@pixiepointsec profile picture
PixiePoint Security @pixiepointsec

A Cybersecurity Consultancy Boutique that Provides Niche & Bespoke Research Services

Joined September 2019
  • Tweets 30
  • Following 0
  • Followers 802
4 Photos and videos
Pinned Tweet
PixiePoint Security@pixiepointsec
1 Dec 2020
If you like 0-day and N-day research, we'll love to hear from you! pixiepointsecurity.com/caree…

Join The Team | PixiePoint Security

PixiePoint Security is a cybersecurity consultancy boutique that offers niche and bespoke research services

pixiepointsecurity.com
2
8
9% into 2026 and look what @cloudlldb already have... :)
0:23
1
16
4,014
What better way to get into x'mas vibes than @flyingpassword dropping a BFS n-day (CVE-2025-29970) blog post! (Santa would approve :)) Merry X-mas! pixiepointsecurity.com/blog/…

Microsoft Brokering File System Elevation of Privilege Vulnerability | PixiePoint Security

About 2 years ago, Microsoft first released Win32-App-isolation which is a sandbox-like mechanism to further separate application access to resources on Windows clients. Brokering File System (BFS)...

pixiepointsecurity.com
2
12
42
9,115
And... hot on the heels will be @voix44er attempting the Philips Hue Bridge this week! All the best and have fun!
1
1
7
3,250
Looks like @__neverm0r_ and @b1thvn_ TyphoonPwn entry is patched this month as CVE-2025-55681... thanks @SecuriTeam_SSD for the fun experience!
2
17
4,515
If u think that Windows research is all we do, think again! In our first IOT blog, @voix44er details the Wolfbox EV charger setup, attack surface, his #Pwn2Own Automotive 2025 bug, exploitation, and best of all, displaying our name on it (in styleee...)! pixiepointsecurity.com/blog/…
19
69
6,240
Happy Friday! Our intern, @__neverm0r_ , discovered and reported a NPD due to race-condition in afd.sys. Wasn’t assigned a cve doesn’t mean it’s less interesting, right!? pixiepointsecurity.com/blog/…

Windows Ancillary Function Driver (afd.sys) Race-Condition Null-Pointer Dereference | PixiePoint...

This blog will demonstrate a crash I found in Ancillary Function Driver for winsock (afd.sys). The bug was a race condition in Windows Registered Input/Output component that led to a NULL pointer...

pixiepointsecurity.com
23
111
35,694
Proud to see @_jaelkoh (with @saidelike) talking about undocumented internals of KTM, the bugs and exploits in 'Hunting for Overlooked Cookies in Windows 11 KTM and Baking Exploits for Them'. No ovens required for this recipe!
offensivecon
@offensive_con
25 Apr 2025
2025 agenda is out! offensivecon.org/agenda/2025…
3
10
2,608
Unfortunate, but still a good showing! 🫡
TrendAI Zero Day Initiative
@thezdi
23 Jan 2025
Replying to @thezdi
Confirmed (with a collision)! Rafal Goryl of PixiePoint Security used a 2 bug chain to exploit the WOLFBOX Level 2 EV Charger, but one of the bugs was previously known. He earns himself $18,750 and 3.75 Master of Pwn points. #P2OAuto
1
3
781
Annnddd... the odds ARE in your favor! Congrats @voix44er ! This result is just the cherry on the cake. Regardless of what it may be, what we don't see is the dedication and hard work put into the research.. 💪💪💪
TrendAI Zero Day Initiative
@thezdi
23 Jan 2025
Success! On his second attempt, Rafal Goryl of PixiePoint Security was able to exploit the WOLFBOX EV charger. He heads off the the disclosure room to provide us with all the details. #P2OAuto #Pwn2Own
3
9
1,563
Hello world! First post in 2025; @voix44er attempting to pwn WolfBox EV charger at #P2OAuto on Day 2. “May the odds be ever in your favor”!
5
13
2,188
Sometimes your past has a way of sneaking up/"garbage-collecting" on you.. Well done @b1thvn_, and thanks @TheZDIBugs for tracking these zerodayinitiative.com/adviso… zerodayinitiative.com/adviso…

1
3
1,171
All shells are spawned equal, regardless of memory-corruption bugs or not! CVE-2021-34462: Exploiting the Windows AppXSvc Service Logic-Error Vulnerability pixiepointsecurity.com/blog/…

1
32
66
13,708
Credit: Dewang Ahluwalia
1,398
New year, new blog post! CVE-2021-31985: Exploiting the Windows Defender AsProtect Heap Overflow Vulnerability pixiepointsecurity.com/blog/…

1
63
154
30,674
Credit: Wei Lei
4
1,397
As it is confirmed to be the ITW CVE-2022-24521, we also contributed the content to GP0 for interested folks googleprojectzero.github.io/…

PixiePoint Security@pixiepointsec
25 Apr 2022
RCA for 1 of the 2 CLFS bugs patched in April 2022. While we can't determine the CVE, we did managed to exploit it ;) ... credit: @b1thvn_ pixiepointsecurity.com/blog/…
1
14
51
Props to @maddiestone for maintaining this ITW RCA program :)
1
4
Corrected url: googleprojectzero.github.io/…

CVE-2022-24521: Windows Common Log File System (CLFS) Logical-Error Vulnerability

Information about 0-days exploited in-the-wild!

googleprojectzero.github.io
5
RCA for 1 of the 2 CLFS bugs patched in April 2022. While we can't determine the CVE, we did managed to exploit it ;) ... credit: @b1thvn_ pixiepointsecurity.com/blog/…
56
143
Demo of CVE-2021-31985... credit: Wei Lei
0:34
2
24
112
Load more