Sign in

Hugow

@rustyphasm.bsky.social
60 followers 212 following 1 posts

Red Team / Security researcher at @synacktiv.com linktr.ee/rustyphasm

PostsRepliesMedia
Hugow @rustyphasm.bsky.social · 01/07/2026
#ArgoCD + #CodeQL = pre auth RCE
000
Reposted by Hugow
Argo Project @argoproj.io · 29/06/2026
A new CVE has been released for the Argo CD Helm package. Users will need to update their values files. Thanks to @rustyphasm.bsky.social for the find and @todaywasawesome.com for the fix! github.com/argoproj/arg...
github.com
Argo CD: Network policies securing repo-server are not installed by default leading to RCE
### Summary Argo CD by default restricts network access to repo server and other components but the Helm package by default does not. This means any pod on a cluster can access and interact with...
021
Reposted by Hugow
Synacktiv @synacktiv.com · 15/06/2026
🇵🇱 At #x33fcon, our experts unveiled new offensive DCOM techniques, including a COMouflage variant enabling arbitrary executable execution and a fileless lateral movement method based on .NET deserialisation. DCOMIllusionist is now available: 🔗 github.com/synacktiv/DC...
022
Reposted by Hugow
Entrypoint @entrypoint-fr.bsky.social · 18/06/2026
We've been working on something for a while. The talks your blue team doesn't want you to see. 🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation. 📍 Paris - Le Dernier Étage 📅 March 19–20, 2027 entrypoint.fr CFP and additional details coming soon.
085