🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

The writeups of our challenges are online, go check them out! 🏆 GG and thanks to the authors Robert Xiao, cyrillec and mercymercy_6ft3_DOajNY 🔥 hexacon.fr/challenge/#cha…

This year, #HEXACON2023 will introduce the social event with a lightning talks session! 💡 ⏳ 5 minutes long ⛔️ No bullshit/commercials 🎠 Fun topics appreciated 🍻 Beers allowed 🫵Open to everyone Short talks submission will take place during the event

Now, Mastho and Major_Tom are on stage to present their VirtualBox chain used during #Pwn2Own

I contributed a task to this year's PotluckCTF that contains an emulator for a custom ISA. one of the players actually implemented a decompiler for it by lifting to binja's IL. mind you: this is a 24h long CTF! very neat to see current tooling makes things like this feasible!

Here is a tool that helped me looking for tricky ROP gadgets when manual search failed 🔎 Grab a Windows user-dump of your target, write a pre/post condition and let it try to emulate every candidate in the address space. github.com/0vercl0k/rp-bf…

Our ninja Mastho solved a tough challenge during PotluckCTF with an ingenious approach: he built a decompiler for a custom ISA by lifting instructions to Binary Ninja IL. Read the "Pot of Gold" write-up (kudos to blasty for creating the challenge): synacktiv.com/publications/l…

Have you ever wondered what the attack surface of Counter Strike: Global Offensive looks like? Our ninjas myr and vic studied it and found a server to client bug! Read more details about this research in our latest blogpost. synacktiv.com/publications/e…

Here we are! 🥷 Masters of pwn for the third time 🎉 Congratulations to all the ninjas involved! #Pwn2Own

The team is getting ready for the next #Pwn2Own with some good stuff, stay tuned 😉

Registration for trainings is now open! ⏳ Don't miss your chance to learn from the best and have a great time in Paris 🥐 hexacon.fr/register/

#HEXACON2024's call for paper is officially open! 📅 29 May - Mid July ▶️ cfp.hexacon.fr/hexacon-2024/ As always, thanks again for our committee members who are willing to dedicate some of their valuable time to assess and review the submissions!

Ticket sales for #HEXACON2024 are now OPEN! 📆 4th & 5th of October 2024 🎫 Standard price: 1210€ 🎟 Reduced price: 660€ hexacon.fr/register/

After nearly 10 years of existence, years of use in production on 10k+ computers. The new PythonForWindows release is 1.0.0 \o/ This release adds three important things: official python 3 support, full Unicode support for py2/py3 & CI testing on GitHub ! github.com/hakril/PythonF…

Excited to share our research on Kernel Streaming! We discovered several vulnerabilities in it that we used at Pwn2Own this year. Check it out: devco.re/blog/2024/08/2…

"0-click RCE on Tesla Model 3 through TPMS Sensors" 🚗 by David BERARD (@_p0ly_) & Thomas Imbert (Mastho)

The report of the #FreeBSD audit conducted by Mastho and JB Cayrou is finally out! freebsdfoundation.org/blog/strengthe…

Our latest blog post: Tracing Back to the Source | #SPTM Round 3 #TXM #iOS #macOS #DFF df-f.com/blog/sptm3

Thrilled to share our latest deep dive into Windows Kernel Streaming! Just presented this research at offensivecon. Check it out: devco.re/blog/2025/05/1…

Our new blog post is live: blog.dfsec.com/ios/2025/05/30…

TyphoonCon🌪️ is already over, but we enjoyed every minute ! During our talk "Journey To Freedom", we disclosed for the first time the details on the Windows LPE we used at Pwn2Own Vancouver 2024 after escaping from VirtualBox. Slides are already available: reversetactics.com/publications/2…