Security researcher @onapsis. I write about stuff at lmkalg.github.io and develop ugly tools that you can find at github.com/lmkalg

Joined May 2010
25 Photos and videos
Pinned Tweet
Just finished our presentation at #BHUSA of how attackers may root your enterprise servers! I hope attendees understood and enjoyed our research. Now is time to grab a beer and enjoy the rest of the conference @BlackHatEvents. @_1ggy, it was a pleasure working with you mate!
3
7
46
Pablo Artuso 🗿🇦🇷 retweeted
12 Nov 2024
Arranca la @ekoparty mañana, arme unas calcos y un challenge usando Raspberry Pi Pico. Mañana publico más información del challenge para los que quieran participar, se pueden ganar unas Raspberry Pi Pico y algún otro premio sorpresa. #ekoparty #hardwarehacking
1
6
35
1,794
Pablo Artuso 🗿🇦🇷 retweeted
10 Oct 2024
No tires tus electrónicos en la calle, llévalos a la @ekoparty y deja que alguien los reutilice o los recicle. Si no tomamos conciencia ahora, dudo que pueda escalar mucho más tirar las cosas fuera de nuestra vista. #basuraelectronica #etrash #reducir #reutilizar #reciclar
6
10
1,341
Pablo Artuso 🗿🇦🇷 retweeted
16 Sep 2024
Así como el año pasado, este año también se va a poder llevar dispositivos electrónicos a la @ekoparty para ser reutilizados o reciclados. No tiremos dispositivos electrónicos, hagamos un esfuerzo para que haya menos basura electrónica. Si tenes algo llévalo, por favor colabora.
A todos los participantes de la @ekoparty les recomiendo que traigan su hardware viejo y en desuso. Esto incluye computadoras, teléfonos, tableta, baterías, etc. Colaboremos entre todos para que la “basura” electrónica sea tratada de forma responsable.
1
16
25
2,211
Pablo Artuso 🗿🇦🇷 retweeted
I'm thrilled to announce that my talk "Gotta Cache Em All: Bending the Rules of Web Cache Exploitation" was accepted at Black Hat USA 2024! I'll be showing how to abuse web cache parsers to completely compromise thousands of sites! #BHUSA @BlackHatEvents blackhat.com/us-24/briefings…

10
25
243
29,148
My talk at Ekoparty about how I was able to combine two independent research projects in order to compromise SAP systems though the Internet and without authentication is out! Thanks #ekoparty for everything! It was an outstanding experience! youtube.com/watch?v=qNZ6R4xf…
6
5
802
Pablo Artuso 🗿🇦🇷 retweeted
A todos los participantes de la @ekoparty les recomiendo que traigan su hardware viejo y en desuso. Esto incluye computadoras, teléfonos, tableta, baterías, etc. Colaboremos entre todos para que la “basura” electrónica sea tratada de forma responsable.
5
9
3,220
Pablo Artuso 🗿🇦🇷 retweeted
14 Aug 2023
👀 .@lmkalg and @_1ggy killing it at #BHUSA last week! And #ICYMI the full report around their recent #P4CHAINS findings is live 🎉 Check it out here: bit.ly/44ZrJ8P #SAPsecurity
1
3
287
Pablo Artuso 🗿🇦🇷 retweeted
We have a special recommendation for you: @BlackHatEvents talks that are not to be missed! 🎉 🔗 blackhat.com/us-23/briefings… by @lmkalg & @_1ggy 🔗 blackhat.com/us-23/briefings… by @marcosd4h & @thezachw 🔗 blackhat.com/us-23/features/… by @UnaPibaGeek Good luck to everyone! ⚡

ALT martin scorsese casino GIF

4
9
535
Are you a student willing to be part of the security industry? Would you like to receive a complimentary briefing pass for this year's @BlackHatEvents ? If you may be a fit, keep reading .. (Retweets to help spread the word will be really much appreciated)
1
8
7
942
@BlackHatEvents has this amazing idea of letting speakers propose students who will receive a complimentary briefing pass for the conference. An exciting opportunity to keep building the security industry. There are some requirements you must accomplish to be a fit:
1
196
* 18 years * Full academic status at College/Univ * College/Univ id card Keep in mind that you should deal the rest of the expenses (hotel, food, travel, etc) If you want to apply, DM me explaining why would you like to be part, and with @_1ggy we'll try to select some of you.
163
Our talk was accepted for @BlackHatEvents. I'm super happy but still shocked about this news. I wrote some paragraphs about this achievement linkedin.com/posts/pablo-agu… Hope you enjoy our new talk with @_1ggy

6
4
21
970
Pablo Artuso 🗿🇦🇷 retweeted
Sunday read. This is hilarious. Engineers are competing who creates the worst UI on Reddit. I think the winners are: 1/ Enter your phone number
463
12,797
63,290
14,659,675
Pablo Artuso 🗿🇦🇷 retweeted
⛓️Confirmed, Intel OEM private key leaked, causing an impact on the entire ecosystem. It appears that Intel BootGuard may not be effective on certain devices based on the 11th Tiger Lake, 12th Adler Lake, and 13th Raptor Lake. Our investigation is ongoing, stay tuned for updates.
⛓️Digging deeper into the aftermath of the @msiUSA data breach and its impact on the industry. 🔥Leaked Intel BootGuard keys from MSI are affecting many different device vendors, including @Intel , @Lenovo, @Supermicro_SMCI, and many others industry-wide. 🔬#FwHunt is on!
40
726
1,815
1,130,426
Since 12/22, SAP is patching critical vulnerabilities as a result of a research project that I've been doing for some time. Today, my key finding was patched: CVE-2023-28761. An innocent 6.5 bug, that opens the door to abusing all those critical patched bugs through the Internet.
2
7
19
2,321
Pablo Artuso 🗿🇦🇷 retweeted
¡A las 10.30hs inicia el Sponsor Track en la SALA E de la #Eko202 con la charla de @idfavro de @onapsis: "Lessons learned from pentesting 100's of SAP systems"!
1
7
13
Pablo Artuso 🗿🇦🇷 retweeted
13 Oct 2022
¿Queres aprender sobre hardware hacking? ¿Tu empresa o productos utiliza hardware de terceros y no sabes cómo auditarlos? ¿Tenes dispositivos IoT en tu red y queres hacer un pentest? Anótate en mi training de la @ekoparty y aprende de forma práctica. ekoparty.org/en_US/eko2022/t…

14
25
Hice la versión 0.01 del training y me voló la cabeza. Ni me imagino lo que debe ser la final. Y en español? Diría que es único. Súper recomendado!
12 Jul 2022
Este año voy a estar dando un training sobre cómo auditar sistemas embebidos. Podes aprender a auditar desde un wireless router a un aire acondicionado smart de manera práctica.
2
Pablo Artuso 🗿🇦🇷 retweeted
I am thrilled to announce that my talk “Internal Server Error: Exploiting Inter-Process Communication with new desynchronization primitives” was selected for @defcon Las Vegas! More info can be found at #DEFCON30 website forum.defcon.org/node/242287

1
4
19