
Vulnerability Researcher and Exploit Developer. LLM whisperer. Former CTO and Director of Research @Crowdfense, ex-@XI_Research.
ntoskrnl.exe
Joined November 2013
- Tweets1.8K
- Following2K
- Followers5.3K
- Likes3.2K
Paolo Stagno (VoidSec) retweeted
How to recognize the implants you can find on a Ledger Nano X today?
Learn about the Ledger Nano X display test pads, which one is the most important to watch for, and what today's known implants look like.
youtube.com/watch?v=A-R7Sm0E…
Migrated my blog and published a new post. It covers a common type confusion vulnerability pattern I found last year in RPC servers. I don’t think this is a new class of vulnerability, but I did find the same issue across multiple RPC services. whereisk0shl.top/post/From%2…
Paolo Stagno (VoidSec) retweeted
The wait is over! mona v3 is now available.
Supports Python 2 & 3,
32- and 64-bit targets,
WinDBG/WinDBGX.
Faster, leaner, broader built for modern Windows debugging and exploit development.
#mona #corelan
github.com/corelan/mona3
Sharing is caring 💛
I’ve been grinding hard on AI for the better part of the last 8+ months - learning, building, adapting, and pulling late nights just like so many others right now.
Cutting through the FUD and hype, there is real potential here. Industry-breaking potential. The era we’ve been waiting for - to finally supercharge and develop the tools and platforms we’ve wanted to build for years - is here, and agent assistance is accelerating everything.
With coding agents, I’ve built solid tools and had research breakthroughs that would have taken weeks or months before. These should feel like real wins worth celebrating. But honestly? I don’t feel victorious. In many ways, it just feels necessary to keep pace. As Dave said: adapt or be left behind - and for good reason.
I’m not ready to be left behind. But damn, I’m tired.
I’m tired of constantly reinventing myself. Tired of constantly re-tooling. Tired of the endless cycle of keeping up, the late nights, and the personal sacrifices that come with it. I’ve even lost the desire to share knowledge and research with the community the way I used to. From the conversations I’ve had, I’m far from alone - many others in this space feel the same but don’t necessarily vocalize it outside of smaller circles.
Is it because I see AI purely as a threat? Not really. The offensive side of our industry has been heading this way for a while, and I’ve been moving with it. The truth is, the excitement Dave describes is real - but for me right now, it’s mixed with exhaustion. I’m grateful for the breakthroughs, yet I catch myself wondering how long I can sustain this level of constant reinvention without something giving. The early-2000s energy is back, sure… but so is the burnout that often came with it.
Being a bit older now, with young kids at home, the pace hits differently. I don’t have the same endless energy I once did, and the late nights and constant context-switching carry a heavier weight. Finding balance is tough, but it feels more important than ever. Hopefully we can all figure out how to ride this wave more sustainably - without burning out in the process.
What I see in cybersecurity:
AI has re-invigorated an industry that was largely stale for the past ten years.
Complete new green field. Changes everything. New innovation happening everyday.
Need to adapt or be left behind.
This reminds me of the early 2000s, it’s exciting, addicting, and it’s going to be fun as hell.
Paolo Stagno (VoidSec) retweeted
We appreciate @crowdfense's continued support to Offensivecon as a Silver Sponsor!
Paolo Stagno (VoidSec) retweeted
Patch diffing + RCA for clfs.sys can awhile.
I gave the diff + binary to a local LLM.
It mapped the UAF path, race condition, all IOCTLs in <20 min
LLMs don't replace the work, they are momentum.
New blog post following the UAF trail of CVE-2025-29824: clearbluejar.github.io/posts…
Paolo Stagno (VoidSec) retweeted
Samstung Part 2 :: Remote Code Execution in MagicINFO 9 Server
srcincite.io/blog/2026/01/28…
Paolo Stagno (VoidSec) retweeted
Samstung Part 1 :: Remote Code Execution in MagicINFO 9 Server
srcincite.io/blog/2026/01/28…
Paolo Stagno (VoidSec) retweeted
Blog post: On the Coming Industrialisation of Exploit Generation with LLMs sean.heelan.io/2026/01/18/on…
TL;DR: I ran an experiment with GPT-5.2 and Opus 4.5 based agents to generate exploits for a zeroday QuickJS bug. They're pretty good at it.
Code: github.com/SeanHeelan/anamne…
Paolo Stagno (VoidSec) retweeted
I wrote about a file format for Unreal Engine 2 games which for the last 20 years has inadvertently hidden game assets from data miners... until now :) landaire.net/a-file-format-u…
Paolo Stagno (VoidSec) retweeted
Man if I see someone drop a remote zero click for $1m I’m going to give up and become a farmer
Paolo Stagno (VoidSec) retweeted
Crowdfense is ready for @TheOffensiveX in Athens!
Meet us at our stand to talk 0-days, research and offensive security.
Let’s connect offensivex.org/, follow the bugs 🪲🐞🐜🪳🕷️🐛
Paolo Stagno (VoidSec) retweeted
20 years of a great conference and community, don't miss it!
[#POC2025 NOTICE]
20 Years. Reborn.
The brand evolved - The mission remains.
Welcome to a new era of POC.
⏰ Date: November 13–14, 2025
📍 Venue: Four Seasons Hotel, Seoul, South Korea 🇰🇷
🎤 CFP: June 5 – September 30
🧑💻 Training: June 5 – September 30
🎟️ Registration: September 1 – October 31
More info 👉 powerofcommunity.net
Paolo Stagno (VoidSec) retweeted
At #SAFACon2025 we hosted the 1st-ever Security Panel to discuss key topics in our industry and it was a great success! Thanks to panelists @f_roncari, @voidsec, and Luca T.@gymiru for great moderation,@xerub for inspiring keynote & all people for engaging and making it special!
Paolo Stagno (VoidSec) retweeted
As part of our n-day feed for both red and blue teams
#MadLicense 0-click RCE 🤔
Did you know that we do have weaponized exploit for this bug at @crowdfense 😉
Paolo Stagno (VoidSec) retweeted
Taking off to Seoul! See you at #Zer0con2025 in a bit ☺️ @POC_Crew
@f_roncari @lpontorieri @Void_Sec
RT @POC_Crew: [#Zer0Con2025] Gold Sponsor
@crowdfense is the go-to, trusted partner for top-tier zero-day exploits!
Submit your vulnerabil…
Paolo Stagno (VoidSec) retweeted
We heard you needed some more time, so we wanted to let you cook.
We decided to push the Phrack 72 CFP deadline back until June 15th.
Stay tuned for upcoming Phrack events.
Print this flyer out and give it to someone IRL!!
Paolo Stagno (VoidSec) retweeted
Hey there,
Finally published the article on the exploit for CVE-2025-21333-POC exploit.
Here the link to the article: medium.com/@ale18109800/cve-…





























