#synacktiv — Public Fediverse posts

Creating a "Two-Face" #Rust binary on #Linux https://www.synacktiv.com/en/publications/creating-a-two-face-rust-binary-on-linux

#Synacktiv

CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073) https://www.helpnetsecurity.com/2025/10/21/cisa-warns-of-windows-smb-flaw-under-active-exploitation-cve-2025-33073/ #GuidePointSecurity #WindowsServer #Don'tmiss #Synacktiv #WatchTowr #Hotstuff #Windows #News #CISA #PoC

#Security Alert: Massive #Laravel APP_KEY leak exposing 600+ apps to remote code execution 🚨 #GitGuardian & #Synacktiv research reveals 260,000 exposed keys on #GitHub with potential RCE via deserialization attacks #cybersecurity #php #opensource

https://blog.gitguardian.com/exploiting-public-app_key-leaks/

Whew! It took two attempts but the #Synacktiv team successfully exploited the #ChargePoint EV Charger and demonstrated signal manipulation over the connector. They are off to the disclosure room to go over how they did it. #P2OAuto #Pwn2Own

Whew! It took two attempts but the #Synacktiv team successfully exploited the #ChargePoint EV Charger and demonstrated signal manipulation over the connector. They are off to the disclosure room to go over how they did it. #P2OAuto #Pwn2Own

“0-Click RCE on the Tesla Infotainment Through Cellular Network” https://www.synacktiv.com/sites/default/files/2024-05/tesla_0_click_rce_cellular_network_offensivecon2024.pdf #synacktiv #tesla

@0xMitsurugi the offsec session of @passthesaltcon usually provided at approx. 75% by ... #synacktiv 😅​

Great primer on #Windows authentication mechanisms over HTTP by #Synacktiv

https://www.synacktiv.com/publications/dissecting-ntlm-epa-with-love-building-a-mitm-proxy.html

https://www.synacktiv.com/en/publications/a-study-on-windows-http-authentication-part-ii.html

https://github.com/synacktiv/Prox-Ez

The #Synacktiv team succeeds in exploiting a #Canon printer, however, they used a bug previously seen in the contest. They win $5,000 and 1 Master of Pwn point.