Antoine Cervoise

Pour son premier pentest doudou lapin a fait preuve d'abnégation et a pu passer admin de dom

Le PDF des actes (recueil des articles) du SSTIC 2024 est en ligne : actes.sstic.org/SSTIC24/sstic-… #sstic #sstic2024

Time for #SSTIC rump sessions with @acervoise!

Back in July, our ninjas @acervoise et @R3n1k were at @_leHACK_ explaining why you should be wary of playing old DOS games on your Linux laptop... and how you can protect yourself using AppArmor. Watch the talk in French! youtube.com/watch?v=Ts7M9U…

Thank you everyone for this amazing second edition! We hope you all had a blast and all the team is already eager to see you all next year for #HEXACON2024 🚀

Last sponsor we want to introduce is a special one: it's @Synacktiv, the company organizing #HEXACON2023. Leader in offensive security, Synacktiv helps companies assess their networks's security. There will be a lot of ninjas in the conference, feel free to talk to them! 🤗

Slides of @acervoise and @R3n1k presentation during #leHACK are now available! Besides resources about backdooring a program running in DosBox or Wine, you will find a great introduction to AppArmor! synacktiv.com/sites/default/…

@Julien_cdb_sncf @TrainCvnAuvergn @PsyEN1 Donc contrairement à ce qui est dit plus haut, non, il n'existe aucun service pour ce genre d'usager.

@Julien_cdb_sncf @TrainCvnAuvergn @PsyEN1 Surtout que comme indiqué ici mesbagages.sncf-connect.com/questions-freq… la valeur unitaire du bagage doit être inférieure à 500 €

Have you ever tried to play an old Windows game on Linux? @acervoise and @r3n1k will present at #leHack why you should not trust abandonware and how you can harden your Linux workstation! More on lehack.org/track/pwned-by…

A while ago, @acervoise and @blackndoor found two vulnerabilities in Kerlink KerOS granting an attacker access to an antenna over SSH or HTTP. Upgrade to version 5.7.2 and read the security advisory here: synacktiv.com/sites/default/…

🚨 Challenges are LIVE! 🚨 Read the rules and enjoy! 🎲 ➡️ IoT: ARMlessRouter ⭐ ➡️ Web/Crypto: AlmostIsoSerial ⭐⭐ ➡️ RE/pwn: KVSRV ⭐⭐⭐ hexacon.fr/challenge/

@Synacktiv @Fist0urs Sthack is also having rumps sessions! Slides for "DLP bypass for Boomers" are also online synacktiv.com/sites/default/…

Last week, @acervoise and @Fist0urs were at #Sthack 2023 to talk about DMA attacks. Their slides are now online: synacktiv.com/sites/default/…

Time for @acervoise talk during #Sthack23 (ft. @Fist0urs) about practical DMA attacks 💻

Multiple vulnerabilities were recently fixed in n8n version 0.216.1, including authentication bypass, file reads and elevation of privileges. Read the security advisory from our experts and patch now! synacktiv.com/sites/default/…

@hacksecureims_ C'est reparti pour l'après-midi de conférence avec @Synacktiv en ouverture @NUMICA51 #partenaire

Excellent start for the team! @_p0ly_ and @vdehors fully compromised the Tesla Model 3 gateway from the ethernet network 💪 We should book a new parking space now...

Ninjas can be fan of dumpsters: @acervoise will present his methodology to loot sensitive data from your trash @hacksecureims_ hacksecureims.eu/conferences.ht…

In their latest podcat, @nolimitsecu interviewed two of our experts about DMA attacks. If you understand 🇫🇷 and if you want to know more about DMA attacks, here's the link! nolimitsecu.fr/attaques-dma/

#Podcast #Cybersécurité Épisode #403 consacré aux attaques DMA, avec Jean-Christophe Delaunay et @acervoise nolimitsecu.fr/attaques-dma/