Cybiosity retweeted
Giving away 2x full access packages:
Linux Attack, Detection & Forensics v2.0 - Hands-on Purple Teaming Playbook + 90 days PurpleLabs VPN access
To enter:
✅ Follow me
❤️ Like this post
💬 Comment
🔁 Repost
Winners announced March 22nd 🎯
First time doing this, let's see how it goes 😄
edu.defensive-security.com/l…
#linux #redteam #blueteam #dfir
Cybiosity retweeted
Active #RDP connections can reveal the client hostname 🔎
A key indicator for investigations & #CTI: some attackers reuse hostnames.
Traces to check: CLIENTNAME env variable & RDP printer redirection.
🛡️ Incident? Contact #Synacktiv CSIRT 24/7: [email protected]
Cybiosity retweeted
Binary obfuscation in 2026:
Just put ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FA... into your program 😎
Cybiosity retweeted
LinkPro: new stealthy #Linux rootkit based on eBPF - full analysis 🔍️
Our #CSIRT team discovered and named LinkPro, a new Linux rootkit, during an incident response. It exploits eBPF for evasion and persistence.
Here are the four key technical points in the image below. 💡
🔗 Full analysis: synacktiv.com/en/publication…
Cybiosity retweeted
🚨 Still a few days to register for our Azure Intrusion for Red Teamers training at #BHUSA! Very hands-on, full kill chain from zero to Global Admin with stealth in mind. Secure your seat now! blackhat.com/us-25/training/…
Cybiosity retweeted
Hello everyone! Our team loves everything related to LPE exploits. However, there is no publicly available list on the web with fresh LPE exploits (2023-2024) for Windows. However, we do have such a list. And we are sharing it with you!
github.com/MzHmO/Exploit-Str…
Cybiosity retweeted
me after my pull request of fixing a typo gets merged into an open source project
Cybiosity retweeted
Dependency confusion attacks pose a significant threat to modern software development. In their blogpost, @Scouty__ & @_Worty explain the risks and introduce DepFuzzer, a tool designed to detect vulnerabilities in your project dependencies: synacktiv.com/publications/f…
Cybiosity retweeted
Have you ever wondered how your PC communicates with an Android device when using adb? Check out our new blogpost!
synacktiv.com/publications/d…
Cybiosity retweeted
New script to dump the KCM database of recent versions of SSSD and convert Kerberos tickets to the standard CCACHE format to ease pass-the-cache: github.com/synacktiv/kcmdump
Cybiosity retweeted
A few months ago, the @freebsdfndation appointed us to audit two #FreeBSD critical components: the Bhyve hypervisor and the Capsicum sandboxing framework.
Today, related advisories and patches have come out 🧵
1. Multiple vulnerabilities in libnv
freebsd.org/security/advisor…
Cybiosity retweeted
We just rewrote the AsOutsider part of #AADInternals in Python to enhance compatibility and ease of use in Linux environments. You can find it here: github.com/synacktiv/AADOuts…
Cybiosity retweeted
The next article by @_bluesheet in our post-quantum series tackles hash-based signature schemes, including XMSS and the freshly standardized SLH-DSA (aka SPHINCS+). Sometimes, you don't need fancy maths to build robust schemes!
synacktiv.com/publications/q…
Cybiosity retweeted
New Golang ransomware called HexaLocker and developed by a former LAPSUS$ administrator is advertised on Telegram channels. Based on a recent sample, @ektoplasma_ provides in-depth analysis of this new strain: synacktiv.com/publications/l…
Cybiosity retweeted
Half the tickets already sold! Checkout our four-day trainings on advanced AD and Azure exploitation and iOS internals at Hexacon in Paris this year (Sept 30th - Oct 3rd):
🌐 hexacon.fr/trainer/vincent_b…
🍎 hexacon.fr/trainer/meffre_he…
Cybiosity retweeted
Looking for offensive trainings for the end of the year? We've got french sessions for you! Come and get trained by our best ninjas on pentesting Active Directory (2 levels available), cloud environments and attacking some hardware!
🇫🇷 More details here: synacktiv.com/en/offers/trai…
Register at [email protected]
Cybiosity retweeted
I’m giving away 10 FREE signed copies of our new book, Black Hat Bash! 🎉 Want one? Repost for a chance to win. #BlackHatBash #free #Giveaway
Cybiosity retweeted
In my new blog for @_CPResearch_ I propose a new injection technique, using the Thread Name API - check it out! 💙
In this blog we introduce Thread-Name Calling - A new process injection technique using Thread Name. We also discuss various scenarios in which this not widely-known API can be used for offense.
research.checkpoint.com/2024…
