Théo Louis-Tisserand retweeted
Tickets for Entrypoint are officially live!
entrypoint.fr/tickets/
Théo Louis-Tisserand retweeted
In our latest article, @croco_byte presents new scripts allowing to simulate legitimate AD services in a flexible manner, and demonstrates their use through GPO exploitation ⬇️
synacktiv.com/en/publication…
Théo Louis-Tisserand retweeted
We've been working on something for a while.
The talks your blue team doesn't want you to see.
🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation.
📍 Paris - Le Dernier Étage
📅 March 19–20, 2027
entrypoint.fr
CFP and additional details coming soon.
Théo Louis-Tisserand retweeted
[Blogpost] @croco_byte presents how to exploit attack paths related to Active Directory sites' ACLs.
As the latter often constitute a blind spot for AD enumeration tools, the article also describes a pull request aiming to integrate them into the BloodHound project: synacktiv.com/en/publication…
Théo Louis-Tisserand retweeted
🧑🎓 Boost your offensive Active Directory skills with our Entry & Advanced trainings. Hands-on labs with dozens of machines + latest research from DEFCON, x33fcon & more! Seats are limited, don’t miss out!
🔗 Entry: synacktiv.com/en/offers/trai…
🔗 Advanced: synacktiv.com/en/offers/trai…
Théo Louis-Tisserand retweeted
Our ninja @kalimer0x00 is now on stage at #x33fcon to talk about his journey from dissecting SCCM until the discovery of the critical CVE-2024-43468 and the post-exploitation opportunities🔥
Théo Louis-Tisserand retweeted
Microsoft just released the patch for CVE-2025-33073, a critical vulnerability allowing a standard user to remotely compromise any machine with SMB signing not enforced! Checkout the details in the blogpost by @yaumn_ and @wil_fri3d.
synacktiv.com/publications/n…
Théo Louis-Tisserand retweeted
Azure intrusion for red teamers
by Paul Barbé & Matthieu Barjole (@aevy__)
hexacon.fr/trainer/barbe_bar…
Théo Louis-Tisserand retweeted
🚀 This week, @us3r777 & @__pierreg kick off our new Whitebox Vulnerability Research training! Students will dive into PHP, Java, and .NET, analyzing & exploiting 1-day vulnerabilities. Let’s get started! 💻🔍
Théo Louis-Tisserand retweeted
In our latest article, @croco_byte and @SScaum demonstrate a trick allowing to make Windows SMB clients fall back to WebDav HTTP authentication, enhancing the NTLM and Kerberos relaying capabilities of multicast poisoning attacks!
synacktiv.com/publications/t…
Théo Louis-Tisserand retweeted
Following the release of IPSpinner last week, now is the time to unveil CaptainCredz! Perform advanced, fine-grained password spraying while remaining under the radar for your next Red Team engagement 🔥
github.com/synacktiv/captain…
Théo Louis-Tisserand retweeted
Oh, you didn't know? Cool kids are now relaying Kerberos over SMB 😏
Check out our latest blogpost by @hugow_vincent to discover how to perform this attack:
synacktiv.com/publications/r…
Théo Louis-Tisserand retweeted
GitLab recently released a patch for the Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409). Our ninjas @alexisdanizan and @b1two_ analyzed the patch and wrote the exploit code! github.com/synacktiv/CVE-202…
Théo Louis-Tisserand retweeted
Thanks to @0hexit's PR, DPoP auth support has now been added to CloudNine for Okta which is used in agent versions >3.18.0 \o/ github.com/xpn/OktaPostExToo…
Théo Louis-Tisserand retweeted
☁️ Whether it's on premises or in the cloud, a domain is a domain.
💪 Flex your intrusion muscles with @tiyeuse and @hugow_vincent's training!
➡️ hexacon.fr/trainer/vincent_b…
📆 30/09-03/10 2024
📍Espace Vinci, Rue des Jeuneurs, Paris
Théo Louis-Tisserand retweeted
Bonne année tout le monde 😄🎉
📣Prenez une bonne résolution et venez au premier Bière&Sécu 2024, le jeudi 8 février 🗓️ à 19h au Rooster and Beer 🐔🍺
Inscrivez-vous 👉 framadate.org/HlfuGIxo2u62Ws…
Contactez-nous si vous avez des sujets à présenter via Twitter ou Discord 🗣️!
Théo Louis-Tisserand retweeted
Bored of managing multiple proxychains configurations? @hugoclout developed bbs, a swiss army knife proxy manager for red teamers! The project is available on our GitHub: github.com/synacktiv/bbs
Théo Louis-Tisserand retweeted
During a recent Active Directory intrusion test, @croco_byte was led to devise a new versatile attack vector targeting Group Policy Objects, allowing their exploitation through NTLM relaying.
synacktiv.com/publications/g…
