McCaulay @_mccaulay

Senior Security Researcher | OSCP | CRT | Pwn2Own mccaulay.co.uk Joined June 2020

Tweets

361
Followers

4K
Following

220
Likes

500

McCaulay @_mccaulay

4 hours ago

Tesla Telematics Control Unit (TCU) - ADB Auth Bypass By myself and @alexjplaskett earlier this year - nccgroup.com/research-blog/…

2 3 12 1K 9

Download Image

I've done small (but fun) .NET Framework research, and I found a new exploitation primitive (vulnerable behavior). In many cases, it may directly lead to RCE. I'll discuss it during Black Hat EU and I'll drop a paper afterwards 🫡 blackhat.com/eu-25/briefing…

3 25 170 16K 61

SinSinology @SinSinology

2 weeks ago

NEED YOUR HELP! My Friend/Teacher Soroush (@irsdl) Is looking for a new company to join, you know him as the .NET-God, the guy who has popped exchange, sharepoint, has maintained ysoserial_.net for years, contributed to the exploitation scene numerous times, taught all of you…

15 123 234 67K 36

McCaulay @_mccaulay

3 weeks ago

Plex account data including hashed passwords accessed by "an unauthorized third party". This is a reminder to change your Plex password and use a password manager with long complex and unique passwords for each website forums.plex.tv/t/important-no…

0 0 4 762 0

Download Image

SinSinology @SinSinology

3 weeks ago

only 3 seats left for the "Advanced .NET Exploitation" September edition at RomHack (@cybersaiyanIT), come on lads, make it happen, wanna go brag about selling out 😅 grab your seat 🪑 🪑 🪑 summoning.team

1 18 50 11K 9

McCaulay @_mccaulay

a month ago

Bypassing TLS Verification on Nintendo Switch by Yannik Marchand reversing.live/sslbypass.html

3 93 418 37K 181

Download Image

Stephen Fewer @stephenfewer

a month ago

Come join @rapid7! I’m hiring for a Senior Security Researcher to join our team. You'll get to work on n-day analysis, zero-day research, exploit development, and more - focusing on enterprise software and appliances. Fully remote in the UK, details here: careers.rapid7.com/jobs/senior-se…

4 16 61 7K 16

SinSinology @SinSinology

2 months ago

enojoy the writeup folks ^-^, this was some fun reversing, as always, another falls!

watchTowr @watchtowrcyber

2 months ago

enojoy the writeup folks ^-^, this was some fun reversing, as always, another falls! https://t.co/xofkDKqWcF

3 34 97 16K 31

1 5 73 6K 14

Download Video

mbcrump - PlayStation Hacking Enthusiast @crump_youtube

2 months ago

NICE!!! Laps3c0re (Lapse + Mast1c0re) is now released! It's beginning to look a lot like Christmas... github.com/iMrDJAi/laps3c…

5 12 96 5K 7

Download Image

McCaulay @_mccaulay

2 months ago

No Tokens Required: A Movie Power Virtual Reality Breakout Exploit - mccaulay.co.uk/no-tokens-requ…

1 1 16 2K 6

OSM ツ @LegendaryOSM

3 months ago

For those who were interested I've published the first part of my write up on the PS4 debugger. I'll continue to work on the next parts as I get some free time. 😀 hackingadventures.ca/blog/ps4-retai…

3 16 94 15K 11

McCaulay @_mccaulay

3 months ago

Breaking down ‘EchoLeak’, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot by Aim Labs - aim.security/lp/aim-labs-ec…

0 1 2 780 4

McCaulay @_mccaulay

3 months ago

In Leeds for @BSidesLeeds

0 0 3 594 0

Download Image

RET2 Systems @ret2systems

4 months ago

What does it take to hack a @Sonos Era 300 for Pwn2Own? Take a look at our process of adapting existing research, establishing a foothold, and exploiting media parsers for unauthenticated RCE over the network🔥👇 blog.ret2.io/2025/06/11/pwn…

1 48 158 18K 84

Download Image

Rio @0x09AL

4 months ago

Oh you thought surprises were over for @BSidesTirana 2025 ? This year, we’re bringing Sina Kheirkhah - Pwn2Own "Master of Pwn" (@SinSinology) to run a full-day workshop on Advanced .NET Exploitation based on his course that normally goes for €4,000. He’s been kind enough to…

3 12 63 9K 6

Download Image

SinSinology @SinSinology

4 months ago

Launching a student-only free workshop: ".NET Exploitation Basics" 🪲 If you're a student (or know one), let's write some deserialization exploits, Manchester, July 12. 10 seats. summoning.team/free-training-…

1 24 125 31K 14

Download Image

SinSinology @SinSinology

4 months ago

"Advanced .NET Exploitation" June edition at @reconmtl is confirmed! We've hit 10 registered students, so the class is happening for sure. If you’ve been thinking about joining, there’s 5 more space to learn some deserialization Magic! summoning.team

1 29 93 12K 18

McCaulay @_mccaulay

5 months ago

In Berlin for @offensive_con with @alexjplaskett 🇩🇪

0 1 13 4K 0

Download Image

McCaulay @_mccaulay

5 months ago

Going to be at @offensive_con this year, see you there if you are going

offensivecon @offensive_con

5 months ago

Going to be at @offensive_con this year, see you there if you are going

3 48 124 38K 12

Download Image

0 0 9 1K 0

NCC Group Research & Technology @NCCGroupInfosec

7 months ago

NCC Group EDG @alexjplaskett and @_mccaulay will present Pioneering Zero Days at Pwn2Own Automotive 2024 where they will describe their Pioneer Pwn2Own chain and demonstrate a proof-of-concept vehicle spyware implant