anyfun retweeted
[ZDI-25-1039|CVE-2025-12686] (Pwn2Own) Synology BeeStation Plus auth_info Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.8; Credit: @Tek_7987 and @_Anyfun (both working @Synacktiv)) zerodayinitiative.com/adviso…
anyfun retweeted
At #Pwn2Own2025, our experts @Tek_7987 & @_Anyfun remotely compromised a Synology Beestation Plus via a pre-auth exploit, leading to full system takeover.
The vuln is now tracked as CVE-2025-12686 🔍
🔗 Full write-up: synacktiv.com/en/publication…
anyfun retweeted
A big shout-out to the @Synacktiv team for their strong performance at the latest #Pwn2Own competition in Cork!
They proudly secured third place overall 👏
Next stop: Tokyo for the upcoming edition 🇯🇵 👀
More details on the targets and participants here ℹ️
zerodayinitiative.com/blog/2…
anyfun retweeted
Congrats to @Tek_7987 and @_Anyfun for landing the first successful entry at #Pwn2OwnCork - exploiting a stack overflow on @Synology BeeStation Plus for $40,000 and 4 Master of Pwn points in the process 💥
Let’s keep pushing 💪
#P2OIreland #Synacktiv
anyfun retweeted
Userland iOS aficionados, I released a simple IDA plugin that should improve your Objective-C experience.
For now it removes ARC function calls in decompiled code (eg objc_retain) and helps listing candidate callers to a method. Check it out at github.com/synacktiv/objc-he…
The "Objective-C helper" IDA plugin presented during the @sth4ck talk "Demystifying Objective-C internals" given by @v1csec is now publicly available on GitHub at github.com/synacktiv/objc-he…
The slides are also available on our website: synacktiv.com/sites/default/…
anyfun retweeted
Gunshots pierce the night as a Tesla speeds away... lead the hunt for a covert criminal group in this year's @sstic challenge! We worked hard to design unique and thrilling puzzles. Join the chase starting today 16:00 GMT+1 at sstic.org/2024/challenge/ !
anyfun retweeted
Take the time to read our new #PluginFocus article. In this blog post, Arnaud Gatignol (@_anyfun) and Julien Staszewski (@_0perator) from the @thalium_team introduce ida kmdf, a tool that helps with your KMDF driver analysis. Read more 🌐 hex-rays.com/blog/plugin-foc…
#idapro
ALT Plugin Focus – ida kmdf
anyfun retweeted
As a treat before next week's talk at OffensiveCon by Guillaume & Quentin, here is an introduction to our recent findings on KSMBD. Enjoy, and see you in Berlin to all #OffensiveCon23 attendees!
@offensive_con
blog.thalium.re/posts/ksmbd-…
anyfun retweeted
🛰️@esa has organised an unprecedented takeover of a demonstration satellite.
The @thalesgroup's offensive #cybersecurity team took up the challenge by identifying vulnerabilities that could disrupt the operation of #ESA's satellite.
#CYSAT
thls.co/1phS50NRa21
ALT Artist's impression of OPS-SAT. Credit: ESA – European Space Agency
anyfun retweeted
Abusing Linux In-Kernel SMB Server to Gain Kernel Remote Code Execution by @guteissier and @laomaiweng offensivecon.org/speakers/20…
anyfun retweeted
Upcoming batch of vulnerabilites on Linux & Canonical, stay tuned for details ...
ALT https://www.zerodayinitiative.com/advisories/upcoming/ filter "thalium"
anyfun retweeted
Windows Memory Introspection with IceBox
thalium.github.io/blog/posts…
anyfun retweeted
Zenk-security créé son Discord et il est ouvert à toutes et tous : discord.gg/s92J2uR :)
Respect et bienveillance de mise bien entendu. ;)
anyfun retweeted
@taviso to be fair I think the problem here is clearly showers. They make people "think" things they shouldn't.
anyfun retweeted
FR tweet: Qui est chaud pour une contre-soirée SSTIC à Paris avec des rumps et à boire (une rump -> free beer) ? Join #beerump sur freenode.
anyfun retweeted
Zenk-security a mit en place un wiki ouvert au public. Write-up , compte rendu d'audit, papers etc.. wiki.zenk-security.com/ . Bonne lecture !