@voydstack

VR @Synacktiv | CTF with @RMUBYGG, @Hexagonctf, @ECSC_TeamFrance 20/21/22/23/24

 France
voydstack.re
Joined August 2018
  • Tweets761
  • Following1K
  • Followers2.1K
17Media
voydstack retweeted
Aikido
@AikidoSecurity14h
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.” A significant blast radius. This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression. Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
90
628
323
2,591
448,201
voydstack retweeted
pilvar (Philippe Dourassov)
@pilvar22215h
Python2Shell is also a thing now. Advisory: github.com/advisories/GHSA-9…
18
73
8
614
61,087
voydstack retweeted
Calif
@calif_ioOct 23
Just in case it wasn’t clear: we popped the iPhone Duo on release day, adding a much needed feature, inspired by the php2shell hacker @lcfr_hax! What else there to hack? Wrong answers only.
Calif
@calif_ioOct 23
CC @pwnlambda
67
67
10
864
56,760
voydstack retweeted
Calif
@calif_ioOct 23
CC @pwnlambda
135
454
180
4,913
1,346,804
voydstack retweeted
pepsipu@pepsipuOct 22
i jailbroke the nintendo switch 2 so i modded cinnamoroll, peter griffin, hatsune miku, and more into Mario Kart World, a switch 2 exclusive now watch my friends and i get cooked by bots learn more and get the exploit pepsipu.com/blog/2026-10-swi…
802
3,025
1,887
30,213
5,015,448
voydstack retweeted
Hexacon@hexacon_frOct 21
Hope you're all getting back to reality after an amazing edition of Hexacon! Thank you for your support and all the great talks. See you next year! 🗓️ 8-9 October 2027
1
4
1
75
2,644
voydstack retweeted
Calif
@calif_ioOct 21
php2shell - A tale of two PHP remote vulnerabilities: calif.io/php2shell
20
246
28
767
171,617
voydstack retweeted
Boris Larin@oct0xorOct 21
Andy Nguyen (@theflow0) presents at #TheSAS2026 on how he hacked the PS5 hypervisor (twice, with two amazing bugs!) and got Linux running on the console, with Steam games playable on it!!! 🤯
15
42
2
379
18,307
voydstack retweeted
toasterpwn@toasterpwnOct 21
We've released all information from the @BSidesCbr 2026 Speedrun CTF! Congrats to stackotter for winning, and to jamie who was runner up. All challenge files, solutions, and info can be found here github.com/toasterpwn/BSides… Thanks everyone who watched, see you next year! 🚩⏱️

GitHub - toasterpwn/BSides-Canberra-2026-Speedrun-CTF-PUBLIC

Contribute to toasterpwn/BSides-Canberra-2026-Speedrun-CTF-PUBLIC development by creating an account on GitHub.

github.com
1
3
8
421
voydstack retweeted
InfoSect@infosectcbrOct 17
Congratulations to InfoSect’s Rami on second place in @hexacon_fr’s speedrun CTF! He topped qualifying and took the final to a tiebreaker pwn challenge. A fantastic performance, we’re very proud. Congrats to abiondo on the win, and thanks to the organisers!
2
8
756
voydstack retweeted
Marco Bonelli@mebeimOct 16
Here at @hexacon_fr Orange Tsai just showed us how to pop calc from Edge with only logic bugs... and then how to pop Edge from calc ☠️ LMAO
4
50
3
488
20,560
voydstack retweeted
pwn.ai
@pwn_aiOct 15
Introducing PwnEscape 🦉: a full KVM guest-to-host escape via a Linux kernel networking flaw affecting industry standard hypervisors. CVE-2026-99999 went from untrusted VM code to host-kernel memory reads, controlled writes, and root command execution. More below:
🤖 Made with AI
16
221
46
1,273
388,330
voydstack retweeted
V4bel
@v4belOct 16
Galaxy S26 Ultra: untrusted_app → root. Introducing "Infinity Core": 6 vulns in the Linux kernel's core subsystems. Their impact spans Linux server LPE, container escape, and Android LPE. Details: github.com/V4bel/InfinityCor…
20
106
7
849
54,072
voydstack retweeted
Calif
@calif_ioOct 16
Demos we presented at Hexacon in Paris today. Everything will be released in due time. 1/ Signal 1-click
160
552
115
4,783
654,674
voydstack retweeted
Hexacon@hexacon_frOct 16
A brand new iPhone jailbreak has just been unveiled on stage at Hexacon by the @calif_io team 😱
5
56
3
401
25,383
voydstack retweeted
Hexacon@hexacon_frOct 16
The Last Proof of Human Craft by Orange Tsai 🍊 (@orange_8361)
1
27
9
349
30,361
voydstack retweeted
Synacktiv
@SynacktivOct 15
J-1 before @hexacon_fr! We’ll be at the Palais Brongniart tomorrow. Looking forward to seeing you there 🚀
5
31
1,875
voydstack retweeted
Synacktiv
@SynacktivOct 14
🥊 #Rikugan vs #Frontkick: who wins the agentic AI showdown? Rikugan is open-source and making waves on IDA. Frontkick is built for Binary Ninja. ToolAgent or CodeAct? Aiglematth breaks down the contenders. Read the article ⬇️ synacktiv.com/en/publication…

UFC 666 : Frontkick vs Rikugan

UFC 666 : Frontkick vs Rikugan

synacktiv.com
2
13
18
2,501
voydstack retweeted
Synacktiv
@SynacktivOct 13
In 2023, @Synacktiv researchers identified an authentication bypass in #Danfoss SM800 and SC255/SC355 controllers. The same vulnerability, reported again in 2025, could be linked to the recent supermarket refrigeration attack. 🔎 Authentication Bypass - Danfoss SM800 & SC255/SC355: synacktiv.com/sites/default/… 🔎 Multiple Vulnerabilities - Danfoss SM800A: synacktiv.com/sites/default/…
23
2
76
5,383
voydstack retweeted
Hexacon@hexacon_frOct 12
Hexacon 2026 is officially starting! Trainings time 🎓
2
7
74
4,452
Load more