laxa retweeted
In 2023, @Synacktiv researchers identified an authentication bypass in #Danfoss SM800 and SC255/SC355 controllers. The same vulnerability, reported again in 2025, could be linked to the recent supermarket refrigeration attack.
🔎 Authentication Bypass - Danfoss SM800 & SC255/SC355: synacktiv.com/sites/default/…
🔎 Multiple Vulnerabilities - Danfoss SM800A: synacktiv.com/sites/default/…
Last year, I identified multiple vulnerabilities on Ubika WAAP Gateway, including a pre-auth RCE as root, checkout the details !
During a Red Team assessment, @l4x4 discovered multiple vulnerabilities on Ubika WAAP Gateway, including a pre-auth RCE as root.
Technical details are available here ⬇️
synacktiv.com/advisories/ubi…
laxa retweeted
Tu aimes chercher des failles et passer ton temps sur de la technique et de la R&D ? L'équipe Pentest de @Synacktiv recrute.
📍 Paris, Rennes, Toulouse, Lille, Lyon, Bordeaux (+ télétravail pour profils expérimentés)
Je postule 📝 synacktiv.com/pentester-digi…
laxa retweeted
CI/CD pwnage with a pre-auth RCE in #ArgoCD by @hugow_vincent 💥
Discover how a single misconfiguration in a Helm chart can lead to a full cluster compromise sprinkled with some CodeQL shenanigans! 🥷
synacktiv.com/en/publication…
laxa retweeted
🚨 The #Entrypoint2027 Call For Papers is now open!
Have original offensive security research to share? New techniques, tools, or attack stories ? We want to hear from you.
📅 CFP closes: Sept 20, 2026.
Our review board will be revealed soon.
👉 cfp.entrypoint.fr/entrypoint…
laxa retweeted
We've been working on something for a while.
The talks your blue team doesn't want you to see.
🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation.
📍 Paris - Le Dernier Étage
📅 March 19–20, 2027
entrypoint.fr
CFP and additional details coming soon.
laxa retweeted
🔥 Excited to announce our keynote!
We are thrilled to welcome Bruce Dang (@brucedang) and Thai Duong (@XorNinja) from @calif_io! With all their recent AI buzz, we had to check they aren't just LLMs in a trench coat. 🤖🧥
🎟️ Ticketing opens this Thursday at 2:00 PM CEST ⏰
laxa retweeted
So glad to finally be able to present this research at @BlackHatEvents Asia! Blogposts are coming soon, on the menu: LPE via local NTLM reflection and RCE via a new arbitrary Kerberos authentication coercion technique 👀
Tomorrow, @yaumn_ will be presenting his research on Windows authentication reflection at @BlackHatEvents Asia 2026 in Singapore!
The talk will be at 15:20 local time in Simpor Junior Ballroom 4810, come say hi! 😄
#BHASIA
ℹ️ blackhat.com/asia-26/briefin…
laxa retweeted
If #RBCD has been thoroughly documented, only a few resources mention the workflow in cross-domain environment.
In our new blogpost, we dive into the cross-domain and cross-forest RBCD workflows.
Read it here 👇
synacktiv.com/en/publication…
laxa retweeted
📢 NTLM reflection is dead, long live NTLM reflection: Story of an accidental Windows RCE by Wil (@wil_fri3d)
laxa retweeted
🚨 Still a few days to register for our Azure Intrusion for Red Teamers training at #BHUSA! Very hands-on, full kill chain from zero to Global Admin with stealth in mind. Secure your seat now! blackhat.com/us-25/training/…
laxa retweeted
🚗🔌 We reverse engineered the Tesla Wall Connector and uncovered a previously undocumented attack surface via the charging cable. From protocol analysis to code execution, a Pwn2Own Automotive 2025 exploit write-up.
synacktiv.com/en/publication…
You can read the technical details of an authentication bypass I discovered with my colleague @alexisdanizan on SAP FC
While performing penetration tests on SAP Financial Consolidation, our ninjas @l4x4 and @alexisdanizan discovered an authentication bypass for local accounts including the built-in ADMIN account, leading to the underlying system compromise: synacktiv.com/en/advisories/…
laxa retweeted
Microsoft just released the patch for CVE-2025-33073, a critical vulnerability allowing a standard user to remotely compromise any machine with SMB signing not enforced! Checkout the details in the blogpost by @yaumn_ and @wil_fri3d.
synacktiv.com/publications/n…
laxa retweeted
🚨 Conference tickets will be on sale next Monday (4PM UTC+2)!
🎫 Standard price: 1320€
🎟 Reduced price: 660€*
*Reduced prices are for students and professionals whose company does not cover the ticket.
✨ New this year: a second party has been added on Saturday evening.
laxa retweeted
For the second year in a row, we managed to get first place at the #HackTheBox Business #CTF 2025! 🥇 Congratulations to @gmo_ierae and Downscope and thanks to @hackthebox_eu for the fun challenges! 🥳
laxa retweeted
Last chance to grab early bird tickets for our Azure Intrusion training at #BHUSA 2025! Join us in Las Vegas for 100% offensive, hands-on content showcasing real-world attack techniques against modern Azure environments! @BlackHatEvents outline at blackhat.com/us-25/training/…
laxa retweeted
Want to master cutting-edge techniques for attacking Azure? Join us this summer at @BlackHatEvents in Vegas for a deep dive into red teaming on Azure, M365, Azure DevOps, and hybrid infrastructures. Early bird tickets available until May 23rd! blackhat.com/us-25/training/…
laxa retweeted
In our latest article, @croco_byte and @SScaum demonstrate a trick allowing to make Windows SMB clients fall back to WebDav HTTP authentication, enhancing the NTLM and Kerberos relaying capabilities of multicast poisoning attacks!
synacktiv.com/publications/t…
Thanks to a great discovery of @yaumn_, I developed regsecrets.py and modified a PR on impacket to enhance secrets extractions while lowering the detection rate. Read more in the detailed blogpost
In our latest article, @l4x4 revisits the secretsdump implementation, offering an alternative avoiding reg save and eliminates writing files to disk, significantly reducing the likelihood of triggering security alerts. Read the details at synacktiv.com/publications/l….
