Reposted by WilSynacktiv @synacktiv.com · 13/06/2025Our ninja @kalimer0x00.bsky.social is now on stage at #x33fcon to talk about his journey from dissecting SCCM until the discovery of the critical CVE-2024-43468 and the post-exploitation opportunities🔥 086
Wil @wilfri3d.bsky.social · 11/06/2025Check out how I discover CVE-2025-33073 : RCE with NTLM reflectiv attack allowing authenticated user to compromise any machine without SMB signing enforced ! 020
Reposted by WilSynacktiv @synacktiv.com · 11/06/2025Microsoft just released the patch for #CVE-2025-33073, a critical vulnerability allowing a standard user to remotely compromise any machine with SMB signing not enforced! Checkout the details in the blogpost by @yaumn.bsky.social and @wilfri3d.bsky.social. www.synacktiv.com/publications...synacktiv.comNTLM reflection is dead, long live NTLM reflection! – An in-depth analysis of CVE-2025-33073 075
Reposted by Wilkevintell.bsky.social @kevintell.bsky.social · 21/03/2025I had the privilege to attend this training at Synacktiv and it might be the best training you can get when it comes to Azure given by two guy who does Red Team all year round on this subject. Don't wait ! 001
Reposted by WilSynacktiv @synacktiv.com · 17/03/2025Want to master cutting-edge techniques for attacking Azure? Join us this summer at @blackhatevents.bsky.social in Vegas for a deep dive into red teaming on Azure, M365, Azure DevOps, and hybrid infrastructures. Early bird tickets available until May 23rd! www.blackhat.com/us-25/traini... 0158
Reposted by WilSynacktiv @synacktiv.com · 27/02/2025In our latest article, @croco-byte.bsky.social and @scaum.bsky.social demonstrate a trick allowing to make Windows SMB clients fall back to WebDav HTTP authentication, enhancing the NTLM and Kerberos relaying capabilities of multicast poisoning attacks! www.synacktiv.com/publications...synacktiv.comTaking the relaying capabilities of multicast poisoning to the next level: tricking Windows SMB clients into falling back to WebDav 0105
Reposted by WilSynacktiv @synacktiv.com · 13/02/2025We've just updated our training catalog to include the latest additions, including a brand new course on ransomware investigations! Find all the dates and details at www.synacktiv.com/en/offers/tr... 075
Reposted by WilSynacktiv @synacktiv.com · 27/01/2025In our latest article, @croco_byte proposes an implementation of a trick discovered by James Forshaw in his research regarding Kerberos relaying. Discover how to perform pre-authenticated Kerberos relay over HTTP with our Responder and krbrelayx pull requests! www.synacktiv.com/publications...synacktiv.comAbusing multicast poisoning for pre-authenticated Kerberos relay over HTTP with Responder and krbrelayx 01612
Reposted by WilSynacktiv @synacktiv.com · 20/01/2025Yay! Our offensive Azure training was accepted at BlackHat USA 2025 🥳 Can't wait to see you there and share cutting-edge techniques for attacking Azure environments! 097
