Airbus Security Lab

[Airbus Security Lab @AirbusSecLab]

New public advisories released by @Acronis related to our research: https://t.co/HiE4YPn4dd, https://t.co/Jk2wlo8mKZ, https://t.co/e9JRdKF6qq, https://t.co/EH7s5XBKPc, https://t.co/o6A7JdLD3G, https://t.co/vDwVuswZeB.

Don't forget to apply patches!

[Airbus Security Lab @AirbusSecLab]

Le #SSTIC 2025 continue, et Nicolas Devillers et Arnaud Fontaine vous présenteront leurs travaux sur la conception et l'usage de notre outil soxy le 6 Juin à 10h15. Venez nombreux !

[Airbus Security Lab @AirbusSecLab]

Ca y est, le SSTIC 2025 a commencé, Jean-Romain Garnier vous présentera ses travaux
sur l'outil afl-cov-fast aujourd'hui à 16h15. Venez nombreux !

[Airbus Security Lab @AirbusSecLab]

L'équipe sera au #SSTIC2025, n'hésitez pas à passer nous voir pour discuter :)

[Airbus Security Lab @AirbusSecLab]

Passionate about hacking & cybersecurity? Airbus is looking for a Vulnerability Research & Exploitation Specialist in France!
💻 Reverse engineering, Red Teaming
✈️Join a global aerospace & defense leader
Apply now! 🚀
https://t.co/wheJECIvtJ

[Airbus Security Lab @AirbusSecLab]

🚀 BinCAT Update! 🖤
Following a reported issue, BinCAT now has a dark mode friendly option! 🎨
Update now and enjoy a seamless dark theme experience. Thanks for your feedback!

[Airbus Security Lab @AirbusSecLab]

We’re glad to announce we released Soxy!🚀
A Rust-powered suite of services for Citrix, VMware Horizon & Windows RDP.
Red teams & pentesters can use it to pivot for deeper access.
Get the tool and more details: 🔗 https://t.co/HmZwxtHOha

[Airbus CERT @AirbusCERT]

scrings is a strings utility that will output only semantically valid strings based on tree-sitter grammar.

scrings support #python #javascript #sql #powershell #bash #php

A #volatility plugin is also available to catch scripts in memory !

https://t.co/G9jJ90EoNp

[Airbus Security Lab @AirbusSecLab]

Following the release of IDA 9.0, we're excited to announce a new BinCAT release 1.4, now fully compatible with the latest IDA version!

https://t.co/MhfzUWmjrM

[Airbus Security Lab @AirbusSecLab]

@OphirHarpaz There it is! We finally fixed that!

[Sylvain Peyrefitte @citronneur]

Scanner for CVE-2024-4040 (CrushFTP VFS Escape)

https://t.co/xe4v4sue12

[Airbus Security Lab @AirbusSecLab]

We are happy to announce a new pre-release of BinCAT, our binary static analyzer! New is this release: IDA 8.3 integration for Windows and Linux https://t.co/DfoW2kVY72

[Airbus Security Lab @AirbusSecLab]

Some team member will attend #HEXACON2023, feel free to come to us and discuss :)

[Airbus Security Lab @AirbusSecLab]

Our team is looking for an offensive security engineer:
https://t.co/aN2zsFbfzg
Want to know more about our activities? Check out https://t.co/WCnGQ5GAfl.
Interested in becoming an @AirbusSeclab team member? Feel free to reach out!

[Airbus Security Lab @AirbusSecLab]

Our team is looking for an offensive security engineer:
https://t.co/aN2zsFbfzg
Want to know more about our activities? Check out https://t.co/WCnGQ5GAfl.
Interested in becoming an @AirbusSeclab team member? Feel free to reach out!

[Airbus Security Lab @AirbusSecLab]

Following several evaluations in which we used binary-only fuzzing, we wrote a hands-on blogpost about our step-by-step approach to setup grammar-aware in-memory persistent fuzzing campaigns using AFL++-QEMU. Check it out here: https://t.co/tOtUI3CNj7!

[Airbus Security Lab @AirbusSecLab]

Vous pouvez trouver les slides de notre présentation "Analyse de sécurité de Netbackup" présentée durant le SSTIC 2023 ici : https://t.co/XValCTpn7A et les outils publiés sur notre github : https://t.co/kTyxRp2XKR

[Airbus Security Lab @AirbusSecLab]

A SSTIC la semaine prochaine, Jean-Romain Garnier et Anaïs Gantet partageront la suite des travaux de l'équipe sur le produit NetBackup :
https://t.co/HjptIk5oE5 #internals #netbackup #tooling #security
RDV au #SSTIC2023 ou sur https://t.co/GEwap9s5oA le 8 juin prochain à 10h.

[Airbus Security Lab @AirbusSecLab]

You can find the slides of our presentation "The unavoidable pain of backups: security deep-dive into the internals of NetBackup" at @hexacon_fr on our github : https://t.co/jDQ6fQIGCy

[Airbus Security Lab @AirbusSecLab]

Anaïs Gantet, Nicolas Devillers (@Nikaiw) and Mouad Abouhali (@_m00dy_ ) are going to present “The unavoidable pain of backups: security deep-dive into the internals of NetBackup” at #HEXACON2022.
A thought to Jean-Romain Garnier (@JRomainG) that was not able to participate.

[Airbus Security Lab @AirbusSecLab]

New public advisories released by @VeritasTechLLC related to our research:
https://t.co/wVrS6LkVpx,
https://t.co/NFGgFk4rtJ,
https://t.co/R4twyTZxVv,
https://t.co/t77St8YFV4.
Don't forget to apply patches!