I like to break stuff / Security at @Microsoft / Sometimes I play CTFs with @GaneshICMC / Personal Account ⟦PT/EN⟧
Joined June 2018
- Tweets 67
- Following 427
- Followers 375
- Likes 476
3 Photos and videos
I'll be talking to MSRC folks about some of my research process and maybe some of the vulns I've found, come ask questions!
21 Aug 2025
Are you a security researcher hoping to qualify for Zero Day Quest or looking to level up your research game? MSRC invites you to a two-part series of candid conversations with our internal researchers, designed to help you sharpen your skills and stay inspired during the Research Challenge.
In each session, we’ll explore how security researchers approach their work, from identifying new opportunities to navigating challenges and solving complex problems. Whether you're just starting out or deep into your research journey, you'll gain practical insights and lessons learned.
Featured speakers:
Estevam Arantes (@Es7evam), Security Software Engineer, Microsoft
Santiago Zanella-Béguelin (@xEFFFFFFF), Principal Researcher, Microsoft
Mark your calendars:
Security Chats: Inside the Research Process
🗓️ Part 1: August 26, 2025 | 10–11 AM PT
🗓️ Part 2: September 3, 2025 | 10–11 AM PT
Register now: microsoft.eventsair.com/msrc…
#ZeroDayQuest
6
493
Estevam retweeted
11 Aug 2024
Great talking with the amazing Microsoft Office Security team. #MSFTBlackHat
3
25
3,964
Estevam retweeted
28 Feb 2024
Exciting News! 📢 We're boosting our Microsoft 365 Insider Bounty Program, increasing awards up to $30,000 and expanding the scope of eligible vulnerabilities in our Office products and services. Find out more in our blog: msft.it/6019cr7yt
13
30
21,821
Estevam retweeted
8 Jan 2024
And here's the link to apply as a member of the team (as an engineer).
google.com/about/careers/app…
14 Dec 2023
Google's Product Security Team (my broader team!) is hiring in Brazil! Here's the link for the Manager we want to hire there to start the team!
google.com/about/careers/app…
12
26
7,368
The Office Security team is hiring! Feel free to reach out if you have any questions.
jobs.careers.microsoft.com/g…
265
Estevam retweeted
29 Aug 2022
Stop on by the Office Insider Bug Bounty Program and check out the new attack scenario for Microsoft Defender Application Guard for Office with awards up to $15,000!
microsoft.com/en-us/msrc/bou…
1
9
24
Looking forward to seeing some nice research😃
8 Aug 2022
Hope everyone enjoys tomorrow's Office symbol release. Thanks to everyone inside of Microsoft for making this happen. It was a bit of work. We look forward to enabling high quality Office research. 😀
msrc-blog.microsoft.com/2022…
Estevam retweeted
30 Nov 2021
Urna eletrônica:
O Teste Público de Segurança 2021 chegou ao fim. Os pesquisadores descobriram algumas vulnerabilidades 'interessantes' na urna, que deverão ser corrigidas pelo TSE até maio.
Acompanhe 👇
30
314
1,523
Wanna learn heap exploitation in the post-safe-linking era? A new release of how2heap is here to help! Check it out! github.com/shellphish/how2he…
1
121
458
Para quem tem interesse, vale a leitura técnica em urnaeletronica.info
5 Oct 2021
Internet BR celebra "abertura" do código-fonte da urna e ignora que inspeção:
- É reservada a certas instituições
- Acontece apenas em BSB
- É restrita à leitura do código (milhões de linhas)
- Não cobre alterações posteriores
- Acontece assim faz tempo
x.com/TSEjusbr/status/144507…
Estevam retweeted
7 Sep 2021
Hello Everyone,
Need the Cybersecurity community's help. We need to vote so Twitch has a Cybersecurity category, so we stop using "science and technology". Please enter here and vote: twitch.uservoice.com/forums/…
@NahamSec @thecybermentor @stokfredrik Would U RT please? Thanks!!!
2
40
67
Not sure if this is about fuzzing or virology
2 Aug 2021
what doesn't kill you mutates & will try again.
1
Estevam retweeted
30 May 2021
#Pwn2Win 2021 is over! Thanks to all the Brazilian teams!
Congratulations to top3 Brazil ! \o/
Top 1 - @GaneshICMC
Top 2 - @fireshellst
Top 3 - #ShingekiNoChikungunya
1
15
45
Inspired by @TinkerSec, I'll tweet out a "hack job" I recently did. I rarely pentest companies, I've always been a blue teamer. The pentest gigs I do are generally favors to other blue team friends to teach them. My rate was $50/h which is much lower than what I typically charge.
23
267
1,088
RT @hacknotcrime: What most people think hacking is versus what hacking really is.
1,714
Estevam retweeted
1 Jul 2020
A etapa do nosso babaca preferido tem campeão!! Parabéns pela sua vitória e classificação, @es7evam. Exploitou essa etapa com sucesso.
.
E você? Está esperando o que para ser um dos campeões do maior campeonato estilo CTF da América Latina?
#FiqueEmCasa #MasFiqueOwnando
3
18