41554 blogs · [ { "id": "01a08219-5d54-7138-92d4-91936789ef26", "title": "Simuler des services Active Directory légitimes sur un réseau interne : le cas de l’exploitation de GPO", "url": "https://www.synacktiv.com/publications/simuler-des-services-active-directory-legitimes-sur-un-reseau-interne-le-cas-de.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919367dc45c4", "title": "Forensic AWS EKS : sources de données et méthodes d'investigation", "url": "https://www.synacktiv.com/publications/forensic-aws-eks-sources-de-donnees-et-methodes-dinvestigation.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919368025e0a", "title": "Exploiting Titan Quest", "url": "https://www.synacktiv.com/publications/exploiting-titan-quest.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936826069e", "title": "Le problème Unicode de SQL Server : pourquoi vos données ne sont peut-être pas ce que vous croyez qu'elles sont ?", "url": "https://www.synacktiv.com/publications/le-probleme-unicode-de-sql-server-pourquoi-vos-donnees-ne-sont-peut-etre-pas-ce-que.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919368c1cac0", "title": "KYC : Contourner la vérification d'âge avec des modèles génératifs vidéo", "url": "https://www.synacktiv.com/publications/kyc-contourner-la-verification-dage-avec-des-modeles-generatifs-video.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919368e355cc", "title": "Exploiter la RBCD en environnements cross-domain & cross-forest : partie 2", "url": "https://www.synacktiv.com/publications/exploiter-la-rbcd-en-environnements-cross-domain-cross-forest-partie-2.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919369004e0c", "title": "Caught in the Octopus Trap: Unauthenticated RCE in Argo CD with CodeQL", "url": "https://www.synacktiv.com/publications/caught-in-the-octopus-trap-unauthenticated-rce-in-argo-cd-with-codeql.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919369245d14", "title": "Compléter la conformité par la preuve : une approche bottom-up pour NIS2, DORA et le Cyber Resilience Act", "url": "https://www.synacktiv.com/publications/completer-la-conformite-par-la-preuve-une-approche-bottom-up-pour-nis2-dora-et-le.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919369e8247a", "title": "Charting your way in: Injection de templates Helm", "url": "https://www.synacktiv.com/publications/charting-your-way-in-injection-de-templates-helm.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936a237dad", "title": "AWS Forensics : What you need to know", "url": "https://www.synacktiv.com/publications/aws-forensics-what-you-need-to-know.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936ad1227a", "title": "Survivre à la déferlante de LPE Linux : la défense en profondeur n'est pas morte !", "url": "https://www.synacktiv.com/publications/survivre-a-la-deferlante-de-lpe-linux-la-defense-en-profondeur-nest-pas-morte.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936b559985", "title": "Exploitation du Tesla Wall Connector depuis le connecteur de charge - Partie 2 : contournément de l'anti-downgrade", "url": "https://www.synacktiv.com/publications/exploitation-du-tesla-wall-connector-depuis-le-connecteur-de-charge-partie-2.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936b95ca31", "title": "Make it Blink : Compromission à distance du bridge Philips Hue", "url": "https://www.synacktiv.com/publications/make-it-blink-compromission-a-distance-du-bridge-philips-hue.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936c53694f", "title": "Bypassing Windows authentication reflection mitigations for SYSTEM shells - Part ②", "url": "https://www.synacktiv.com/publications/bypassing-windows-authentication-reflection-mitigations-for-system-shells-part.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936cbc41c6", "title": "Bypassing Windows authentication reflection mitigations for SYSTEM shells - Part 1", "url": "https://www.synacktiv.com/publications/bypassing-windows-authentication-reflection-mitigations-for-system-shells-part-1.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936d6e31ed", "title": "Dites bonjour à Pike!", "url": "https://www.synacktiv.com/publications/dites-bonjour-a-pike.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936dd2b9d7", "title": "Hooking Windows Named Pipes", "url": "https://www.synacktiv.com/publications/hooking-windows-named-pipes.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936ecc9b09", "title": "Kubernetes forensics 1/3 : what the container ?", "url": "https://www.synacktiv.com/publications/kubernetes-forensics-13-what-the-container.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936f6d22a1", "title": "Exploiter la RBCD en environnements cross-domain & cross-forest", "url": "https://www.synacktiv.com/publications/exploiter-la-rbcd-en-environnements-cross-domain-cross-forest.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91936f85de23", "title": "Grand saut dans le déploiement sur site d'un serveur LLM à moindres privilèges", "url": "https://www.synacktiv.com/publications/grand-saut-dans-le-deploiement-sur-site-dun-serveur-llm-a-moindres-privileges.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91937020b3ca", "title": "mitmproxy for fun and profit: Interception et analyse de flux applicatifs", "url": "https://www.synacktiv.com/publications/mitmproxy-for-fun-and-profit-interception-et-analyse-de-flux-applicatifs.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91937084736d", "title": "2025 winter challenge writeup", "url": "https://www.synacktiv.com/publications/2025-winter-challenge-writeup.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91937113a2b8", "title": "Au-delà des ACL : Cartographier les chemins d'élévation de privilèges Windows avec BloodHound", "url": "https://www.synacktiv.com/publications/au-dela-des-acl-cartographier-les-chemins-delevation-de-privileges-windows-avec.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919371e5c437", "title": "On the clock: Escaping VMware Workstation at Pwn2Own Berlin 2025", "url": "https://www.synacktiv.com/publications/on-the-clock-escaping-vmware-workstation-at-pwn2own-berlin-2025.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91937263198a", "title": "Wireless-(in)Fidelity: Pentest Wi-Fi en 2025", "url": "https://www.synacktiv.com/publications/wireless-infidelity-pentest-wi-fi-en-2025.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919372ffaf51", "title": "Livewire : exécution de commandes à distance via unmarshaling", "url": "https://www.synacktiv.com/publications/livewire-execution-de-commandes-a-distance-via-unmarshaling.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91937386395c", "title": "Exploiting Anno 1404", "url": "https://www.synacktiv.com/publications/exploiting-anno-1404.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-9193740f65b9", "title": "ActivID administrator account takeover : the story behind HID-PSA-2025-002", "url": "https://www.synacktiv.com/publications/activid-administrator-account-takeover-the-story-behind-hid-psa-2025-002.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-91937496d107", "title": "2025 Winter Challenge: Quinindrome", "url": "https://www.synacktiv.com/publications/2025-winter-challenge-quinindrome.html", "published_at": null }, { "id": "01a08219-5d54-7138-92d4-919374b0aa91", "title": "Breaking the BeeStation: Inside Our Pwn2Own 2025 Exploit Journey", "url": "https://www.synacktiv.com/publications/breaking-the-beestation-inside-our-pwn2own-2025-exploit-journey.html", "published_at": null } ] posts Claim your blog

Back to Synacktiv

Blog · corpus.blog/blogs/synacktiv.com/posts

Synacktiv

synacktiv.com

Undated

Simuler des services Active Directory légitimes sur un réseau interne : le cas de l’exploitation de GPO original ↗

—

Forensic AWS EKS : sources de données et méthodes d'investigation original ↗

—

Exploiting Titan Quest original ↗

—

Le problème Unicode de SQL Server : pourquoi vos données ne sont peut-être pas ce que vous croyez qu'elles sont ?original ↗

—

KYC : Contourner la vérification d'âge avec des modèles génératifs vidéo original ↗

—

Exploiter la RBCD en environnements cross-domain & cross-forest : partie 2 original ↗

—

Caught in the Octopus Trap: Unauthenticated RCE in Argo CD with CodeQL original ↗

—

Compléter la conformité par la preuve : une approche bottom-up pour NIS2, DORA et le Cyber Resilience Act original ↗

—

Charting your way in: Injection de templates Helm original ↗

—

AWS Forensics : What you need to know original ↗

—

Survivre à la déferlante de LPE Linux : la défense en profondeur n'est pas morte !original ↗

—

Exploitation du Tesla Wall Connector depuis le connecteur de charge - Partie 2 : contournément de l'anti-downgrade original ↗

—

Make it Blink : Compromission à distance du bridge Philips Hue original ↗

—

Bypassing Windows authentication reflection mitigations for SYSTEM shells - Part ② original ↗

—

Bypassing Windows authentication reflection mitigations for SYSTEM shells - Part 1 original ↗

—

Dites bonjour à Pike!original ↗

—

Hooking Windows Named Pipes original ↗

—

Kubernetes forensics 1/3 : what the container ?original ↗

—

Exploiter la RBCD en environnements cross-domain & cross-forest original ↗

—

Grand saut dans le déploiement sur site d'un serveur LLM à moindres privilèges original ↗

—

mitmproxy for fun and profit: Interception et analyse de flux applicatifs original ↗

—

2025 winter challenge writeup original ↗

—

Au-delà des ACL : Cartographier les chemins d'élévation de privilèges Windows avec BloodHound original ↗

—

On the clock: Escaping VMware Workstation at Pwn2Own Berlin 2025 original ↗

—

Wireless-(in)Fidelity: Pentest Wi-Fi en 2025 original ↗

—

Livewire : exécution de commandes à distance via unmarshaling original ↗

—

Exploiting Anno 1404 original ↗

—

ActivID administrator account takeover : the story behind HID-PSA-2025-002 original ↗

—

2025 Winter Challenge: Quinindrome original ↗

—

Breaking the BeeStation: Inside Our Pwn2Own 2025 Exploit Journey original ↗

—