Since our establishment in 2020, Syn Cubes has been committed to providing results oriented penetration testing services.
Claymont, DE
Joined April 2020
- Tweets29
- Following37
- Followers178
- Likes29
SYN CUBES retweeted
Releasing full 2+hr video of my browser exploitation workshop from VXCON 2024: youtube.com/live/b9OhamkAY2I
In which I show what goes inside the mind of a skilled hacker while exploiting a highly non-trivial vulnerability in v8, from zero to exploit concept.
Especially this workflow requires advanced abstract thinking, thereby emphasize the role of theoretical modeling in attacking hard zeroday research targets, which is a part of why it's fun. @zerodaytraining
SYN CUBES retweeted
☁️ AWS vs Azure: A “Secure by default” comparison
Stefan Tita compares various AWS and Azure defaults:
* Susceptibility of the Instance Metadata Service to SSRF
* How easily S3 buckets/container registery images/etc. can be exposed publicly
* AWS Access Keys vs Azure’s Interactive Login
* AWS IAM Policies vs Azure Roles (RBAC)
+ more
securitycafe.ro/2024/09/03/a…
SYN CUBES retweeted
How does MS Exchange on-premises compromise Active Directory?
Check out @Jonas_B_K's latest blog to learn what permissions Exchange has in AD that an attacker can abuse to compromise the domain & what organizations can do to prevent that. ghst.ly/3x551kd
SYN CUBES retweeted
New #glibc vulnerability brings chaos to the #linux world.
Read & Patch!
bleepingcomputer.com/news/se…
Pentesting AWS Cloud: From AWS Account ID Discovery to EKS Cluster Admin and Beyond. syncubes.com/pentesting_aws_…
ALT From www.syncubes.com
SYN CUBES retweeted
Stop by @syn_cubes booth SU07 at #OWASP Global AppSec DC and check out their latest security tools! See why they stand out from the rest - friendly staff, exceptional service, and powerful solutions. dc.globalappsec.org/ #friendlyninja #cybersecurity #appsec #developers
SYN CUBES retweeted
Attention network ninjas: Get ready to rock the cybersecurity world! Join us at the Packet Hacking Village at DEF CON. 🤩#PacketHackingVillage #DEFCON
and don't forget to join the official DEF CON discord!
discord.gg/defcon
SYN CUBES retweeted
A special callout to the amazing sponsors of Packet Hacking Village @fleetctl @Crowd_Security @SecuritySense @syn_cubes @DeloitteCanada @CRESTadvocate and @ZeroTier. You make knowledge accessible for everyone 🤓
Radamsa's mutator fuzzer can be used for testing anything from web apps and embedded devices to network protocols.
Because it can generate unpredictable test inputs, it has been a great way to find unexpected security flaws.
buff.ly/3SxKQC1
#pentesting #fuzzing
We’re excited to announce our partnership with @inspectiv. This will also allow Inspectiv to expand its portfolio and act as a one-stop security shop for clients that seek high-quality penetration testing for their compliance needs & beyond.
#partnership #Pentesting
The following website uses a variety of information gathered within the IAM Dataset and exposes that information in a clean, easy-to-read format, JSON or via descriptive API calls details.
buff.ly/3EhSxVU
#cloud #redteam #pentester #cloudsec
Check out our latest article: Executing a Pentest - A Couple of Tips About How to Avoid Geeting Ripped Off linkedin.com/pulse/executing… via @LinkedIn
We published a blog post exploring a couple of practical solutions related to documents metada sanitization. It might be worth a read. 😉
securityhubs.io/pdf_document…
After the NIST 800-190, Application Container Security Guide, which represents a high-level framework, NSA published a long-expected technical whitepaper. Get it, read it, use it. It is FREE and awesome. media.defense.gov/2021/Aug/0…
Security Skills as a Service model was designed to address this issue through a unique approach, as described in the following article.
linkedin.com/pulse/pentestin…
