I have (Workspace) Trust issues @ DEF CON You click, you lose: a practical look at Visual Studio Code’s security @ We Are Developers World Congress Patches, collisions and root shells: a Pwn2Own adventure @ TyphoonCon You click, you lose: a practical look at Visual Studio Code's security @ Insomni’hack
2022
Oups, il y a quelqu'un dans mon package manager ! @ DevOps D-Day You've got mail! And I'm root on your Zimbra server @ Hexacon Taking over the PHP supply chain: match retour @ Barbhack Pwn2Own'ing the TP-Link Archer A7 @ THCon Two bugs to rule them all: taking over the PHP supply chain @ THCon Two bugs to rule them all: taking over the PHP supply chain @ Insomni'hack
2017-2021
Pwn2Own'ing the TP-Link Archer A7 @ Barbhack 2021 Modern PHP Security @ sec4dev 2020 Time-efficient assessment of open-source projects @ Pass The Salt 2019 Wordpress Security: hunting bugs in a supermarket @ Security Day Lille 2017