vic

Security researcher @Synacktiv — CTF organizer @sth4ck

[vic @v1csec]

Userland iOS aficionados, I released a simple IDA plugin that should improve your Objective-C experience.

For now it removes ARC function calls in decompiled code (eg objc_retain) and helps listing candidate callers to a method. Check it out at https://t.co/SvvIOWarRb

[Synacktiv @Synacktiv]

The "Objective-C helper" IDA plugin presented during the @sth4ck talk "Demystifying Objective-C internals" given by @v1csec is now publicly available on GitHub at https://t.co/XVmzIkYwn6
The slides are also available on our website: https://t.co/Y7p0PBS43D

[Synacktiv @Synacktiv]

Have you ever wondered what the attack surface of Counter Strike: Global Offensive looks like? Our ninjas @myr463 and @v1csec studied it and found a server to client bug! Read more details about this research in our latest blogpost.
https://t.co/QaoheZbQoi

[Synacktiv @Synacktiv]

Our ninja @masthoon solved a tough challenge during @PotluckCTF with an ingenious approach: he built a decompiler for a custom ISA by lifting instructions to Binary Ninja IL. Read the "Pot of Gold" write-up (kudos to @bl4sty for creating the challenge): https://t.co/jNJPIwqg5H

[Synacktiv @Synacktiv]

To facilitate reverse-engineering of large programs, vulnerability research and root-cause analysis on iOS, Android, and other major platforms, @myr463 and @Hexabeast released Frinet, a tool combining Frida with an enhanced version of Tenet.
https://t.co/d0epwjylji

[Synacktiv @Synacktiv]

Sometimes simple is best. See how @SidewayRE exploited a 9-year-old Linux kernel bug at #Pwn2Own Vancouver 2023!
https://t.co/epmiEQZcD4

[TheZDIBugs @TheZDIBugs]

[ZDI-23-900|CVE-2023-35001] (Pwn2Own) Linux Kernel nftables Incorrect Pointer Scaling Local Privilege Escalation Vulnerability (CVSS 7.8; Credit: Tanguy DUBROCA (@SidewayRE) from Synacktiv (@Synacktiv)) https://t.co/X8KweeRAFA

[Hexacon @hexacon_fr]

🍏iOS is all the rage nowadays: that's where the good stuff is located for nation-state attackers and  is gulping down every world-class researcher it can hire …

Bootstrap your iOS research at #HEXACON2023 thanks to @v1csec and Etienne Helluy-Lafont: https://t.co/ftkF9jy6iV!

[vic @v1csec]

@hexacon_fr @Synacktiv More information is available here: https://t.co/jJkVqUo1dI

[vic @v1csec]

Do you want to get started in iOS security research? I am giving an iOS training at @hexacon_fr with another @Synacktiv ninja!

See you there :)

[Synacktiv @Synacktiv]

#HEXACON2023 trainings have been announced! Come and register to our "iOS for Security Engineers" course 🍎

[vic @v1csec]

@nolankrk @zozuar Speaking about uncomfortable stuff, this visual made me think of creepypasta "Username 666" :)
https://t.co/MA4vWVvbk9

[Synacktiv @Synacktiv]

Watchout! CVE-2023-22809 on Sudo was patched today to prevent a privilege escalation on sudoedit. Read the security advisory by @aevy__ and @v1csec: https://t.co/w2uco4PGhh

[vic @v1csec]

Definitely spent a very good time at @hexacon_fr! Amazing place, high quality talks and great people, what else could be said?

[Quentin Texier 🦀 @g0h4n_0]

Today I share with you #RustHound🦀. A new AD collector written in #Rust for #BloodHound!
It is cross-platform, cross-compiled and generates all json files needed.

Other modules will be available as under development!🔥

Hope you will enjoy it!

https://t.co/bxjCVyocfv

[vic @v1csec]

J'ai eu l'occasion de donner mon premier talk "Attacking SUID binaries" à RumpÀRennes mardi soir !
Merci à @securinsa pour cette première édition organisée avec soins, je reviendrai avec plaisir :)

[Sécur'Insa @securinsa]

.rar 0x1 c'est fini!
Merci pour votre présence ! Nous remercions encore une fois @Synacktiv, qui nous a fait confiance, pour notre premier événement.
Également les intervenants pour leur supers conférences.
⬇️👀📸@TheLaluka

[Synacktiv @Synacktiv]

[INTERNSHIPS 🇫🇷] We just published our offers for the 2022-2023 season! We're ready to be flooded by your resumes 😆 Apply now! #pentest #reverse #dev #infra #dfir https://t.co/eVu0rdTNat

[vic @v1csec]

Content de participer en tant que speaker à cette première édition de @securinsa !

Il est temps de partager l'expérience acquise à @Synacktiv :)

[Sécur'Insa @securinsa]

[J-13] À 20h25, on passera à “Attacking SUID binaries” qui sera présentée par @v1csec à 20h25.

[Sécur'Insa @securinsa]

SAVE THE DATE - Mardi 11 octobre 20h00 - 01h

Pour prendre vos places, c'est ici à 18h: https://t.co/cbAnDxmXTM

[Hexacon @hexacon_fr]

Croissants, red wine and high-quality offensive security talks in a wonderful place? That's all the Hexacon team is promising for October 2022.

Details and Call For Papers are coming very soon... Until then, a bit more teasing for you folks: https://t.co/lM8CWUnCtj

#HEXACON2022

[Benjamin Chetioui @_SIben_]

PhD candidate in Programming Languages nearing thesis submission looking for (ideally remote) positions from Oslo, Norway. Some topics I'm interested in are compilers, verification, security, and cryptography. DM for resume! RTs appreciated😊