Major_Tom

Underground control to Major_Tom. Security ninja @Synacktiv CTF Player @SentryWhale

[Entrypoint @Entrypoint_fr]

Tickets for Entrypoint are officially live!
https://t.co/fGa14lDG26

[Synacktiv @Synacktiv]

In 2023, @Synacktiv researchers identified an authentication bypass in #Danfoss SM800 and SC255/SC355 controllers. The same vulnerability, reported again in 2025, could be linked to the recent supermarket refrigeration attack.

🔎 Authentication Bypass - Danfoss SM800 & SC255/SC355: https://t.co/Gzf4DrntWp
🔎 Multiple Vulnerabilities - Danfoss SM800A: https://t.co/A3EsNHKiC4

[Hexacon @hexacon_fr]

The wait is over! 🚀 The talks for Hexacon 2026 are officially out, and the lineup is absolute fire 🔥

https://t.co/zy6FX3I57C

[Entrypoint @Entrypoint_fr]

We've been working on something for a while.

The talks your blue team doesn't want you to see.

🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation.

📍 Paris - Le Dernier Étage
📅 March 19–20, 2027

https://t.co/WcrpbyzSSV

CFP and additional details coming soon.

[Hexacon @hexacon_fr]

🔥 Excited to announce our keynote!

We are thrilled to welcome Bruce Dang (@brucedang) and Thai Duong (@XorNinja) from @calif_io! With all their recent AI buzz, we had to check they aren't just LLMs in a trench coat. 🤖🧥

🎟️ Ticketing opens this Thursday at 2:00 PM CEST ⏰

[Major_Tom @MajorTomSec]

Proud to finally share the write-up of our VMware Workstation escape from P2O Berlin 2025, featuring a generic bypass for Windows LFH mitigations using side-channels.

I hope it will be as fun to read as it was to exploit!

https://t.co/TGOc6LejsS

[Synacktiv @Synacktiv]

At #Pwn2Own Berlin 2025, a full exploit chain against VMware Workstation was demonstrated via a heap overflow in the PVSCSI controller.
Despite Windows 11 LFH mitigations, advanced heap shaping and side-channel techniques enabled a reliable exploit.

🔍 Full technical write-up 👇
https://t.co/R0E5Uqql1E

[Synacktiv @Synacktiv]

At #Pwn2Own Berlin 2025, a full exploit chain against VMware Workstation was demonstrated via a heap overflow in the PVSCSI controller.
Despite Windows 11 LFH mitigations, advanced heap shaping and side-channel techniques enabled a reliable exploit.

🔍 Full technical write-up 👇
https://t.co/R0E5Uqql1E

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Thomas Bouzerar (@MajorTomSec) and Etienne Helluy-Lafont from Synacktiv (@Synacktiv) used a heap-based buffer overflow to exploit #VMware Workstation. They earn $80,000 and 8 Master of Pwn points - sending the contest to over $1,000,000 total! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Boom! Thomas Bouzerar (@MajorTomSec) and Etienne Helluy-Lafont from Synacktiv (@Synacktiv) close out #Pwn2Own in style with a guest-to-host escape in VMware Workstation. If confirmed, it will put the total contest payout at over $1,000,000! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

A successful collision! Corentin BAYET (@OnlyTheDuck) from @Reverse_Tactics used 2 bugs to exploit ESXi, but the Use of Uninitialized Variable bug collided with a prior entry. His integer overflow was unique though, so he still earns $112,500 & 11.5 Master of Pwn points. #Pwn2Own

[Synacktiv @Synacktiv]

In iOS 18.4, Apple introduced a bug in dynamic symbol resolutions for some specific exports. @0xf4b took a long journey down a rabbit hole to understand its root cause.
https://t.co/q03QTtw373

[Specter @SpecterDev]

I've published the repo for Byepervisor (we love named vulns out here). Contains exploit implementation for two PS5 hypervisor bugs for 2.xx and lower. Slides from the talk + vod should hopefully be published soon.

https://t.co/YBrHXOpzQA

[Specter @SpecterDev]

Feels great when an idea can finally be tested and works out after like a year :)

Shouts to ChendoChap for working out the ROP chain. Protip: staying < 3.00 is a good idea.

[Andy Nguyen @theflow0]

Decided to publish PPPwn early. The first PlayStation 4 Kernel RCE. Supporting FWs upto 11.00.

https://t.co/INayQSp8fL

[Synacktiv @Synacktiv]

Here we are! 🥷 Masters of pwn for the third time 🎉 Congratulations to all the ninjas involved! #Pwn2Own

[Synacktiv @Synacktiv]

For the second talk of the day, @OnlyTheDuck and @MajorTomSec present their methodology on attacking virtualization solutions. #GreHack23

[Hexacon @hexacon_fr]

🎥 Recordings of #HEXACON2023 talks are now available on our YouTube channel: https://t.co/WdLfbSbxi3

[Synacktiv @Synacktiv]

Now, @masthoon and @MajorTomSec are on stage to present their VirtualBox chain used during #Pwn2Own

[Synacktiv @Synacktiv]

The program for @GrehackConf is out with 3 Synacktiv talks!
🖥️ Virtualization from an attacker Point-Of-View: @OnlyTheDuck & @MajorTomSec
🚘 Unlocking the Drive: Exploiting Tesla Model 3: @_p0ly_ & @vdehors
🐧 Ubuntu Shiftfs: Unbalanced Unlock Exploitation Attempt: @jbcayrou

[Thiebaut Elsa @thiebaut_elsa]

As announced at #FIC, @Synacktiv is opening a new office in the center of #lille with a team of 7 ninjas.
All our positions are now open in Lille 📍7 Boulevard Louix XIV.
If you want to join us : [email protected]