Max

Love a good supply-chain compromise? Check out "Don't let Jia Tan have all the fun: Hacking into Fedora and openSUSE" from Thomas Chauchefoin & Maxime Rinaudo - super interesting stuff: fenrisk.com/supply-chain-a…

🗓️ Breaking news: Thomas Chauchefoin & Maxime Rinaudo will deliver "Don't let Jia Tan have all the fun: hacking into Fedora and OpenSUSE" at Insomni’hack 2025. 🔍 Explore the program and register now:insomnihack.ch/talks/dont-let… #INSO25 #Cybersecurity #EthicalHacking #Switzerland

Diving into RCE pop chains once again with @MaxRio13 ! Our Latest blog article presents a funny Laravel one. While our recent publication on WordPress was a walk in the park, this one was a bit more of a challenge🔎: fenrisk.com/publications/b…

Expecting to struggle finding a gadget chain in WordPress Core during an assessment when devs suddenly decided to make it easy : fenrisk.com/publications/b…

GTFOArgs: A Curated List Of Binaries For Argument Injection. gtfoargs.github.io

Here are the final Master of Pwn standings. Congrats to @Synacktiv on claiming the title. It was a close race, but they pull through.

Our team is currently leading the #Pwn2Own challenge. We had our first bug collision tonight on the HP printer, but we are super happy to be in the first place anyway 😄

Our first attempt of the day went smoothly with a full win at #Pwn2Own against the Western Digital My Cloud Pro Series PR4100 NAS! Congratulations Etienne, @johncool__ and @OnlyTheDuck 👍 Follow our next entry at 7PM (CET time) on the Sonos One speaker: youtu.be/rY4phaf7KEU

Active Directory Kill Chain Attack & Defense Attack and defend active directory using modern post exploitation adversary tradecraft activity github.com/infosecn1nja/A…

One line HTTP server. gist.github.com/willurd/5720255