Antoine Morin

Security enthusiast

[Mobeta @MobetaSec]

During a web application pentest, we found unpatched instances of CVE-2024-1813 in WordPress.

By chaining the underlying PHP object injection, we achieved unauthenticated RCE.

https://t.co/ZZ2WGwzfnY

[Sélim Lanouar @whattheslime]

🚨 New exploit released 🚨
Converts limited PHP code execution into WordPress administrator account creation & login.
CVE-2025-13486 (ACF Extended)
🔗 https://t.co/UX0Z2p7XTq

[Mobeta @MobetaSec]

Dès demain, nous serons à l’ECW à Rennes au stand S11.

Si vous passez, arrêtez-vous quelques minutes, les deux cofondateurs de Mobeta vous montreront comment on repense le modèle du pentest.

@EUCyberWeek

[Swissky @pentest_swissky]

Guide pour relayer NTLM sur HTTP – l’exemple de GLPI
- Arthur Le Corguillé
https://t.co/U2KFnLPExp

[Mobeta @MobetaSec]

Nouvel article sur Azure : comment les attaquants étendent leur accès après un phishing Azure en 2025

https://t.co/2DJqz2XUcB

[Mobeta @MobetaSec]

Arthur Le Corguillé et Antoine Morin seront sur l’espace FIC talks et interviendront à 10h50.

Au programme de notre pitch « Pentest terminé… et maintenant ? »

#ForumINCYBER

[Mobeta @MobetaSec]

Retrouvez Mobeta au #ForumINCYBER sur l’espace innovation pour discuter, cybersécurité, pentest ainsi que de notre solution Rigma, l'assistant à la remédiation des audits.

Stand F17-8

[Mobeta @MobetaSec]

Nouvel article technique concernant les comptes machines dans Active Directory.

Découvrez comment ils sont exploités et comment s’en protéger dans notre dernier blog post : https://t.co/wCpLCrHcCB

#cybersecurity #pentest #activedirectory

[OVHcloud Startup Program @OVHcloudStartup]

🌟 Showcasing the brilliant innovators in the @OVHcloud Startup Program:

🦴 #ORTHOSAFE SAS
👶#CALD | Crèche A La Demande 👣
🚲 @MobetaSec
🌐 #Webcapsule
🎯 @Pickaw
🌍 @Iki_Diag

Proud to support these startups as they pave the way forward!
#Tech #Innovation #Sustainability

[Dirk-jan @_dirkjan]

New blog: Lateral movement and on-prem NT hash dumping with Microsoft Entra Temporary Access Passes.
Some tips and tricks on abusing TAPs for Windows Hello persistence and NT hash recovery over Cloud Kerberos Trust. https://t.co/h3XHjBhwtz

[Andrea P @decoder_it]

"Hello: I'm your Domain Administrator and I want to authenticate against you". My #SilverPotato is out, check the blog post: https://t.co/3I9JjQ1QaK 😃

[Charles Fol @cfreal_]

Here's an educational POC for #xortigate (CVE-2023-27997).
I'll cover the vulnerability at @hexacon_fr this Saturday, and @BlackAlpsConf a few days later!

https://t.co/WA9nw7ObQT

[Lexfo @LexfoSecurite]

Following our blogpost on #xortigate, here are some Forensics findings we observed during the exploitation of #CVE-2023-27997 on our test labs. This may help you with future #DFIR engagements: https://t.co/wxe6OqJMtq

[Charles Fol @cfreal_]

Details of #xortigate, CVE-2023-27997, a pre-authentication SSL VPN exploit targeting #Fortigate appliances.

Patch your #Fortinet VPN.

[rioru (Dany Bach) @DDXhunter]

This was a fun one! The vulnerability has been found and exploited during the timeframe of one of our Red Team engagements and allowed us to compromise our target entirely. Happy patch week! #xortigate

[Lexfo @LexfoSecurite]

#Fortinet patched #CVE-2023-27997, a critical vulnerability affecting its VPN #Fortigate. Our latest blogpost describes the technical details about the bug, a pre-auth heap overflow, with a twist. #xortigate
https://t.co/LZ1ynVNY7w

[Lexfo @LexfoSecurite]

Introducing sshimpanzee, a reverse shell made by @TitouanLazard based on openssh's sshd. It supports DNS, ICMP and HTTP encapsulation as well as SOCKS and HTTP Proxies :
https://t.co/PmEIHODLru

[Charlie Clark @exploitph]

My latest research which completely breaks trust transitivity, enjoy :-)

https://t.co/1xUlMXrJbF

[Lexfo @LexfoSecurite]

A few months ago, we reported a pre-auth Remote Code Execution #RCE vulnerability to @vBulletin. The exploitation of this unserialize() bug was tricky, as vBulletin classes are not deserialisable. Discover the exploitation in our latest blogpost:
https://t.co/6FDbtS4U8K

[Lexfo @LexfoSecurite]

Learn how we discovered 5 distinct vulnerabilities on @watchguard #Firebox/#XTM firewalls, and obtained a pre-auth Remote Code Execution as root #0day (CVE-2022-31789, CVE-2022-31790).
https://t.co/I2ixfZEAPK