Reposted by ValekoZ
Here we are! Come by our booth and say hi 😀
May 16, 2025 at 9:51 AM
Here we are! Come by our booth and say hi 😀
Reposted by ValekoZ
Don't miss our 2 trainings 😉
🍎 iOS for Security Engineers
☁️ Azure intrusion for red teamers
🍎 iOS for Security Engineers
☁️ Azure intrusion for red teamers
🛎 Training ticket sales for HEXACON 2025 open TODAY at 2PM UTC+2!
Limited spots available 🔥
www.hexacon.fr/register/
Limited spots available 🔥
www.hexacon.fr/register/
Hexacon - Register
Offensive security conference organized by seasoned professionals, in the heart of Paris. 10-11th October 2025, save the date!
www.hexacon.fr
May 5, 2025 at 12:37 PM
Don't miss our 2 trainings 😉
🍎 iOS for Security Engineers
☁️ Azure intrusion for red teamers
🍎 iOS for Security Engineers
☁️ Azure intrusion for red teamers
Reposted by ValekoZ
From firmware dumps to wireless exploration — check out our latest dive into DVB receiver analysis and the hidden attack surface it exposes!
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Hack the channel: A Deep Dive into DVB Receiver Security
Introduction During a garage cleaning, we found a DVB receiver and thought it would be a great target for vulnerability research.
www.synacktiv.com
April 9, 2025 at 6:36 AM
From firmware dumps to wireless exploration — check out our latest dive into DVB receiver analysis and the hidden attack surface it exposes!
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Reposted by ValekoZ
In iOS 18.4, Apple introduced a bug in dynamic symbol resolutions for some specific exports. @0xf4b.bsky.social took a long journey down a rabbit hole to understand its root cause.
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
iOS 18.4 - dlsym considered harmful
Observations We first observed the bug in a custom iOS application compiled for the arm64e architecture (thus supporting PAC instructions).
www.synacktiv.com
April 10, 2025 at 1:22 PM
In iOS 18.4, Apple introduced a bug in dynamic symbol resolutions for some specific exports. @0xf4b.bsky.social took a long journey down a rabbit hole to understand its root cause.
www.synacktiv.com/en/publicati...
www.synacktiv.com/en/publicati...
Reposted by ValekoZ
Synacktiv was at THCON this week!
For the first talk, Quentin presented "Tapping into the SCCM policies goldmine".
For the second talk, Rémi and Mickaël presented "Deep dive in Laravel encryption".
#THCON2025
For the first talk, Quentin presented "Tapping into the SCCM policies goldmine".
For the second talk, Rémi and Mickaël presented "Deep dive in Laravel encryption".
#THCON2025
April 11, 2025 at 2:52 PM
Synacktiv was at THCON this week!
For the first talk, Quentin presented "Tapping into the SCCM policies goldmine".
For the second talk, Rémi and Mickaël presented "Deep dive in Laravel encryption".
#THCON2025
For the first talk, Quentin presented "Tapping into the SCCM policies goldmine".
For the second talk, Rémi and Mickaël presented "Deep dive in Laravel encryption".
#THCON2025
Reposted by ValekoZ
In our latest article, @croco_byte proposes an implementation of a trick discovered by James Forshaw in his research regarding Kerberos relaying. Discover how to perform pre-authenticated Kerberos relay over HTTP with our Responder and krbrelayx pull requests!
www.synacktiv.com/publications...
www.synacktiv.com/publications...
Abusing multicast poisoning for pre-authenticated Kerberos relay over HTTP with Responder and krbrelayx
www.synacktiv.com
January 27, 2025 at 12:06 PM
In our latest article, @croco_byte proposes an implementation of a trick discovered by James Forshaw in his research regarding Kerberos relaying. Discover how to perform pre-authenticated Kerberos relay over HTTP with our Responder and krbrelayx pull requests!
www.synacktiv.com/publications...
www.synacktiv.com/publications...
Reposted by ValekoZ
Yay! Our offensive Azure training was accepted at BlackHat USA 2025 🥳 Can't wait to see you there and share cutting-edge techniques for attacking Azure environments!
January 20, 2025 at 9:25 AM
Yay! Our offensive Azure training was accepted at BlackHat USA 2025 🥳 Can't wait to see you there and share cutting-edge techniques for attacking Azure environments!
Reposted by ValekoZ
A few months ago, Microsoft released a critical patch for CVE-2024-43468, an unauthenticated SQL injection vulnerability in SCCM/ConfigMgr leading to remote code execution, discovered by @kalimer0x00.bsky.social.
www.synacktiv.com/advisories/m...
www.synacktiv.com/advisories/m...
Microsoft Configuration Manager (ConfigMgr) 2403 Unauthenticated SQL injections
Microsoft Configuration Manager (ConfigMgr) 2403 Unauthenticated SQL injections
www.synacktiv.com
January 16, 2025 at 1:25 PM
A few months ago, Microsoft released a critical patch for CVE-2024-43468, an unauthenticated SQL injection vulnerability in SCCM/ConfigMgr leading to remote code execution, discovered by @kalimer0x00.bsky.social.
www.synacktiv.com/advisories/m...
www.synacktiv.com/advisories/m...
Reposted by ValekoZ
Tonight, we're sponsoring Ambrosia organized by ESN'HACK in Bruz.
Join us for a tartiflette 🧀 and a presentation from @creased.re!
Join us for a tartiflette 🧀 and a presentation from @creased.re!
January 10, 2025 at 1:51 PM
Tonight, we're sponsoring Ambrosia organized by ESN'HACK in Bruz.
Join us for a tartiflette 🧀 and a presentation from @creased.re!
Join us for a tartiflette 🧀 and a presentation from @creased.re!
Reposted by ValekoZ
The 2025 training season is here! 🚀
Join our best ninjas for 5-day sessions on pentesting, reverse-engineering, and forensics (in French). Check out all the dates and topics on our website: www.synacktiv.com/offres/forma...
Join our best ninjas for 5-day sessions on pentesting, reverse-engineering, and forensics (in French). Check out all the dates and topics on our website: www.synacktiv.com/offres/forma...
Les formations
Synacktiv - IT Security expertise - Penetration tests, Security audits, Code review, Training, Consulting, Vulnerability research
www.synacktiv.com
December 11, 2024 at 12:59 PM
The 2025 training season is here! 🚀
Join our best ninjas for 5-day sessions on pentesting, reverse-engineering, and forensics (in French). Check out all the dates and topics on our website: www.synacktiv.com/offres/forma...
Join our best ninjas for 5-day sessions on pentesting, reverse-engineering, and forensics (in French). Check out all the dates and topics on our website: www.synacktiv.com/offres/forma...