Matthieu
@matthieub.bsky.social
Reposted by Matthieu
🔥 A few hours ago our experts took the stage at #DEFCON33, sharing cutting-edge research on SCCM exploitation and modern GPO attacks in Active Directory. Proud of the team! 🙌 cc @kalimer0x00.bsky.social @quent0x1.bsky.social @wilfri3d.bsky.social
August 11, 2025 at 9:39 AM
🔥 A few hours ago our experts took the stage at #DEFCON33, sharing cutting-edge research on SCCM exploitation and modern GPO attacks in Active Directory. Proud of the team! 🙌 cc @kalimer0x00.bsky.social @quent0x1.bsky.social @wilfri3d.bsky.social
Reposted by Matthieu
🔐 Data encryption in Laravel environments is based on one secret : the APP_KEY. Our ninja @remsio.bsky.social studied the impact of its leakage on the internet during an entire year.
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Laravel: APP_KEY leakage analysis
Introduction Laravel is an open-source web framework based on PHP, designed to develop web applications in a structured manner.
www.synacktiv.com
July 10, 2025 at 9:36 AM
🔐 Data encryption in Laravel environments is based on one secret : the APP_KEY. Our ninja @remsio.bsky.social studied the impact of its leakage on the internet during an entire year.
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Reposted by Matthieu
🚨 Still a few seats left for our Azure Intrusion for Red Teamers training at #HEXACON2025!
Hands‑on 4‑day labs covering Entra ID, M365, Azure resources, Azure DevOps, Intune, hybrid identities, full kill chain & stealth focus.
📍 Paris, Oct 6‑9 ➡️ hexacon.fr/trainer/barb...
Hands‑on 4‑day labs covering Entra ID, M365, Azure resources, Azure DevOps, Intune, hybrid identities, full kill chain & stealth focus.
📍 Paris, Oct 6‑9 ➡️ hexacon.fr/trainer/barb...
July 11, 2025 at 8:32 AM
🚨 Still a few seats left for our Azure Intrusion for Red Teamers training at #HEXACON2025!
Hands‑on 4‑day labs covering Entra ID, M365, Azure resources, Azure DevOps, Intune, hybrid identities, full kill chain & stealth focus.
📍 Paris, Oct 6‑9 ➡️ hexacon.fr/trainer/barb...
Hands‑on 4‑day labs covering Entra ID, M365, Azure resources, Azure DevOps, Intune, hybrid identities, full kill chain & stealth focus.
📍 Paris, Oct 6‑9 ➡️ hexacon.fr/trainer/barb...
Reposted by Matthieu
🚨 Still a few days to register for our Azure Intrusion for Red Teamers training at #BHUSA! Very hands-on, full kill chain from zero to Global Admin with stealth in mind. Secure your seat now! www.blackhat.com/us-25/traini...
July 2, 2025 at 9:27 AM
🚨 Still a few days to register for our Azure Intrusion for Red Teamers training at #BHUSA! Very hands-on, full kill chain from zero to Global Admin with stealth in mind. Secure your seat now! www.blackhat.com/us-25/traini...
Reposted by Matthieu
Looking for hands‑on trainings for the end of the year? Synacktiv launches S2 sessions starting September in Paris (French) & online (English, Paris/New York hours)! Secure your seat now! www.synacktiv.com/en/offers/tr...
June 30, 2025 at 3:11 PM
Looking for hands‑on trainings for the end of the year? Synacktiv launches S2 sessions starting September in Paris (French) & online (English, Paris/New York hours)! Secure your seat now! www.synacktiv.com/en/offers/tr...
Reposted by Matthieu
🚗🔌 We reverse engineered the Tesla Wall Connector and uncovered a previously undocumented attack surface via the charging cable. From protocol analysis to code execution, a Pwn2Own Automotive 2025 exploit write-up.
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Exploiting the Tesla Wall connector from its charge port connector
An interesting attack surface Over the past few years, Synacktiv has been analyzing Tesla vehicles for the Pwn2Own competition.
www.synacktiv.com
June 17, 2025 at 2:27 PM
🚗🔌 We reverse engineered the Tesla Wall Connector and uncovered a previously undocumented attack surface via the charging cable. From protocol analysis to code execution, a Pwn2Own Automotive 2025 exploit write-up.
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Reposted by Matthieu
Our ninja @kalimer0x00.bsky.social is now on stage at #x33fcon to talk about his journey from dissecting SCCM until the discovery of the critical CVE-2024-43468 and the post-exploitation opportunities🔥
June 13, 2025 at 2:46 PM
Our ninja @kalimer0x00.bsky.social is now on stage at #x33fcon to talk about his journey from dissecting SCCM until the discovery of the critical CVE-2024-43468 and the post-exploitation opportunities🔥
Reposted by Matthieu
It's now time for @matthieub.bsky.social and @b-paul.bsky.social to present Azure conditional access policies ☁️ #SSTIC2025
June 5, 2025 at 12:35 PM
It's now time for @matthieub.bsky.social and @b-paul.bsky.social to present Azure conditional access policies ☁️ #SSTIC2025
Reposted by Matthieu
🚀 This week, Vincent Herbulot & @pierregg.bsky.social kick off our new Whitebox Vulnerability Research training! Students will dive into PHP, Java, and .NET, analyzing & exploiting 1-day vulnerabilities. Let’s get started! 💻🔍
March 24, 2025 at 3:31 PM
🚀 This week, Vincent Herbulot & @pierregg.bsky.social kick off our new Whitebox Vulnerability Research training! Students will dive into PHP, Java, and .NET, analyzing & exploiting 1-day vulnerabilities. Let’s get started! 💻🔍
Reposted by Matthieu
Want to master cutting-edge techniques for attacking Azure?
Join us this summer at @blackhatevents.bsky.social in Vegas for a deep dive into red teaming on Azure, M365, Azure DevOps, and hybrid infrastructures.
Early bird tickets available until May 23rd!
www.blackhat.com/us-25/traini...
Join us this summer at @blackhatevents.bsky.social in Vegas for a deep dive into red teaming on Azure, M365, Azure DevOps, and hybrid infrastructures.
Early bird tickets available until May 23rd!
www.blackhat.com/us-25/traini...
March 17, 2025 at 4:16 PM
Want to master cutting-edge techniques for attacking Azure?
Join us this summer at @blackhatevents.bsky.social in Vegas for a deep dive into red teaming on Azure, M365, Azure DevOps, and hybrid infrastructures.
Early bird tickets available until May 23rd!
www.blackhat.com/us-25/traini...
Join us this summer at @blackhatevents.bsky.social in Vegas for a deep dive into red teaming on Azure, M365, Azure DevOps, and hybrid infrastructures.
Early bird tickets available until May 23rd!
www.blackhat.com/us-25/traini...