Plus simple d'en discuter autour d'une bière que sur scène ! github.com/thalium/idatag

Zenk-security créé son Discord et il est ouvert à toutes et tous : discord.gg/s92J2uR :) Respect et bienveillance de mise bien entendu. ;)

Windows Memory Introspection with IceBox thalium.github.io/blog/posts/win…

WinDBG kd extension to speed up nt object research resolution by Thalium Team : github.com/thalium/WinDbg… #SSTIC

Just pushed some homeworks about NT object access tracing through VMI : thalium.github.io/blog/posts/nt_… Let me know if you enjoy it :)

👀👀👀👀👀👀 zerodayinitiative.com/advisories/upc…

Upcoming batch of vulnerabilites on Linux & Canonical, stay tuned for details ...

Abusing Linux In-Kernel SMB Server to Gain Kernel Remote Code Execution by @guteissier and Quentin Minster Picavet offensivecon.org/speakers/2023/…

🛰️European Space Agency has organised an unprecedented takeover of a demonstration satellite. The Thales Group's offensive #cybersecurity team took up the challenge by identifying vulnerabilities that could disrupt the operation of #ESA's satellite. #CYSAT thls.co/1phS50NRa21

As a treat before next week's talk at OffensiveCon by Guillaume & Quentin, here is an introduction to our recent findings on KSMBD. Enjoy, and see you in Berlin to all #OffensiveCon23 attendees! offensivecon blog.thalium.re/posts/ksmbd-tr…

2023 Linux Kernel RCEs by @guteissier and Quentin Minster Picavet now #OffensiveCon23

Take the time to read our new #PluginFocus article. In this blog post, Arnaud Gatignol (@_anyfun) and Julien Staszewski (0perator) from the Thalium Team introduce ida kmdf, a tool that helps with your KMDF driver analysis. Read more 🌐 hex-rays.com/blog/plugin-fo… #idapro

Gunshots pierce the night as a Tesla speeds away... lead the hunt for a covert criminal group in this year's SSTIC challenge! We worked hard to design unique and thrilling puzzles. Join the chase starting today 16:00 GMT+1 at sstic.org/2024/challenge/ !

Userland iOS aficionados, I released a simple IDA plugin that should improve your Objective-C experience. For now it removes ARC function calls in decompiled code (eg objc_retain) and helps listing candidate callers to a method. Check it out at github.com/synacktiv/objc…

Let’s go!

Awesome!

Congrats to Tek_ and anyfun for landing the first successful entry at #Pwn2OwnCork - exploiting a stack overflow on Synology Inc. BeeStation Plus for $40,000 and 4 Master of Pwn points in the process 💥 Let’s keep pushing 💪 #P2OIreland #Synacktiv

A big shout-out to the Synacktiv team for their strong performance at the latest #Pwn2Own competition in Cork! They proudly secured third place overall 👏 Next stop: Tokyo for the upcoming edition 🇯🇵 👀 More details on the targets and participants here ℹ️