Clément Berthaux

Security researcher @Synacktiv

[Synacktiv @Synacktiv]

We're at @ToulouseHacking! For our first talk, @jbcayrou will explain how he tried to exploit a nice bug in Ubuntu ShiftFS 🔥

[Synacktiv @Synacktiv]

If you're a regular Velociraptor user or just looking for a flexible forensic tool, come and discover how Velociraptor's new features make forensic analysis of VMware ESXi hypervisor possible.
https://t.co/aJg7DyTuJy

[Synacktiv @Synacktiv]

Congratulations to our ninja @_remsio_ for making it to the 4th place with his research about error-based oracles using PHP filter chains!

[Synacktiv @Synacktiv]

The Synacktiv ninjas are ready for the @FIC_eu! 🥷
Come and meet us at Booth N°D45. We’re excited to share our expertise and discuss your challenges and the latest trends in cybersecurity. See you there! 👋
#InCyber2024

[Synacktiv @Synacktiv]

Our ninjas @JouetR and @vielp3 are on stage for #CyberOnBoard!

[Synacktiv @Synacktiv]

If you ever get authenticated access on a Commvault CommServe web console < 11.34, you might be able to elevate privileges and execute remote commands. Check out how in the advisory by @yaumn_ and @hugoclout!
https://t.co/Cit1Gy1bDd

[Synacktiv @Synacktiv]

Our ninjas have been busy this weekend! The team solved all the challenges during #HTB #CyberApocalypse24, giving them 3rd place for now, while @0xf4b scored the @ToulouseHacking pre-challenge. Congratz! 🔥

[Synacktiv @Synacktiv]

During a security assessment on Ricoh Device Manager NX, our ninja @kalimer0x00 uncovered multiple vulnerabilities. When combined, these flaws could allow attackers to gain remote code execution on the server. Read the details in our advisory: https://t.co/r2PfHjsqxa

[Synacktiv @Synacktiv]

Sometimes you just need to abuse functionalities to be a ninja! Discover how Collabora Online could be abused to conduct SSRFs and steal your cloud secrets.
https://t.co/yB5sBDGJo9

[Synacktiv @Synacktiv]

Don't forget, @FIC_eu is next week, come meet us at booth D45! #InCyber2024

[Synacktiv @Synacktiv]

Ever faced a WAF/EDR while exploiting a Java deserialization? Checkout our latest blogpost by @loadlow for a stealthier exploitation, exfiltration and persistence by diving deep into translets, transformers and more!
https://t.co/NT8SQbklYs

[Synacktiv @Synacktiv]

Following our recent research on PHP filter chains, our ninjas @_remsio_ and Raphaël Lob found two arbitrary file leaks affecting the MISP project < 2.4.187. If you are intrigued by this kind of exploitation, take a look at: https://t.co/A79wsIkNFX

[Synacktiv @Synacktiv]

The team is getting ready for the next #Pwn2Own with some good stuff, stay tuned 😉

[Synacktiv @Synacktiv]

Synacktiv is looking for an additional team leader for its Reverse-Engineering Team! Find out if you are a good candidate by reading our offer (🇫🇷).
https://t.co/ERvABDYkz3

[TrendAI Zero Day Initiative @thezdi]

That’s a wrap for Day 2 of #Pwn2Own Automotive. We’ve already awarded over $1,000,000 in prizes this week (¥150 million!) Tune back in tomorrow here or at the ZDI blog for the final day of the contest! Here are the current standings leading into the final day:

[Synacktiv @Synacktiv]

To facilitate reverse-engineering of large programs, vulnerability research and root-cause analysis on iOS, Android, and other major platforms, @myr463 and @Hexabeast released Frinet, a tool combining Frida with an enhanced version of Tenet.
https://t.co/d0epwjylji

[Hexacon @hexacon_fr]

Thank you everyone for this amazing second edition!

We hope you all had a blast and all the team is already eager to see you all next year for #HEXACON2024 🚀

[Hexacon @hexacon_fr]

#HEXACON2023 has officially started with the traditional keynote given by our very own Renaud Feil, CEO of @Synacktiv

[Hexacon @hexacon_fr]

Ready for tomorrow?

#HEXACON2023

[Hexacon @hexacon_fr]

Have something to share? Don't forget to submit your lightning talk at [email protected] you might win our specially crafted Hexacon Champagne Cuvée 2023 #HEXACON2023 🍾