Benjamin SEPE

Security Engineer/Pentester

[Synacktiv @Synacktiv]

Our ninja @Butanal_C4H8O identified a high-impact XSS in Netwrix Directory Manager. The CVE-2025-47189 vulnerability can be exploited from the Windows lock screen to gain administrator privileges on a workstation. https://t.co/gns6mCMb3p

[Synacktiv @Synacktiv]

The next article by @_bluesheet in our post-quantum series tackles hash-based signature schemes, including XMSS and the freshly standardized SLH-DSA (aka SPHINCS+). Sometimes, you don't need fancy maths to build robust schemes!
https://t.co/Qg03N1dwhu

[Hexacon @hexacon_fr]

Registration for #HEXACON2024 awesome trainings will open next Monday!

➡️ https://t.co/fFLYxCKV76
9⃣ High-quality courses
📆 4 days | 30/09-03/10 2024
💶 4200€

[Synacktiv @Synacktiv]

We are starting a new series of blog posts on post-quantum cryptography! Check-out our first article which gives an introduction to modern cryptography concepts.
https://t.co/arhQZoVK6A

[Thiebaut Elsa @thiebaut_elsa]

Retrouvez sur le site de @Synacktiv, nos offres de stages 2023 🤩
#reverse #pentest #devoffensif

[Hexacon @hexacon_fr]

Last sponsor we want to introduce is a special one: it's @Synacktiv, the company organizing #HEXACON2023.

Leader in offensive security, Synacktiv helps companies assess their networks's security.

There will be a lot of ninjas in the conference, feel free to talk to them! 🤗

[BFM Business @bfmbusiness]

Pirater une @Tesla model 3 en 2 minutes et repartir avec, l'exploit de @elvanderb et David Berard de @Synacktiv

🗨️"Le concours est annoncé environ 3 mois avant l'événement. Et on va avoir la liste des cibles qui font partie de l'événement notamment la Tesla"

🎙️ David Berard

[Synacktiv @Synacktiv]

Who would win, Grails Spring Security Core or one little semicolon? Our ninjas @Taryax and @Butanal_C4H8O discovered an authorization bypass vulnerability on versions <= 5.1.0 of the plugin during a security assessment. Read more here: https://t.co/TqWV4clOT6

[Synacktiv @Synacktiv]

If you enjoy sailing the sea, beware! @MajorTomSec has found a critical security vulnerability in @RaftSurvivaGame, allowing 0-click RCE on any online player. The vendor has remained silent for 5 months, so here are the details: https://t.co/oqW4u4VIpM

[The Apache Grails Framework @grailsframework]

The Grails team has confirmed a security vulnerability found in the Grails Spring Security Core plugin. Read more about this in our latest blog post. #Grails https://t.co/ztwVgpJk8s

[Synacktiv @Synacktiv]

Time to disclose how @_p0ly_ and @vdehors hacked the @tesla car during the #Pwn2Own competition!

It’s happening right now at @hexacon_fr.

#HEXACON2022

[Synacktiv @Synacktiv]

[INTERNSHIPS 🇫🇷] We just published our offers for the 2022-2023 season! We're ready to be flooded by your resumes 😆 Apply now! #pentest #reverse #dev #infra #dfir https://t.co/eVu0rdTNat