Scouty (@Scouty__) profile picture

Scouty

@Scouty__

@Synacktiv

Joined July 2011
  • Tweets131
  • Following419
  • Followers140
🚨 Une dépendance peut suffire à compromettre toute une entreprise 🎬 On revient sur l’attaque de dependency confusion qui a frappé Apple, Microsoft, etc. 🔍 + focus sur DepFuzzer avec les créateurs @_Worty & @Scouty__ 📺 youtu.be/UWrC0ok9_mc
Image from Franso (@Fransosiche)
2
10
21
1,741
Dependency confusion attacks pose a significant threat to modern software development. In their blogpost, @Scouty__ & @_Worty explain the risks and introduce DepFuzzer, a tool designed to detect vulnerabilities in your project dependencies: synacktiv.com/publications/f…
Fuzzing confused dependencies with Depfuzzer

Fuzzing confused dependencies with Depfuzzer

Fuzzing confused dependencies with Depfuzzer

synacktiv.com
22
54
4,693
📣 From July 3 to 5, at Polytech Lille, our ninjas will give the following talks during @passthesaltcon: 👉 So I became a node: Kubernetes bootstrap tokens and AKS, by @Scouty__ and Paul Barbé 👉 Fuzzing confused dependencies with Depfuzzer, by @Scouty__ and @_Worty
1
5
19
4,277
For @WEareTROOPERS second day, @Scouty__ and Paul are presenting their research on Kubernetes bootstrap tokens and AKS
Image from Synacktiv (@Synacktiv)
14
22
4,386
Kubernetes bootstrap tokens streamline the process of deploying nodes' TLS certificates. Paul Barbé & @Scouty__ studied how these tokens could be exploited in AKS, leading to compromise of the whole cluster. synacktiv.com/publications/s…
So I became a node: exploiting bootstrap tokens in Azure Kubernetes

So I became a node: exploiting bootstrap tokens in Azure Kubernetes

So I became a node: exploiting bootstrap tokens in Azure Kubernetes

synacktiv.com
21
65
5,635
The @Synacktiv team shows off their remote exploit of the #Tesla Model 3. Earlier today, this research earned them $75,000 during #Pwn2Own.
7
87
17
246
After many days (and nights!) of hard work, we're really proud to see @_p0ly_ and @vdehors target the @Tesla Model 3 at #Pwn2Own! Draw will take place on Tuesday, send us all your good vibes 💪
Image from Synacktiv (@Synacktiv)
4
58
3
246
If you are attending CanSecWest, do not miss the talk where @abu_y0ussef, @netsecurity1 and @cleptho will explain how they gained code execution on the Canon printer during #Pwn2Own! secwest.net/csw22presentatio…
Image from Synacktiv (@Synacktiv)
10
36
*drum roll* The Call For Papers is now open! Find all the details about your submission on cfp.hexacon.fr/hexacon-2022/… Discover the awesome panel of experts who will review your papers ⬇️
1
56
5
77
Croissants, red wine and high-quality offensive security talks in a wonderful place? That's all the Hexacon team is promising for October 2022. Details and Call For Papers are coming very soon... Until then, a bit more teasing for you folks: hexacon.fr/ #HEXACON2022
Image from Hexacon (@hexacon_fr)
1
86
3
118
This is the end of a fantastic week, as we had the chance to welcome in the team 3 seasoned security experts 😃 Welcome to @Scouty__ from @GlobalNTT, Jean-Baptiste from @EYFrance and @masthoon from @msftsecurity Let's hack stuff.
2
6
44
We are proud to launch our brand new interactive XSS cheatsheet featuring novel vectors from @garethheyes portswigger.net/research/one…
One XSS cheatsheet to rule them all

One XSS cheatsheet to rule them all

PortSwigger are proud to launch our brand new XSS cheatsheet. Our objective was to build the most comprehensive bank of information on bypassing HTML filters and WAFs to achieve XSS, and to present th

portswigger.net
10
651
11
1,321
My first picture on #Mars! My lens cover isn’t off yet, but I just had to show you a first look at my new home. More status updates: go.nasa.gov/InSightStatus #MarsLanding
Image from NASA InSight (@NASAInSight)
1,038
17,312
2,738
50,722
Scouty retweeted
r'm (@remeh) profile picture
r'm@remeh22 Oct 2018
Hey! I've just released a new article on my site that might interest you: « Rendering a map using Go, Mapbox and OpenStreetMap », the title speak for itself. Open to feedbacks! #sig #golang #code #sideprojects 🛠️ remy.io/blog/rendering-a-map…
Rendering a map using Go, Mapbox and OpenStreetMap

Rendering a map using Go, Mapbox and OpenStreetMap

This article explains how I've used Go, Mapbox and OpenStreetMap to render maps into PNG images.

remy.io
16
25
We released a small python script used to parse #formbook PCAPs containing HTTP requests to C&C. Currently extracting: * Beaconing requests * Intercepted HTML forms * Password Recoveries * Clipboard data * Screenshot github.com/ThisIsSecurity/ma…
Image from Rémi J. (@netsecurity1)
3
94
173
My new post for @Malwarebytes "Reversing malware in a custom format: #HiddenBee elements" : blog.malwarebytes.com/threat…
3
232
7
421
Amsterdam a vidé un canal et publié tout ce qu'ils ont retrouvé dedans en ligne. De la carte Pokémon de nos jours à des lances d'il y a 3000 ans. Passionnant ! belowthesurface.amsterdam/en…
53
2,053
168
2,977
Slides for the Bug Hunter's Methodology 3(ish) from today's LevelUp 0x02 @bugcrowd conference - docs.google.com/presentation…
Image from JS0N Haddix (@Jhaddix)
16
417
6
979
When offline, Chrome shows a dinosaur game on "can't connect" page. Someone made an AI for it! Learns to play in under 12 hours, interacting with browser in real time directly from image on screen. In TensorFlow. Code: github.com/vdutor/tf-rex Post: vdutor.github.io/blog/2018/0…
6
494
28
1,108
Analysis of CVE-2018-8174 VBScript 0day and APT actor related to Office targeted attack... blogs.360.cn/blog/cve-2018-8…
3
179
14
249
Load more