Talks

Talks & slides

Times I stood in front of a room and explained, out loud, how the software was broken. Slides linked where the venue hasn't lost them yet.

2026
Pre-Auth RCE for Fun and Slightly Less Profit
The CVE-2026-31337 chain, walked through live, on a laptop that thankfully did not blue-screen.
Hexacon · Paris
slides
2025
Asking EDR Nicely: A Field Guide
Userland unhooking, and why "trusted process" is carrying an entire threat model on its back.
LeHACK · Paris
slides
2025
Domain Admin Before the Coffee Finished
An Active Directory attack path that is somehow still your problem. Forty minutes, zero screenshots of my own lab exploding.
BSides · Lisbon
recording tbd
2024
I Read the Documentation. That's How I Knew.
A short, petty talk about finding bugs by simply believing the manual and watching the software disagree.
Internal brownbag · a conference room
slides