Théo Louis-Tisserand

[Synacktiv @Synacktiv]

In our latest article, @croco_byte presents new scripts allowing to simulate legitimate AD services in a flexible manner, and demonstrates their use through GPO exploitation ⬇️
https://t.co/qkgQsFltEa

[Entrypoint @Entrypoint_fr]

We've been working on something for a while.

The talks your blue team doesn't want you to see.

🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation.

📍 Paris - Le Dernier Étage
📅 March 19–20, 2027

https://t.co/WcrpbyzSSV

CFP and additional details coming soon.

[Synacktiv @Synacktiv]

[Blogpost] @croco_byte presents how to exploit attack paths related to Active Directory sites' ACLs.
As the latter often constitute a blind spot for AD enumeration tools, the article also describes a pull request aiming to integrate them into the BloodHound project: https://t.co/s1qTnPvD2y

[Synacktiv @Synacktiv]

🧑‍🎓 Boost your offensive Active Directory skills with our Entry & Advanced trainings. Hands-on labs with dozens of machines + latest research from DEFCON, x33fcon & more! Seats are limited, don’t miss out!
🔗 Entry: https://t.co/7get5clXOg
🔗 Advanced: https://t.co/KEVNM9zdjF

[Synacktiv @Synacktiv]

Our ninja @kalimer0x00 is now on stage at #x33fcon to talk about his journey from dissecting SCCM until the discovery of the critical CVE-2024-43468 and the post-exploitation opportunities🔥

[Synacktiv @Synacktiv]

Microsoft just released the patch for CVE-2025-33073, a critical vulnerability allowing a standard user to remotely compromise any machine with SMB signing not enforced! Checkout the details in the blogpost by @yaumn_ and @wil_fri3d.
https://t.co/EY5Z53w1ZT

[Hexacon @hexacon_fr]

Azure intrusion for red teamers

by Paul Barbé & Matthieu Barjole (@aevy__)

https://t.co/KAEbT5rFCo

[Synacktiv @Synacktiv]

🚀 This week, @us3r777 & @__pierreg kick off our new Whitebox Vulnerability Research training! Students will dive into PHP, Java, and .NET, analyzing & exploiting 1-day vulnerabilities. Let’s get started! 💻🔍

[Synacktiv @Synacktiv]

In our latest article, @croco_byte and @SScaum demonstrate a trick allowing to make Windows SMB clients fall back to WebDav HTTP authentication, enhancing the NTLM and Kerberos relaying capabilities of multicast poisoning attacks!
https://t.co/2sgeUeSEe7

[Synacktiv @Synacktiv]

Following the release of IPSpinner last week, now is the time to unveil CaptainCredz! Perform advanced, fine-grained password spraying while remaining under the radar for your next Red Team engagement 🔥
https://t.co/KM2KbokiAh

[Synacktiv @Synacktiv]

You can now use LDAP/LDAPs protocols with the SOCKS proxy of ntlmrelayx thanks to the PR from @b1two_ (now merged upstream).
Here is an example with ldeep using relayed authentication from HTTP to LDAPs :

[Synacktiv @Synacktiv]

Oh, you didn't know? Cool kids are now relaying Kerberos over SMB 😏
Check out our latest blogpost by @hugow_vincent to discover how to perform this attack:
https://t.co/4Drnk4BoBz

[Synacktiv @Synacktiv]

GitLab recently released a patch for the Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409). Our ninjas @alexisdanizan and @b1two_ analyzed the patch and wrote the exploit code! https://t.co/RaP8lKDh8o

[Adam Chester 🏴‍☠️ @_xpn_]

Thanks to @0hexit's PR, DPoP auth support has now been added to CloudNine for Okta which is used in agent versions >3.18.0 \o/ https://t.co/tB10G6ej4F

[Hexacon @hexacon_fr]

☁️ Whether it's on premises or in the cloud, a domain is a domain.

💪 Flex your intrusion muscles with @tiyeuse and @hugow_vincent's training!

➡️ https://t.co/exdDmnSCNm
📆 30/09-03/10 2024
📍Espace Vinci, Rue des Jeuneurs, Paris

[BiereSecuTLS @BiereSecu]

Bonne année tout le monde 😄🎉
📣Prenez une bonne résolution et venez au premier Bière&Sécu 2024, le jeudi 8 février 🗓️ à 19h au Rooster and Beer 🐔🍺
Inscrivez-vous 👉 https://t.co/240eCFQvzj
Contactez-nous si vous avez des sujets à présenter via Twitter ou Discord 🗣️!

[Synacktiv @Synacktiv]

Bored of managing multiple proxychains configurations? @hugoclout developed bbs, a swiss army knife proxy manager for red teamers! The project is available on our GitHub: https://t.co/ToFKlJhSHd

[Synacktiv @Synacktiv]

During a recent Active Directory intrusion test, @croco_byte was led to devise a new versatile attack vector targeting Group Policy Objects, allowing their exploitation through NTLM relaying.
https://t.co/vliVSgRoLS

[Synacktiv @Synacktiv]

Tonight, @_p0ly_ and @masthoon will talk about #Pwn2Own and the Tesla hack with @Micode 🎙️

[Synacktiv @Synacktiv]

A while ago during a security assessment, @0hexit identified multiple vulnerabilities on the PRTG Network Monitor application version 21.3.69.1333, allowing an attacker to perform XSS attacks. Read the technical details in the advisory: https://t.co/dt9LVuC7Jt