Hacking & Barbecue in the south of France What could possibly be better? Barbhack 2025 starts this Saturday August 30th at the Palais des Congrès Neptune in Toulon We are giving away a ticket to a student nearby looking to live the experience. Send us a DM with your name and school. We will notify the winner tonight. image
Unrestrict the restricted mode for USB on iPhone. A first analysis @npub12h89...ac3t #CVE-2025-24200 πŸ‘‰ image
Good tools are made of bugs: How to monitor your Steam Deck with one byte. Finding and exploiting two vulnerabilities in AMD's UEFI firmware for fun and gaming. A Christmas gift in February, brought to you by the incredible @Gwaby 🫢 image
πŸ‘‹ Looking for some cool research opportunities in 2025? We still have an open position in our 2024-2025 internships season. Take a look and hurry up to submit, those satellites won't hack themselves
Finding and chaining 4 vulns to exfiltrate encryption keys from the Android Keystore on Samsung series A* devices. Did you miss the "Attacking the Samsung Galaxy A* Boot Chain" talk by [@max_r_b]( ) and RaphaΓ«l Neveu earlier this year ? Talk && PoC || GTFO: image
Don't you miss the golden era of SQL Injections? Here Mathieu Farrell (@Coiffeur) explains how to feel the thrill again with the aid of Apache Superset, XML and a bit of parsing tickery: "Bypass Apache Superset restrictions to perform SQL Injections" image
⚑ Operator Fabric is an open source platform built by the LF Energy Foundation (https://lfenergy.org/) for use in electricity, water and other utility operations. Last May we did a security audit sponsored by the Open Source Technology Improvement Fund () πŸ™ Read a summary of our findings and find the full report here: image
Are "MIFARE-compatible" contactless cards not playing fair? That's what you may wonder after @npub1g7yr...jmgp spotted some odd behavior. Curiosity led to experiments that resulted in devising a new attack technique that uncovered some backdoors, and here we are πŸ™€ The RFID hacking spirit lives on! image