@Synacktiv

Offensive security company. Dojo of many ninjas. Red teaming, reverse engineering, vuln research, dev of security tools and incident response.

 France
synacktiv.com
Joined April 2012
  • Tweets1.9K
  • Following274
  • Followers21.8K
541Media
CI/CD pipelines are prime targets for attackers. Is your organisation prepared? Join @matthieubjl & @hugow_vincent at #InsomniHack for 2 days of hands-on training on GitHub Actions, GitLab CI/CD, runner hijacking and secret extraction. Explore the training & register ⬇️ insomnihack.ch/session/88c02…
2
10
1,284
Come by our booth, take on our challenge and win some awesome prizes🎁 The grand finale takes place tonight 🏆 Don’t miss out! #Hexacon26
1
10
1,626
🚀 Synacktiv is at @hexacon_fr! We’re catching up with the offensive security community, sharing expertise and exchanging ideas. 🤝 📍 Here too? Come say hello! 🔗 hexacon.fr/
2
19
2,037
J-1 before @hexacon_fr! We’ll be at the Palais Brongniart tomorrow. Looking forward to seeing you there 🚀
5
31
1,880
During a security assessment, our ninja @ImNotFl0 found vulnerabilities allowing to execute commands as root in the Danfoss SM800a, SM800 and SC255 controllers, mainly used to monitor and configure industrial fridges. Patch now! synacktiv.com/sites/default/… synacktiv.com/sites/default/…
1
10
1
37
6,475
🔎 Authentication bypass - Danfoss SM800 & SC255/SC355 : synacktiv.com/sites/default/… 🔎 Multiple vulnerabilities - Danfoss SM800A : synacktiv.com/sites/default/…
1
1
583
🥊 #Rikugan vs #Frontkick: who wins the agentic AI showdown? Rikugan is open-source and making waves on IDA. Frontkick is built for Binary Ninja. ToolAgent or CodeAct? Aiglematth breaks down the contenders. Read the article ⬇️ synacktiv.com/en/publication…

UFC 666 : Frontkick vs Rikugan

UFC 666 : Frontkick vs Rikugan

synacktiv.com
2
13
18
2,503
In 2023, @Synacktiv researchers identified an authentication bypass in #Danfoss SM800 and SC255/SC355 controllers. The same vulnerability, reported again in 2025, could be linked to the recent supermarket refrigeration attack. 🔎 Authentication Bypass - Danfoss SM800 & SC255/SC355: synacktiv.com/sites/default/… 🔎 Multiple Vulnerabilities - Danfoss SM800A: synacktiv.com/sites/default/…
23
2
76
5,387
How can an HTTP Range request help exfiltrate files and secrets from VMs? At T-REX 2026, @TG91aXMK presented Fusetea, a tool we use during TLPT engagements to speed up Red Team ops. 🔎 Discover Fusetea: github.com/synacktiv/fusetea… 📑 Check out the slides: synacktiv.com/sites/default/… @oenb
1
14
41
3,711
Synacktiv retweeted
Hexacon@hexacon_frOct 8
🚀 Ready to compete old-school style (No 🤖)? Join our speedrun CTF at the @Synacktiv booth Day 1! 🔥 Qualifiers: 15-min try, 1 challenge. Top 8 fastest advance! 🏆 Finals: Friday 16th @ 9 PM (Social Event). 1v1 BO3 bracket 💻Pwn, Web, Crypto, Reverse
5
2
13
2,933
🔐 What if your Group Policy Objects were an attacker’s best friend? As part of @nullcon Berlin, join @wil_fri3d & @hugow_vincent for a webinar on GPO exploitation in Active Directory. 📅 Oct 12 | 11:30 AM-12:30 PM Register ⬇️ events.teams.microsoft.com/e…
2
5
12
1,743
Synacktiv retweeted
NULLCON@nullconOct 1
Crossword cracked? Now take on enterprise AD. 👀 Join Wilfried Bécard and Hugo Vincent of @Synacktiv for Active Directory Intrusion Tactics: Advanced Level at #NullconBerlin2026. Register now: nullcon.net/training/active-… #NullconBerlin2026
1
2
959
Our CEO Renaud Feil shared his insights on how AI is shaping cybersecurity at @BSidesCbr 🇦🇺 While we wait for the official video, check out and download the slides here: synacktiv.com/sites/default/… Thanks to the organizers and everyone who attended!
2
2
1
18
3,462
During a Red Team assessment, @l4x4 discovered multiple vulnerabilities on Ubika WAAP Gateway, including a pre-auth RCE as root. Technical details are available here ⬇️ synacktiv.com/advisories/ubi…

Ubika WAAP Gateway: multiple vulnerabilities including preauth RCE as

Ubika WAAP Gateway: multiple vulnerabilities including preauth RCE as root

synacktiv.com
4
12
1
57
5,001
🚨 Un cluster Kubernetes est compromis. Où sont les preuves ? Conteneurs éphémères, logs distribués, workloads volatils… l’investigation forensique dans #Kubernetes ne s’improvise pas. Retrouvez notre formation : Kubernetes Forensics ⬇️ synacktiv.com/offres/formati…
2
3
4
1,460
Synacktiv retweeted
Entrypoint@Entrypoint_frSep 7
🔥 What are you bringing to #Entrypoint? New technique? Tool release? Real-world compromise? Deep technical offensive security talk? 🎤 CFP closes 20 September. 📅 19-20 March 2027 | 📍 Paris ➡️ cfp.entrypoint.fr/entrypoint…
1
11
14
2,154
🔐 Un #ActiveDirectory compromis : savez-vous reprendre le contrôle ? Notre formation AD: Hardening & Post-Compromise Recovery vous apprend à durcir l’AD, détecter les attaques et maîtriser la reprise de confiance après compromission. Inscrivez-vous ici ⬇️ synacktiv.com/offres/formati…
1
8
1,602
Gagne ta place pour @WineRump ! Envie de vivre l’expérience WineRump le 11/09 à Bordeaux ? 👀 Pour tenter ta chance, c’est simple : 👉 Commente ce post avec « je participe » 🎲 Tirage au sort le mardi 08/09 🍷 1 place à gagner ! Bonne chance à tous 💪
3
2
4
2,033
Merci à tous pour votre participation 🎉 L’heureux gagnant a été contacté en message privé.
1
612
Synacktiv retweeted
REVEL•IO@REVEL_IO_Sep 7
⏳ J-7 before #FIFE2026! Next week, #REVEL·IO by @Synacktiv will be in Madrid to connect with the Spanish digital forensics community 🇪🇸 👋 Attending too? Come and meet us! 📍 Madrid 📅 17 Sept. 2026 ℹ️ onretrieval.com/feria-de-inf… #DFIR #DigitalForensics
1
2
869
Synacktiv recrute un Dev QA Red Team (H/F) ! Ta mission : tester & faire évoluer notre arsenal offensif (stabilité, perf, furtivité). 🛠️ Requis : Python, QA, culture cyber offensive, virtualisation. 📍 Paris 2e 🔗 synacktiv.com/developpeur-qa… 📩 [email protected]
1
12
2,661
Load more