Airbus Security Lab

New public advisories released by @Acronis related to our research: security-advisory.acronis.com/SEC-8658, security-advisory.acronis.com/SEC-8768, security-advisory.acronis.com/SEC-8766, security-advisory.acronis.com/SEC-8598, security-advisory.acronis.com/SEC-8641, security-advisory.acronis.com/SEC-8646. Don't forget to apply patches!

Le #SSTIC 2025 continue, et Nicolas Devillers et Arnaud Fontaine vous présenteront leurs travaux sur la conception et l'usage de notre outil soxy le 6 Juin à 10h15. Venez nombreux !

Ca y est, le SSTIC 2025 a commencé, Jean-Romain Garnier vous présentera ses travaux sur l'outil afl-cov-fast aujourd'hui à 16h15. Venez nombreux !

L'équipe sera au #SSTIC2025, n'hésitez pas à passer nous voir pour discuter :)

Passionate about hacking & cybersecurity? Airbus is looking for a Vulnerability Research & Exploitation Specialist in France! 💻 Reverse engineering, Red Teaming ✈️Join a global aerospace & defense leader Apply now! 🚀 ag.wd3.myworkdayjobs.com/en-US/Airbus/j…

🚀 BinCAT Update! 🖤 Following a reported issue, BinCAT now has a dark mode friendly option! 🎨 Update now and enjoy a seamless dark theme experience. Thanks for your feedback!

We’re glad to announce we released Soxy!🚀 A Rust-powered suite of services for Citrix, VMware Horizon & Windows RDP. Red teams & pentesters can use it to pivot for deeper access. Get the tool and more details: 🔗 github.com/airbus-seclab/…

scrings is a strings utility that will output only semantically valid strings based on tree-sitter grammar. scrings support #python #javascript #sql #powershell #bash #php A #volatility plugin is also available to catch scripts in memory ! github.com/airbus-cert/sc…

Following the release of IDA 9.0, we're excited to announce a new BinCAT release 1.4, now fully compatible with the latest IDA version! github.com/airbus-seclab/…

@OphirHarpaz There it is! We finally fixed that!

I do recommend that @AirbusSecLab add an avatar to their Twitter account so it doesn't feel spooky to tag them :P

The team at @AirbusSecurity (AirbusSecLab) found vulns in NetBackup in "all colors of the rainbow". They put nice emphasis in their @hexacon_fr talk on methodology, system architecture and its trust model.

Scanner for CVE-2024-4040 (CrushFTP VFS Escape) github.com/airbus-cert/CV…

We are happy to announce a new pre-release of BinCAT, our binary static analyzer! New is this release: IDA 8.3 integration for Windows and Linux github.com/airbus-seclab/…

Some team member will attend #HEXACON2023, feel free to come to us and discuss :)

Our team is looking for an offensive security engineer: ag.wd3.myworkdayjobs.com/fr-FR/Airbus/j… Want to know more about our activities? Check out github.com/airbus-seclab. Interested in becoming an @AirbusSeclab team member? Feel free to reach out!

Following several evaluations in which we used binary-only fuzzing, we wrote a hands-on blogpost about our step-by-step approach to setup grammar-aware in-memory persistent fuzzing campaigns using AFL++-QEMU. Check it out here: airbus-seclab.github.io/AFLplusplus-bl…!

Vous pouvez trouver les slides de notre présentation "Analyse de sécurité de Netbackup" présentée durant le SSTIC 2023 ici : sstic.org/2023/presentat… et les outils publiés sur notre github : github.com/airbus-seclab/…

A SSTIC la semaine prochaine, Jean-Romain Garnier et Anaïs Gantet partageront la suite des travaux de l'équipe sur le produit NetBackup : sstic.org/2023/presentat… #internals #netbackup #tooling #security RDV au #SSTIC2023 ou sur streaming.sstic.org le 8 juin prochain à 10h.

You can find the slides of our presentation "The unavoidable pain of backups: security deep-dive into the internals of NetBackup" at @hexacon_fr on our github : airbus-seclab.github.io/netbackup/Hexa…

Anaïs Gantet, Nicolas Devillers (@Nikaiw) and Mouad Abouhali (@_m00dy_ ) are going to present “The unavoidable pain of backups: security deep-dive into the internals of NetBackup” at #HEXACON2022. A thought to Jean-Romain Garnier (@JRomainG) that was not able to participate.

New public advisories released by @VeritasTechLLC related to our research: veritas.com/content/suppor…, veritas.com/content/suppor…, veritas.com/content/suppor…, veritas.com/content/suppor…. Don't forget to apply patches!