voydstack @voydstack

🥷 @Synacktiv | CTF with @RMUBYGG, @Hexagonctf, @ECSC_TeamFrance 20/21/22/23/24 voydstack.re Toulouse Joined August 2018

Tweets

636
Followers

2K
Following

929
Likes

8K

Hexacon @hexacon_fr

4 days ago

We’re thrilled to announce Donncha Ó Cearbhaill (@DonnchaC) as our keynote speaker for HEXACON 2025! 💥 No doubt he has plenty of juicy stories up his sleeve 👾

0 8 30 4K 6

Download Image

Turns out my #PHRACK article is live! 🔥 > The Art of PHP — My CTF Journey and Untold Stories! Kinda a love letter to those CTF players & PHP nerds! Hope all the credit goes to the right ppl. Also huge thanks to @0xdea for not forgetting me, @guitmz for the edits, and the…

20 216 873 50K 266

Download Image

Synacktiv @Synacktiv

4 weeks ago

We've just released a tool to decrypt all Synology encrypted archives! We used it to compare SynologyPhotos versions and highlight our #Pwn2Own Ireland 2024 vulnerability on the BeeStation BST150-4T. Check out @Tek_7987's blog post for more details. synacktiv.com/en/publication…

0 31 101 6K 23

Synacktiv @Synacktiv

4 weeks ago

🔥 A few hours ago our experts took the stage at #DEFCON33, sharing cutting-edge research on SCCM exploitation and modern GPO attacks in Active Directory. Proud of the team! 🙌 cc @kalimer0x00 @quent0x1 @wil_fri3d

2 23 99 6K 18

Download Image

James Kettle @albinowax

4 weeks ago

The whitepaper is live! Learn how to win the HTTP desync endgame... and why HTTP/1.1 needs to die: http1mustdie.com

20 250 746 75K 335

Mari0n @pinkflawd

a month ago

@Blackhoodie_RE will be back at @hexacon_fr this year, and we're currently looking for former BlackHoodies who would be willing to give a training, between Oct 6 and 9! blackhoodie.re/Hexacon2025/

0 4 10 2K 0

Kévin GERVOT (Mizu) @kevin_mizu

a month ago

I'm happy to release a script gadgets wiki inspired by the work of @slekies, @kkotowicz, and @sirdarckcat in their Black Hat USA 2017 talk! 🔥 The goal is to provide quick access to gadgets that help bypass HTML sanitizers and CSPs 👇 gmsgadget.com 1/4

11 167 437 33K 284

Download Image

Synacktiv @Synacktiv

a month ago

The latest Synacktiv Summer Challenge was in 2019, and after 6 years, it's back! Send us your solution before the end of August, there are skills to learn and prizes to win 🎁 synacktiv.com/en/publication…

0 10 32 3K 7

Synacktiv @Synacktiv

2 months ago

Ever thought your kitchen appliance could harbor a persistent threat? We reverse-engineered the Thermomix TM5 and uncovered vulnerabilities allowing arbitrary code execution, persistence, and secure boot bypass. Discover our step-by-step breakdown! synacktiv.com/en/publication…

2 45 127 10K 39

Synacktiv @Synacktiv

2 months ago

🔐 Data encryption in Laravel environments is based on one secret: the APP_KEY. Our ninja @_remsio_ studied the impact of its leakage on the internet during an entire year. synacktiv.com/en/publication…

2 39 91 9K 35

Synacktiv @Synacktiv

2 months ago

While performing security research on IoT control applications, @Areizen_ and @Anatharrr discovered critical vulnerabilities in the mobile app for the Eachine E58 drone. These flaws could potentially lead to remote code execution on the user's smartphone. synacktiv.com/en/publication…

0 18 55 5K 12

Axel Souchet @0vercl0k

2 months ago

📢The end of Hexacon's CFP is approaching (July 14th)! If you have technical content you would like to present in Paris, you have another ~11 days to send it in ✍️ Topics of interest are vr / xdev / hardware hax, appsec & offensive security in general 🐛🐜🪲 See you there!👋

Hexacon @hexacon_fr

2 months ago

0 11 27 15K 2

0 7 14 5K 0

Eloi Benoist-Vanderbeken @elvanderb

2 months ago

If you are planning to learn about iOS, don't miss this training. Quentin and Etienne are exceptional researchers. No CVE ≠ no 0-days 😉😇

Synacktiv @Synacktiv

2 months ago

If you are planning to learn about iOS, don't miss this training. Quentin and Etienne are exceptional researchers. No CVE ≠ no 0-days 😉😇

0 7 14 11K 1

0 7 18 3K 0

Quentin M @0xdagger

2 months ago

It's never too late to start vulnerability research on iOS! Our training has been made by experienced iOS security researchers for newcomers in the iOS area who want to start developing "extremely sophisticated attacks"! :-) hexacon.fr/trainer/meffre…

Synacktiv @Synacktiv

2 months ago

0 7 14 11K 1

3 6 34 5K 16

Synacktiv @Synacktiv

2 months ago

There are still seats available for our "iOS for Security Engineers" training at #HEXACON2025! Book it while it's hot 😉 Conference tickets are also still available if you register for a training.

Hexacon @hexacon_fr

5 months ago

There are still seats available for our "iOS for Security Engineers" training at #HEXACON2025! Book it while it's hot 😉 Conference tickets are also still available if you register for a training.

0 8 31 12K 9

Download Image

0 7 14 11K 1

Charles Fol @cfreal_

2 months ago

lightyear just got 6 times faster! Although I now work at @Synacktiv, I proposed a PR for the tool to support threading and compression, greatly reducing the time required to dump a file. Dumping the demo /etc/passwd now takes 48s instead of 5m30. github.com/ambionics/ligh…

1 28 105 11K 37

exploits.club @exploitsclub

3 months ago

Another Week, Another EXPLOITS CLUB 📰 --- 🎉 Binja giveaway: sign up to support the newsletter 🎉 --- Tesla wall charger falls to @Synacktiv @bugscale pops a Chrome bug @binarly_io Secure Boot bypass RCE from @watchtowrcyber + Jobs & MORE 👇 blog.exploits.club/exploits-club-…

2 12 29 8K 6

Hexacon @hexacon_fr

2 months ago

We've already received many high-quality submissions to our CFP, thank you! 🚀 Don't miss your chance to submit before July 14! 📅 hexacon.fr/conference/cal…

0 11 27 15K 2

ANSSI @ANSSI_FR

2 months ago

#ECSC2025 | 🐓 Découvrez la #TeamFrance 2025 ! 🇫🇷 Sélectionnés à l'issue du FCSC, les joueurs de la @ECSC_TeamFrance représenteront la drapeau tricolore à Varsovie, en Pologne, dans le cadre de l'European Cybersecurity Challenge. 🔔 RDV en octobre ! PS: #YouAreAllWinners

0 20 53 7K 2

Download Video

Maher Azzouzi @maherazz2

3 months ago

ZDI-CAN-27262 is a Linux kernel 0-day I reported recently that allows unprivileged users to escalate privileges to root. The vulnerability is a race condition leading to a UAF in the kmalloc-196 cache. It was introduced in v4.2-rc1 and has been present in the kernel for 10 years.