Edouard Bochin (@le_douds) header
Edouard Bochin (@le_douds) profile picture

Edouard Bochin

@le_douds
Joined July 2023
  • Tweets13
  • Following80
  • Followers374
Edouard Bochin retweeted
offensivecon (@offensive_con) profile picture
offensivecon
@offensive_conOct 28
Off by 2 Bits: Post-Mortem of a “Perfect” Safari Exploit at Pwn2Own by @le_douds and @ga1ois
Image from offensivecon (@offensive_con)
1
3
31
1,780
So close 🥲
Tao Yan (@ga1ois) profile pictureTao Yan@ga1oisMay 15
[2]After our failed competition, we headed to Apple Store and bought the mbp m5 and spent less than half an hour to set it up and found a fixed offset is changed 1 bit on it, so we just change 1 bit on our exp and it worked with a 100% success rate. Yes just 1 bit change, 1 to 2.
Image from Tao Yan (@ga1ois)
5
460
Video is live! youtube.com/watch?v=YQEq5s4S…
Image from LiveOverflow 🔴 hextree.io (@LiveOverflow)
5
30
197
19,747
Edouard Bochin retweeted
Hexacon (@hexacon_fr) profile picture
Hexacon@hexacon_fr10 Oct 2025
Exploiting the Undefined: PWNing Firefox by Settling its Promises by Tao Yan (@ga1ois) and Edouard Bochin (@le_douds)
Image from Hexacon (@hexacon_fr)
3
24
2,702
Edouard Bochin retweeted
Hexacon (@hexacon_fr) profile picture
Hexacon@hexacon_fr12 Sep 2025
Aaaand the first talk to be announced is... 🥁 Exploiting the Undefined: PWNing Firefox by Settling its Promises by @ga1ois & @le_douds
Image from Hexacon (@hexacon_fr)
1
4
1
48
6,870
In another video highlight from day two of #Pwn2Own Berlin, Edouard Bochin (@le_douds) and Tao Yan (@Ga1ois) from Palo Alto Networks successfully target Mozilla Firefox. youtube.com/shorts/nu6D9Fs3o…
From Pwn2Own Berlin 2025: Palo Alto vs Mozilla Firefox

From Pwn2Own Berlin 2025: Palo Alto vs Mozilla Firefox

#0day #pwn2own In this highlight from Day Two of Pwn2Own Berlin 20...

youtube.com
1
1
7
4,197
Congrats to @mozilla for being the first vendor to patch their #Pwn2Own bugs. Oh - and go update #Firefox to get the fixes. That's two years in a row Mozilla has been the fastest. Well done!
TheZDIBugs (@TheZDIBugs) profile pictureTheZDIBugs@TheZDIBugs21 May 2025
[ZDI-25-292|CVE-2025-4919] Mozilla Firefox SpiderMonkey Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 8.8; Credit: Edouard Bochin (@le_douds) and Tao Yan (@Ga1ois) from Palo Alto Networks) zerodayinitiative.com/adviso…
11
70
8,263
Edouard Bochin retweeted
Tao Yan (@ga1ois) profile picture
Tao Yan@ga1ois16 May 2025
Very nice to come back again to Pwn2Own this year at Berlin, great job @le_douds. Time to get some rest : )
TrendAI Zero Day Initiative (@thezdi) profile pictureTrendAI Zero Day Initiative
@thezdi16 May 2025
Excellent! Edouard Bochin (@le_douds) and Tao Yan (@Ga1ois) from Palo Alto Networks used an Out-of-Bounds Write to exploit #Mozilla Firefox. They earn $50,000 and 5 Master of Pwn points. #Pwn2Own #P2OBerlin
Image from TrendAI Zero Day Initiative (@thezdi)
Image from TrendAI Zero Day Initiative (@thezdi)
5
1
23
3,886
Edouard Bochin retweeted
Hossein Lotfi (@hosselot) profile picture
Hossein Lotfi@hosselot16 May 2025
First blood: Mozilla Firefox pwned at first attempt (in less than 2 seconds) using an out-of-bounds write vulnerability by Edouard Bochin (@le_douds) and Tao Yan (@Ga1ois) from Palo Alto Networks.
Hossein Lotfi (@hosselot) profile pictureHossein Lotfi@hosselot14 May 2025
There are two browser entries at #Pwn2Own Berlin 2025 both targeting "Mozilla Firefox". Let's see if it can be pwned.
5
2
24
18,156
Edouard Bochin retweeted
Tao Yan (@ga1ois) profile picture
Tao Yan@ga1ois11 Aug 2024
Really thrilled and truly honored to receive this year's Pwnie Award for Most Innovative Research with @le_douds. It's a wonderful wrap-up for our work. Can't wait to start the next journey of our research. Great thanks to @PwnieAwards! #defcon32
Image from Tao Yan (@ga1ois)
Image from Tao Yan (@ga1ois)
Image from Tao Yan (@ga1ois)
1
11
50
7,203
Edouard Bochin retweeted
Tao Yan (@ga1ois) profile picture
Tao Yan@ga1ois9 Aug 2024
We finished our presentation at #BHUSA and the slides were published here: i.blackhat.com/BH-US-24/Pres…, you can also find the latest slides and demo here: github.com/ga1ois/BlackHat-U…, enjoy, especially for our new "field confusion" V8 sbx escape technique : ) @le_douds @BlackHatEvents
Tao Yan (@ga1ois) profile pictureTao Yan@ga1ois8 May 2024
#BHUSA We are glad our talk "Let the Cache Cache and Let the WebAssembly Assemble: Knockin’ on Chrome’s Shell" was accepted for Black Hat USA 2024, we'll disclose our #Chrome research demonstrated at #Pwn2Own 2024. Stay tuned : ) blackhat.com/us-24/briefings… @le_douds @BlackHatEvents
1
24
89
14,950
Edouard Bochin retweeted
Tao Yan (@ga1ois) profile picture
Tao Yan@ga1ois8 May 2024
#BHUSA We are glad our talk "Let the Cache Cache and Let the WebAssembly Assemble: Knockin’ on Chrome’s Shell" was accepted for Black Hat USA 2024, we'll disclose our #Chrome research demonstrated at #Pwn2Own 2024. Stay tuned : ) blackhat.com/us-24/briefings… @le_douds @BlackHatEvents
4
1
20
16,476
Confirmed! @le_douds and @Ga1ois from Palo Alto used an OOB Read plus a novel technique for defeating V8 hardening to get arbitrary code execution in the renderer. The were aboe to exploit #Chrome and #Edge with the same bugs, earning $42,500 and 9 Master of Pwn points. #Pwn2Own
Image from TrendAI Zero Day Initiative (@thezdi)
1
9
2
49
18,552
Load more