Gaetan @_mabote_

AppSec researcher @SonarSource | Former pentester 🥾 | @[email protected] Joined March 2019

Tweets

269
Followers

199
Following

89
Likes

558

Fenrisk @FenriskSec

2 years ago

Expecting to struggle finding a gadget chain in WordPress Core during an assessment when devs suddenly decided to make it easy : fenrisk.com/publications/b…

1 9 18 4K 9

Sonar Research @Sonar_Research

2 years ago

🔥 Unauthenticated RCE vulnerability in JetBrains TeamCity (CVE-2023-42793) 🔥 We just disclosed the technical details explaining how a vulnerable Request Interceptor and a few undocumented endpoints led to RCE on one of the most popular CI/CD servers: sonarsource.com/blog/teamcity-…

Sonar Research @Sonar_Research

2 years ago

0 34 93 24K 22

0 22 57 15K 9

Sonar Research @Sonar_Research

2 years ago

Zip-slipping to RCE via Auto-Reload: OpenRefine is prone to critical security vulnerability (CVE-2023-37476). Read more in our latest blog post: sonarsource.com/blog/openrefin… #security #vulnerability #appsec

1 11 41 5K 8

Sonar Research @Sonar_Research

2 years ago

RCE in Apache OpenMeetings due to SQL weak comparison, unexpected application state, and null-byte injection. Check out the technical details in our latest blog post: sonarsource.com/blog/a-twist-i… #appsec #security #vulnerability

0 24 68 10K 10

Download Image

Sonar Research @Sonar_Research

2 years ago

We are excited to share that we have two entries in the running for the next Pwnie Awards 🐴✨ 👇

1 4 13 3K 0

Hexacon @hexacon_fr

2 years ago

🥑 The Hazards of Technological Variety and Parallelism: An Avocado Nightmare, by Stefan Schiller (@scryh_)

0 2 6 3K 0

Download Image

scryh @scryh_

2 years ago

Super excited to present this at Hexacon! See you there :)

Hexacon @hexacon_fr

2 years ago

Super excited to present this at Hexacon! See you there :)

0 2 6 3K 0

Download Image

0 1 5 443 0

Sonar @SonarSource

2 years ago

@Sonar_Research identified and linked two vulnerabilities, leading to one-click remote code execution (RCE) exploit in Pimcore. Check out this @SecurityWeek article for all the details: securityweek.com/pimcore-platfo… #appsec #security #vulnerability

0 4 6 725 0

Sonar @SonarSource

2 years ago

Sonar at @BlackHatEvents Asia! Look for us at Booth B20 for live demos with our solution! In addition, @Sonar_Research member Paul Gerste will host a presentation: "Stealing with Style: Using CSS to Exploit ProtonMail & Friends" on May 11, 11:20 am at Roselle Junior Ballroom!

0 2 13 15K 1

Download Video

Sonar Research @Sonar_Research

2 years ago

What do we need content types for anyway? Let's look into how an incorrect content type led to a real-world vulnerability in the famous business suite Odoo, CVE-2023-1434 🐛 sonarsource.com/blog/odoo-get-… #appsec #python #cleancode

0 11 38 6K 7

Synacktiv @Synacktiv

2 years ago

Windows authentication & Prox-Ez is the topic of the last Synacktiv talk at #THCon, staring @b1two_ and @YofBalibump

0 9 26 3K 0

Download Image

TyphoonCon🌪️ @typhooncon

2 years ago

“Patches, collisions and root shells: a Pwn2Own adventure” will be presented by @scryh_, @pspaul95 & @[email protected] from team @Sonar_Research at #TyphoonCon23! Learn more and get your tickets today: typhooncon.com/blog/conitems/…

0 11 33 33K 2

Download Image

Clint Gibler @clintgibler

3 years ago

🗡️ Argument Injection Vectors A curated list of exploitable options when dealing with argument injection bugs Capabilities: run a command, file write, file read, library load ➡️ chrome '--gpu-launcher="id>/tmp/foo" By @Sonar_Research #bugbountytips sonarsource.github.io/argument-injec…

0 1 4 1K 0

Sonar Research @Sonar_Research

3 years ago

SNMP to RCE - Read about an XSS vulnerability we discovered in LibreNMS, which can be exploited by sending a spoofed SNMP trap and gain code execution via Blade templates: sonarsource.com/blog/it-s-a-sn… #appsec #security #vulnerability

0 42 126 21K 35

Download Image

Synacktiv @Synacktiv

3 years ago

A server monitoring software 🌡 named Supermicro SuperDoctor 5 has been encountered during an assessment. However, @bak_sec and @_mabote_ were not big fans of the web app UX and thought a root shell would be more suitable 🐚 ➡️ Read more about this RCE: synacktiv.com/sites/default/…

0 15 43 11K 5

Download Image

Synacktiv @Synacktiv

3 years ago

In no time, the mighty @elvanderb pwned his favorite target: XNU, the Apple MacOS kernel! Rumor has it that he took more time developing the ASCII art than the actual exploit 🥷 #P2OVancouver

Trend Zero Day Initiative @thezdi

3 years ago

In no time, the mighty @elvanderb pwned his favorite target: XNU, the Apple MacOS kernel! Rumor has it that he took more time developing the ASCII art than the actual exploit 🥷 #P2OVancouver

1 36 237 49K 10

Download Gif

0 24 138 17K 4

Synacktiv @Synacktiv

3 years ago

Did you enjoy the latest blogpost on PHP filter chains? Well, our ninja @_remsio_ strikes again with a new article detailing how you can abuse them to leak files from the targeted system, as well as a freshly developed tool to exploit it! synacktiv.com/publications/p…

2 67 143 26K 30

0xbeefed @0xbeefed

3 years ago

Fishing for bugs in PHP apps be like

2 4 36 5K 0

Download Video

Szlam @szLam_

3 years ago

@MathisHammel @plhery On en parlait déjà en 2016... Pas surpris de voir que ça continue 7 ans plus tard sur ce genre d'apps. youtube.com/watch?v=M7vdzg…

1 1 6 587 1

Lexfo @LexfoSecurite

3 years ago

A few months ago, we reported a pre-auth Remote Code Execution #RCE vulnerability to @vBulletin. The exploitation of this unserialize() bug was tricky, as vBulletin classes are not deserialisable. Discover the exploitation in our latest blogpost: ambionics.io/blog/vbulletin…