Eloi Benoist-Vanderbeken

Enthusiast reverse engineer of obfuscated and protected binaries. Exploit things @Synacktiv. Very occasionally on twitter.

[Hexacon @hexacon_fr]

🔥 Excited to announce our keynote!

We are thrilled to welcome Bruce Dang (@brucedang) and Thai Duong (@XorNinja) from @calif_io! With all their recent AI buzz, we had to check they aren't just LLMs in a trench coat. 🤖🧥

🎟️ Ticketing opens this Thursday at 2:00 PM CEST ⏰

[Trenchant @TrenchantARC]

Limited edition of our new t-shirt! Come visit our booth. And don't get caught in the wild ...

[REVEL•IO @REVEL_IO_]

See you at @Milipol_Paris 2025 👋

📅 November 18-21, 2025
📍 Paris Nord Villepinte - Hall 4, Stand H063 (Forensic Zone)

Meet our experts on site and discover how #REVEL·IO improves the efficiency and reliability of digital investigations

🔗 https://t.co/uwas6u5ntT

[Hexacon @hexacon_fr]

📢 NTLM reflection is dead, long live NTLM reflection: Story of an accidental Windows RCE by Wil (@wil_fri3d)

[Synacktiv @Synacktiv]

🔥 A few hours ago our experts took the stage at #DEFCON33, sharing cutting-edge research on SCCM exploitation and modern GPO attacks in Active Directory. Proud of the team! 🙌 cc @kalimer0x00 @quent0x1 @wil_fri3d

[Synacktiv @Synacktiv]

That's a wrap on our Azure Intrusion for Red Teamers training at #BHUSA! 4 intense days from zero to Global Admin via Entra ID, M365, resources, DevOps, Intune & more 🔥 Huge thanks to all our participants and next stop: #HEXACON2025, Paris, Oct 6 🇫🇷

[Eloi Benoist-Vanderbeken @elvanderb]

Not their best picture but definitely THE best hands-on iOS training!
Come and see for yourself how Etienne and Quentin master iOS!
⚠️ Warning, risk of massive skills overflow ⚠️

[Hexacon @hexacon_fr]

iOS for Security Engineers

by Quentin Meffre (@0xdagger) & Etienne Helluy-Lafont

https://t.co/o0ulZWXILO

[Synacktiv @Synacktiv]

🚨 Still a few seats left for our iOS for Security Engineers training at #HEXACON2025!
4‑day hands-on labs to explore the iOS ecosystem and prepare for vulnerability research.
📍 Paris, Oct 6‑9 ➡️ https://t.co/MABakGZV6o

[Synacktiv @Synacktiv]

Ever thought your kitchen appliance could harbor a persistent threat? We reverse-engineered the Thermomix TM5 and uncovered vulnerabilities allowing arbitrary code execution, persistence, and secure boot bypass. Discover our step-by-step breakdown!
https://t.co/qDSoMYdHUK

[Synacktiv @Synacktiv]

While performing security research on IoT control applications, @Areizen_ and @Anatharrr discovered critical vulnerabilities in the mobile app for the Eachine E58 drone. These flaws could potentially lead to remote code execution on the user's smartphone.
https://t.co/pQNDWr5QPJ

[Synacktiv @Synacktiv]

🚨 Still a few days to register for our Azure Intrusion for Red Teamers training at #BHUSA! Very hands-on, full kill chain from zero to Global Admin with stealth in mind. Secure your seat now! https://t.co/dvzRKQGUv9

[Eloi Benoist-Vanderbeken @elvanderb]

If you are planning to learn about iOS, don't miss this training. Quentin and Etienne are exceptional researchers.

No CVE ≠ no 0-days 😉😇

[Synacktiv @Synacktiv]

There are still seats available for our "iOS for Security Engineers" training at #HEXACON2025! Book it while it's hot 😉
Conference tickets are also still available if you register for a training.

[Synacktiv @Synacktiv]

The "Objective-C helper" IDA plugin presented during the @sth4ck talk "Demystifying Objective-C internals" given by @v1csec is now publicly available on GitHub at https://t.co/XVmzIkYwn6
The slides are also available on our website: https://t.co/Y7p0PBS43D

[Synacktiv @Synacktiv]

Here we are! Come by our booth and say hi 😀 #OffensiveCon

[Synacktiv @Synacktiv]

Don't miss our 2 trainings 😉
🍎 iOS for Security Engineers
☁️ Azure intrusion for red teamers

[Synacktiv @Synacktiv]

In iOS 18.4, Apple introduced a bug in dynamic symbol resolutions for some specific exports. @0xf4b took a long journey down a rabbit hole to understand its root cause.
https://t.co/q03QTtw373

[Synacktiv @Synacktiv]

PagedOut! #6 magazine is out! This edition features two articles from our ninjas:

- Implicit Unicode behaviors in database string functions
- Calling Rust from Python: A story of bindings

Dive into their insights here: https://t.co/6C0X8nexin

[Synacktiv @Synacktiv]

Hunters International RaaS group has claimed 280+ victims since Oct 2023. Check out our latest blog post on the TTPs they use, including SMOKEDHAM malvertising & ESXi ransomware with advanced obfuscation. #RaaS #CyberSecurity #ThreatAnalysis
https://t.co/uKTXH6lxog

[WineRump @WineRump]

Save the date, la seconde édition de #WineRump aura lieu:

🗓️ le vendredi 26/09/2025
📍à Bordeaux

#WineRump c'est une conférence de cybersécurité avec des rumps, du vin et du jus de raisin dans une guinguette

[Synacktiv @Synacktiv]

The 2025 training season is here! 🚀
Join our best ninjas for 5-day sessions on pentesting, reverse-engineering, and forensics (in French). Check out all the dates and topics on our website: https://t.co/JcHm37OpAt