Reposted by Romain || BZHugs
A technical look at @grapheneos.org Hardened Malloc, a memory allocator designed to mitigate heap corruption vulnerabilities (UAF, overflows) and break common exploit primitives.
Deep dive for security researchers & exploit developers by @nicoski.bsky.social
www.synacktiv.com/en/publicati...
Deep dive for security researchers & exploit developers by @nicoski.bsky.social
www.synacktiv.com/en/publicati...
Exploring GrapheneOS secure allocator: Hardened Malloc
Exploring GrapheneOS secure allocator: Hardened Malloc
www.synacktiv.com
September 22, 2025 at 1:41 PM
A technical look at @grapheneos.org Hardened Malloc, a memory allocator designed to mitigate heap corruption vulnerabilities (UAF, overflows) and break common exploit primitives.
Deep dive for security researchers & exploit developers by @nicoski.bsky.social
www.synacktiv.com/en/publicati...
Deep dive for security researchers & exploit developers by @nicoski.bsky.social
www.synacktiv.com/en/publicati...
Reposted by Romain || BZHugs
From firmware dumps to wireless exploration — check out our latest dive into DVB receiver analysis and the hidden attack surface it exposes!
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Hack the channel: A Deep Dive into DVB Receiver Security
Introduction During a garage cleaning, we found a DVB receiver and thought it would be a great target for vulnerability research.
www.synacktiv.com
April 9, 2025 at 6:36 AM
From firmware dumps to wireless exploration — check out our latest dive into DVB receiver analysis and the hidden attack surface it exposes!
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Reposted by Romain || BZHugs
In iOS 18.4, Apple introduced a bug in dynamic symbol resolutions for some specific exports. @0xf4b.bsky.social took a long journey down a rabbit hole to understand its root cause.
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
iOS 18.4 - dlsym considered harmful
Observations We first observed the bug in a custom iOS application compiled for the arm64e architecture (thus supporting PAC instructions).
www.synacktiv.com
April 10, 2025 at 1:22 PM
In iOS 18.4, Apple introduced a bug in dynamic symbol resolutions for some specific exports. @0xf4b.bsky.social took a long journey down a rabbit hole to understand its root cause.
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Reposted by Romain || BZHugs
S’agirait d’accepter que ne pas dépendre de l’étranger signifie produire localement
✊ Dimanche, sous un soleil radieux, quelque 3 000 personnes ont répondu à l’appel du collectif STopMicro et des @lessoulevements.bsky.social pour protester contre l’extension de deux usines de puce de puces électroniques dans la région de Grenoble.
@justineprados.bsky.social y était 👇
@justineprados.bsky.social y était 👇
STMicroelectronics, Soitec… près de Grenoble, 3 000 personnes manifestent contre l’accaparement de l’eau par les géants des puces électroniques
Toujours puces. Dimanche après-midi, à quelques kilomètres de Grenoble, des milliers de personnes se sont mobilisées contre l’extension de deux usines de puces électroniques et leurs impacts sur l’env...
vert.eco
April 1, 2025 at 1:08 PM
S’agirait d’accepter que ne pas dépendre de l’étranger signifie produire localement
Reposted by Romain || BZHugs
A few months ago, Microsoft released a critical patch for CVE-2024-43468, an unauthenticated SQL injection vulnerability in SCCM/ConfigMgr leading to remote code execution, discovered by @kalimer0x00.bsky.social.
www.synacktiv.com/advisories/m...
www.synacktiv.com/advisories/m...
Microsoft Configuration Manager (ConfigMgr) 2403 Unauthenticated SQL injections
Microsoft Configuration Manager (ConfigMgr) 2403 Unauthenticated SQL injections
www.synacktiv.com
January 16, 2025 at 1:25 PM
A few months ago, Microsoft released a critical patch for CVE-2024-43468, an unauthenticated SQL injection vulnerability in SCCM/ConfigMgr leading to remote code execution, discovered by @kalimer0x00.bsky.social.
www.synacktiv.com/advisories/m...
www.synacktiv.com/advisories/m...
Reposted by Romain || BZHugs
The 2025 training season is here! 🚀
Join our best ninjas for 5-day sessions on pentesting, reverse-engineering, and forensics (in French). Check out all the dates and topics on our website: www.synacktiv.com/offres/forma...
Join our best ninjas for 5-day sessions on pentesting, reverse-engineering, and forensics (in French). Check out all the dates and topics on our website: www.synacktiv.com/offres/forma...
Les formations
Synacktiv - IT Security expertise - Penetration tests, Security audits, Code review, Training, Consulting, Vulnerability research
www.synacktiv.com
December 11, 2024 at 12:59 PM
The 2025 training season is here! 🚀
Join our best ninjas for 5-day sessions on pentesting, reverse-engineering, and forensics (in French). Check out all the dates and topics on our website: www.synacktiv.com/offres/forma...
Join our best ninjas for 5-day sessions on pentesting, reverse-engineering, and forensics (in French). Check out all the dates and topics on our website: www.synacktiv.com/offres/forma...
Reposted by Romain || BZHugs
Did you ever wonder how IDS/IPS like Snort or Suricata were able to interact with the network stack of the Linux kernel? Do you also happen to like Rust?
Check our latest blogpost!
www.synacktiv.com/publications...
Check our latest blogpost!
www.synacktiv.com/publications...
Automated Network Security with Rust: Detecting and Blocking Port Scanners
www.synacktiv.com
December 6, 2024 at 3:05 PM
Did you ever wonder how IDS/IPS like Snort or Suricata were able to interact with the network stack of the Linux kernel? Do you also happen to like Rust?
Check our latest blogpost!
www.synacktiv.com/publications...
Check our latest blogpost!
www.synacktiv.com/publications...
Reposted by Romain || BZHugs
Discover a new tool for reverse engineers: "Frinet", by myr and hexabeast
Frinet: reverse-engineering made easier
www.synacktiv.com
December 18, 2023 at 11:38 PM
Discover a new tool for reverse engineers: "Frinet", by myr and hexabeast