Synacktiv is an offensive security company founded in 2012 by several security experts. Main fields of expertise are: - penetration testing and security audits - reverse-engineering and vulnerability research - development of security tools - incident response Synacktiv is a qualified PASSI LPM (Information Systems Security Audit Service Provider) on all scopes. And a CESTI (Information Technology Security Evaluation Center) accredited by the ANSSI to conduct CSPNs. Synacktiv currently employs a team of more than 150 security experts. It operates mainly in France from its 5 offices in Paris, Toulouse, Lyon, Rennes and Lille.
External link for Synacktiv
5 boulevard Montmartre, 75002 Paris
Paris, Ile de France 75002, FR
11, Rue des Abeilles
Toulouse, Occitanie 31000, FR
2, Avenue des Pays-Bas
Rennes, Bretagne 35200, FR
56, Rue Smith
Lyon, Auvergne-Rhône-Alpes 69002, FR
Synacktiv reposted this
Je serai présente ce jeudi au #CBC-Cybersecurity Business Convention en compagnie Élodie 🥷 Grisé,🦩 Arnaud 🥷 P. et Augustin de La Ferrière. Venez nous rencontrer sur notre stand et lors du "Reverse recruiting" de 12h15 à 12h45 (salle atelier 1). MEETT - Parc des Expositions📌
Few weeks ago, Rapid7 released a new Windows version of Velociraptor to patch CVE-2024-10526, a local privilege escalation discovered by Jean-Baptiste Mesnard-Sense and allowing attackers to elevate privileges to SYSTEM on a Windows machine. Velociraptor is an open-source tool designed for endpoint monitoring and digital forensics, offering real-time insights and detailed investigative capabilities during incident response exercises. It is used by a lot of CSIRT and CERT companies including us and we are glad to contribute to make customers a bit more safe! Please defenders, patch ASAP! If you are interested in the technical details, the associated advisory is available at: https://lnkd.in/ezvneMhH
Kerberos authentication relay was once thought to be impossible, but multiple researchers have since proven otherwise. In a 2021 article, James Forshaw discussed a technique for relaying Kerberos over SMB using a clever trick. This topic has recently resurfaced, and in this article, ☀️ Hugo Vincent provides additional insights from the original research and introduces an implementation using the famous krbrelayx tool: https://lnkd.in/ewtR2MzK On a side note, if you are looking to deepen your knowledge of offensive Active Directory techniques such as this one, whether you are a red teamer, a penetration tester, or simply interested in enhancing your security skills, check out the syllabus of our advanced Active Directory exploitation training: https://lnkd.in/eHs35BxP
📣 Today is the NoBracketsCTF, which we are thrilled to sponsor! Come cheer on the challengers at ECW 🥷
📝 Yesterday, the FreeBSD Foundation released a report about an audit we conducted on two critical #FreeBSD components. During 6 weeks, our experts Jean-Baptiste Cayrou and Thomas IMBERT dived into the #FreeBSD source code, and managed to find 27 vulnerabilities and issues. 🐝 BHyve was the first audited component: this is the #FreeBSD hypervisor, in which 22 vulnerabilities have been found. 💊 Capsicum was then analyzed: this is #FreeBSD security framework to perform applications sandboxing. This time, 5 vulnerabilities have been uncovered. All the security vulnerabilities and issues have now been patched, and the overall security of the #FreeBSD project as been reinforced 💪 https://lnkd.in/gX4F_cUA
Octoscan, our GitHub actions vulnerability scanner, is now available as a GitHub action. This action enhances the security of your workflows by identifying vulnerabilities when code is pushed to a repository or when an external user opens a pull request. This capability is made possible through the SARIF format and GitHub's code security feature. https://lnkd.in/eNSKx7gU
We’re thrilled to announce our sponsoring of GreHack -15th & 16th November! 📣 Once again, several of our team members will be attending. On the program: Back to the failure - Did your physical security really evolved in the last 40 years? by Simon G. Deep dive in Laravel encryption security by Rémi M. and Mickael Benassouli Meet our ninjas in #Grenoble 🥷
Le saviez-vous ? Notre site en Bretagne est le plus important des sites en région de Synacktiv et accueille même une des Tesla gagnée lors d'un des #Pwn2Own. C'est avec beaucoup d'enthousiasme et de fierté que nous collaborons dorénavant avec le Breizh Cyber. Ce référencement est une étape importante pour affirmer notre ancrage dans cette région. Nous proposons ainsi notre aide en réponse aux incidents sur tout le territoire breton en collaboration étroite avec le Breizh Cyber. Merci à son directeur Guillaume Chéreau pour la mise en place de ce partenariat. https://lnkd.in/eweP8RUx #BreizhCyber #RégionBretagne #Synacktiv #CyberSécurité
Synacktiv reposted this
Pour les #toulousains, prochain Bière&Sécu 📅 le jeudi 28 novembre 🚩 bar le LevЯette café à partir de 18h30 Merci de vous inscrire sur le framadate : https://lnkd.in/ekHQnmfN
Earlier this year, during the security audit of a SAP infrastructure, our expert Julien EGLOFF discovered a new vulnerability in a SAP component, that allowed us to escalate privileges on the operating system hosting the SAP services and extend the compromise towards further assets. This vulnerability was reported to SAP and the security note 3438085 was released a few weeks ago to patch it. This vulnerability underscores the importance of securing SAP environments to protect critical business operations. Read the technical advisory here: https://lnkd.in/eBseFcTB