@robHerrera_

Security Researcher Wireless 📶 and Embedded security 🧑🏻‍💻 are my gotos. All opinions stated are my own

Joined June 2022
  • Tweets71
  • Following501
  • Followers322
6Media
Robert Herrera retweeted
Hexacon@hexacon_frOct 17
When Picos Attack – USB Exploit Engineering by Alex Plaskett (@alexjplaskett)
5
39
3,238
Don’t normally post about non-tech stuff but couldn’t help but share an awesome experience. I recently had the opportunity to view The Odyssey (totally recommend watching it) in a different light while in the company of a mastermind of all things Homer. Doing so helped me learn so much about the central themes and how they influenced each character's decisions throughout the story. I wanted to share a link to his superb, detailed work on this subject in case anyone is interested! tandfonline.com/doi/full/10.…

The Iron Thūmos and the Empty Vessel

Published in Jung Journal: Culture & Psyche (Vol. 20, No. 3, 2026)

tandfonline.com
1
1
206
Robert Herrera retweeted
Alex Plaskett
@alexjplaskettAug 9
Slides and whitepaper of Gone in 60 Frames – USB Video Exploitation by @robHerrera_ and myself seem to be on the #defcon34 media server now! Slides - media.defcon.org/DEF%20CON%2… Whitepaper - media.defcon.org/DEF%20CON%2…
4
51
1
165
15,217
Looking forward to Sunday! Very humbling to be back at @DEFCON after a few years, and even more pumped to be giving my first DEFCON talk alongside @alexjplaskett!
1
1
10
1,018
Robert Herrera retweeted
Alex Plaskett
@alexjplaskettJul 26
Looks like @robHerrera_ and my DEF CON 34 talk details are now public ‼️ Gone in 60 Frames - USB Video Exploitation! defcon.org/html/defcon-34/dc…
3
6
53
3,533
If you like finding bugs and you’re good at ‘sploiting them, Join us 👾😁
Alex Plaskett
@alexjplaskettMay 15
Day 1 of @offensive_con My team at NCC, exploit development group is recruiting an experienced researcher! If you’re looking for a new role and here feel free to reach out.
3
16
4,076
Great job @ASN_Sinanju_06S !
Alex Plaskett
@alexjplaskettMar 17
An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by @ASN_Sinanju_06S a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug! nccgroup.com/research/vulner…
1
4
943
Totally excited!!! 😎
Insomni'hack@1ns0mn1h4ckMar 1
What does it take to exploit Linux Kernel USB vulnerabilities against a modern Linux version? Learn more with @robHerrera_ and @alexjplaskett in their talk "Exploiting USB on a Tesla IVI". Secure your ticket: ow.ly/zSHE50Ykbum #Infosec #INSO26 #CyberConference
4
266
Robert Herrera retweeted
hardwear.io@hardwear_io31 May 2025
🏠🔓 Is your alarm system truly safe? #PowerG is used everywhere, but its secrets were locked tight—until now. James Chambers and Sultan Qasim Khan reverse engineered the protocol, found a major flaw, and they’re sharing the results at #hw_ioUSA202 👉hardwear.io/usa-2025/speaker…
1
3
743
Robert Herrera retweeted
1ce0ear
@1ce0ear17 Oct 2024
More details about CVE-2024-44068 - it’s part of an EoP chain in the wild: googleprojectzero.github.io/…

CVE-2024-44068: Samsung m2m1shot_scaler0 device driver page use-after-free in Android

Information about 0-days exploited in-the-wild!

googleprojectzero.github.io
3
50
1
192
25,593
Robert Herrera retweeted
dmnk.bsky.social@domenuk15 Oct 2024
Replying to @b1ack0wl
We have a Gidra fork with MIPS16e2 support here if you're too lazy to write it github.com/FirmWire/ghidra

GitHub - FirmWire/ghidra: Ghidra is a software reverse engineering (SRE) framework

Ghidra is a software reverse engineering (SRE) framework - FirmWire/ghidra

github.com
6
9
1,213
Anybody fairly familiar with modifying or augmenting QEMU (specfically Avatar-QEMU) please DM me :) I'm trying to add onto it and failing miserably thus far and have a lot of questions.
2
8
1,981
A great opportunity to work with some exploit wizards and masters of their craft! 🙌
Alex Plaskett
@alexjplaskett27 Aug 2024
My team EDG is looking for an experienced exploit developer! RT's welcome! This is a full time research and development role, primarily contributing to the developing of capabilities for consultants, showcasing knowledge, collab with other teams etc. nccgroup.wd3.myworkdayjobs.c…
2
5
1,929
🇬🇧🇬🇧 Not long now till myself and @_mccaulay talk about exploiting an EV charger controller and our approach in London.
44CON@44CON21 Aug 2024
The 44CON 2024 Schedule is up! Go and check it out: 44con.com/44con-2024-schedul…
3
15
2,897
Robert Herrera retweeted
Alex Plaskett
@alexjplaskett9 Aug 2024
40 page whitepaper on Exploiting Sonos One Over-The-Air talk! nccgroup.com/media/uzbp3ttw/…
5
114
5
341
68,834
I’m just now starting to process the immense amount of emotions I have about getting the opportunity to present at BlackHat and meet some super smart people. Huge shout out to @alexjplaskett for encouraging me to co-present with him! 🙏 #BHUSA
5
2
26
2,281
We’ve got a couple of really cool PoCs to show off for tomorrow’s talk. Be sure to stop by!
Alex Plaskett
@alexjplaskett7 Aug 2024
Not long left until tomorrow the 8th 11:20 PST when myself and @robHerrera_ demonstrate remote kernel code execution and audio capture implant deployment against Sonos devices in @BlackHatEvents South Pacific F, Level 0. #BHUSA
2
14
2,011
Don't forget! Tomorrow, on the 8th at 11:20am PST @alexjplaskett and @robHerrera_ present Listen Up: Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap at @BlackHatEvents #BHUSA
4
1
14
2,256
New Blog: Enumerating System Management Interrupts research.nccgroup.com/2024/0…
Chart showing Duration of the SMI over time.

ALT Chart showing Duration of the SMI over time.

1
4
556
Happy to announce @robHerrera_ and myself will be presenting about Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap at BlackHat USA this year! We will demo remotely compromising the device and capturing audio. blackhat.com/us-24/briefings…
9
28
138
22,795
Load more