Synacktiv

This account is verified. Learn more

@Synacktiv

Offensive security company. Dojo of many ninjas. Red teaming, reverse engineering, vuln research, dev of security tools and incident response.

France synacktiv.com Joined April 2012

274 Following 22K Followers 1.9K Posts

Latest posts 5

Synacktiv @Synacktiv 38m

Interesting by old vulnerabilities in video games ? Checkout our latest blogpost on 𝘚𝘵𝘢𝘳 𝘞𝘢𝘳𝘴 𝘌𝘱𝘪𝘴𝘰𝘥𝘦 𝘐 : 𝘙𝘢𝘤𝘦𝘳 by @tomtombinary 👇
synacktiv.com/en/publication…

www.synacktiv.com Star Wars Episode I: Racer Star Wars Episode I: Racer

Synacktiv @Synacktiv 5d

🚨 During an internal audit, our expert Marin found a SQL injection and a stored XSS in GLPI 11, which could lead to database extraction and account takeover.

Update now!

👇
synacktiv.com/en/advisories/…

www.synacktiv.com SQL Injection and Stored XSS Vulnerabilities in GLPI 11 SQL Injection and Stored XSS Vulnerabilities in GLPI 11

Synacktiv @Synacktiv Oct 30

At the CERT-EU conference, @k3vinTell and @hugow_vincent presented #CodeQLLM: combining CodeQL's precision with locally run LLMs to help security auditors identify vulnerabilities through white-box analysis.

📑 Explore the slides: synacktiv.com/sites/default/…

Synacktiv @Synacktiv Oct 29

A recent audit of the #GLPI application conducted by Tedi revealed a mass assignment vulnerability that could lead to MFA bypass and account takeover.

Refer to the security advisory ⬇️
synacktiv.com/en/advisories/…

www.synacktiv.com GLPI: Mass Assignment in the Password Reset Flow Enables GLPI: Mass Assignment in the Password Reset Flow Enables Post-exploitation Silent Account Takeover

Synacktiv @Synacktiv Oct 27

Two of our experts on stage at #hacklu last week:
@us3r777 - Improving wordlists with tooling & methodology
@_remsio_ - Deep dive into Livewire: from weak typing to pre-auth RCE

🎯 Locked outside your target? Have a look at:
▪️ github.com/synacktiv/dico…
▪️ github.com/synacktiv/Live…