Taryax

[Entrypoint @Entrypoint_fr]

Tickets for Entrypoint are officially live!
https://t.co/fGa14lDG26

[Entrypoint @Entrypoint_fr]

We've been working on something for a while.

The talks your blue team doesn't want you to see.

🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation.

📍 Paris - Le Dernier Étage
📅 March 19–20, 2027

https://t.co/WcrpbyzSSV

CFP and additional details coming soon.

[Synacktiv @Synacktiv]

🚨 Still a few days to register for our Azure Intrusion for Red Teamers training at #BHUSA! Very hands-on, full kill chain from zero to Global Admin with stealth in mind. Secure your seat now! https://t.co/dvzRKQGUv9

[Taryax @Taryax]

@Yazidmanou @mattdrouot @darkstarorch @GDP @manuvirot @PierreMikailoff @GratefulDead A quelle heure* ?

[Taryax @Taryax]

@Yazidmanou @mattdrouot @darkstarorch @GDP @manuvirot @PierreMikailoff @GratefulDead A quelle a commencé le concert ? Y'avait-il une première partie ? :

[Taryax @Taryax]

@PierreMikailoff A quelle heure*

[Taryax @Taryax]

@PierreMikailoff A quelle a commencé le concert ? Y'avait-il une première partie ? :)

[Synacktiv @Synacktiv]

Here are three new GitHub action misconfigurations we found on Azure, Firebase, Swagger and Alibaba! Read the third article in our series on exploiting GitHub Actions by @hugow_vincent
https://t.co/Hu5HrA4FXO

[Hexacon @hexacon_fr]

Ready for tomorrow?

#HEXACON2023

[Hexacon @hexacon_fr]

Last sponsor we want to introduce is a special one: it's @Synacktiv, the company organizing #HEXACON2023.

Leader in offensive security, Synacktiv helps companies assess their networks's security.

There will be a lot of ninjas in the conference, feel free to talk to them! 🤗

[Synacktiv @Synacktiv]

Our ninjas haven't missed out on Web3. Dive with them into the methods to retrieve the ABI of EVM smart contracts, in black-box!
https://t.co/ytHlMPGyhw

[TrendAI Zero Day Initiative @thezdi]

Wow! It took the @Synacktiv team less than two minutes to demonstrate their exploit of the #Tesla Gateway. If confirmed, they will win $100,000 and a Tesla Model 3 (plus these cool hockey pucks). #Pwn2Own #P2OVancouver

[Synacktiv @Synacktiv]

Who would win, Grails Spring Security Core or one little semicolon? Our ninjas @Taryax and @Butanal_C4H8O discovered an authorization bypass vulnerability on versions <= 5.1.0 of the plugin during a security assessment. Read more here: https://t.co/TqWV4clOT6

[PortSwigger Research @PortSwiggerRes]

Stuck on a blind PHP file-read? @_remsio_ has just built on @hash_kitten's research using filter chains to trigger an OOM oracle and leak file contents.
https://t.co/74coHX1vuY
https://t.co/rQYZLn134K

[Synacktiv @Synacktiv]

Ninjas are getting ready for #P2OVancouver 💪 #Pwn2Own

[Hexacon @hexacon_fr]

⌛️ H-1 before #HEXACON2022 registration opens!

📈 Early bird tickets start at 650€ but are in limited quantity, be prepared!

📢 The remaining tickets will be released after the announcement of the talks in early July

[Synacktiv @Synacktiv]

If you see two guys wearing Synacktiv t-shirts with big antennas, you should turn around with your @Tesla! 0-click RCE demonstration on a real vehicle, with CAN messages sent to switch on headlights, wipers and trunk 😎 #Pwn2Own

[Hexacon @hexacon_fr]

#OSINT seems pretty in vogue these days, would you be able to find Hexacon's venue from where this picture has been taken?

It might get you a special reward...

#HEXACON2022

[Synacktiv @Synacktiv]

If you like 90's style issues, you might want to take a look at our latest finding on elFinder. An old school path traversal, unusually identified in the wild by @_mabote_. https://t.co/nXIM5t9FjC

[Hexacon @hexacon_fr]

Croissants, red wine and high-quality offensive security talks in a wonderful place? That's all the Hexacon team is promising for October 2022.

Details and Call For Papers are coming very soon... Until then, a bit more teasing for you folks: https://t.co/lM8CWUnCtj

#HEXACON2022