VR @Synacktiv | CTF with @RMUBYGG, @Hexagonctf, @ECSC_TeamFrance 20/21/22/23/24

France
Joined August 2018
voydstack retweeted
Netflix and Pwn, Remotely Exploiting MediaTek Phones via the GenieZone Hypervisor by Philipp Mao and @s_k_u_u_k
4
29
1,910
voydstack retweeted
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.” A significant blast radius. This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression. Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
116
849
429
3,445
802,503
Python2Shell is also a thing now. Advisory: github.com/advisories/GHSA-9…
21
97
12
877
89,228
voydstack retweeted
Just in case it wasn’t clear: we popped the iPhone Duo on release day, adding a much needed feature, inspired by the php2shell hacker @lcfr_hax! What else there to hack? Wrong answers only.
77
80
10
1,007
103,689
voydstack retweeted
154
526
207
5,737
1,622,386
We've open-sourced the Hexacon 2026 Speedrun CTF challenges ! Congratulations to all the players👏See you next year 🍾
The Hexacon 2026 Speedrun challenges are now open to everyone! How fast can you solve them? Train now for the next edition 🏆 github.com/hexacon-fr/speedr…
12
573
voydstack retweeted
i jailbroke the nintendo switch 2 so i modded cinnamoroll, peter griffin, hatsune miku, and more into Mario Kart World, a switch 2 exclusive now watch my friends and i get cooked by bots learn more and get the exploit pepsipu.com/blog/2026-10-swi…
815
3,066
1,904
30,612
5,203,555
voydstack retweeted
Hope you're all getting back to reality after an amazing edition of Hexacon! Thank you for your support and all the great talks. See you next year! 🗓️ 8-9 October 2027
1
4
1
76
2,724
voydstack retweeted
php2shell - A tale of two PHP remote vulnerabilities: calif.io/php2shell
19
250
29
778
179,969
voydstack retweeted
Andy Nguyen (@theflow0) presents at #TheSAS2026 on how he hacked the PS5 hypervisor (twice, with two amazing bugs!) and got Linux running on the console, with Steam games playable on it!!! 🤯
16
42
2
378
18,546
voydstack retweeted
We've released all information from the @BSidesCbr 2026 Speedrun CTF! Congrats to stackotter for winning, and to jamie who was runner up. All challenge files, solutions, and info can be found here github.com/toasterpwn/BSides… Thanks everyone who watched, see you next year! 🚩⏱️
1
3
1
9
639
voydstack retweeted
Congratulations to InfoSect’s Rami on second place in @hexacon_fr’s speedrun CTF! He topped qualifying and took the final to a tiebreaker pwn challenge. A fantastic performance, we’re very proud. Congrats to abiondo on the win, and thanks to the organisers!
2
8
761
voydstack retweeted
Here at @hexacon_fr Orange Tsai just showed us how to pop calc from Edge with only logic bugs... and then how to pop Edge from calc ☠️ LMAO
4
50
3
488
20,625
voydstack retweeted
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors. CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
16
220
46
1,275
389,698
voydstack retweeted
Galaxy S26 Ultra: untrusted_app → root. Introducing "Infinity Core": 6 vulns in the Linux kernel's core subsystems. Their impact spans Linux server LPE, container escape, and Android LPE. Details: github.com/V4bel/InfinityCor…
20
106
7
851
54,449
voydstack retweeted
Demos we presented at Hexacon in Paris today. Everything will be released in due time. 1/ Signal 1-click
169
559
116
4,857
695,331
voydstack retweeted
A brand new iPhone jailbreak has just been unveiled on stage at Hexacon by the @calif_io team 😱
5
56
3
403
25,527
voydstack retweeted
The Last Proof of Human Craft by Orange Tsai 🍊 (@orange_8361)
1
27
9
350
30,649
voydstack retweeted
J-1 before @hexacon_fr! We’ll be at the Palais Brongniart tomorrow. Looking forward to seeing you there 🚀
5
31
1,883
voydstack retweeted
🥊 #Rikugan vs #Frontkick: who wins the agentic AI showdown? Rikugan is open-source and making waves on IDA. Frontkick is built for Binary Ninja. ToolAgent or CodeAct? Aiglematth breaks down the contenders. Read the article ⬇️ synacktiv.com/en/publication…
2
13
18
2,504