Pierre (@__pierreg) header
Pierre (@__pierreg) profile picture

Pierre

@__pierreg

Web Security :-)

Joined January 2013
  • Tweets435
  • Following684
  • Followers194
1Media
Photo by Pierre (@__pierreg)
Tickets for Entrypoint are officially live! entrypoint.fr/tickets/
1
48
2
35
2,487
Ticket sales open this Monday, Nov. 2. : entrypoint.fr/tickets/
17
1
23
1,646
Last call for Entrypoint 2027 speakers! The CFP closes today ! Only a few hours left to submit your talk. 19–20 March 2027 Le Dernier Étage, Paris Submit here: entrypoint.fr/cfp Don’t miss your chance to be part of the first edition.
Call for papers — Entrypoint

Call for papers — Entrypoint

Entrypoint 2027 call for papers: submit a 30-minute technical offensive security talk. Themes include Red Teaming, supply-chain attacks, CI/CD, physical intrusion, malware & C2 and post-mortem...

entrypoint.fr
5
4
495
Pierre retweeted
Janggggg (@testanull) profile picture
Janggggg@testanullAug 13
testbnull.medium.com/hunting… Some note of recent Exchange Server Pre-Auth RCE! Have fun reading!
Hunting Exchange Server 0day like a detective

Hunting Exchange Server 0day like a detective

It has been a while since my last blog post, not because I didn’t do anything (or I?), I just don’t have any time/ any motivation to start…

testbnull.medium.com
6
57
231
21,212
The Review Board for Entrypoint 2027 is complete🔒 10 security experts from around the world will be reading your submissions this year ! Reminder: CFP closes on September 20, 2026 at 23:59 UTC Submit your paper now at entrypoint.fr/ Meet the team below (A-Z)👇
Image from Entrypoint (@Entrypoint_fr)
2
25
2
34
6,200
Pierre retweeted
Hugow (@hugow_vincent) profile picture
Hugow@hugow_vincentJul 1
#ArgoCD + #CodeQL = pre auth RCE
Synacktiv (@Synacktiv) profile pictureSynacktiv
@SynacktivJul 1
CI/CD pwnage with a pre-auth RCE in #ArgoCD by @hugow_vincent 💥 Discover how a single misconfiguration in a Helm chart can lead to a full cluster compromise sprinkled with some CodeQL shenanigans! 🥷 synacktiv.com/en/publication…
Caught in the Octopus Trap: Unauthenticated RCE in Argo CD with CodeQL

Caught in the Octopus Trap: Unauthenticated RCE in Argo CD with CodeQL

Caught in the Octopus Trap: Unauthenticated RCE in Argo CD with CodeQL

synacktiv.com
1
17
2,665
🚨 The #Entrypoint2027 Call For Papers is now open! Have original offensive security research to share? New techniques, tools, or attack stories ? We want to hear from you. 📅 CFP closes: Sept 20, 2026. Our review board will be revealed soon. 👉 cfp.entrypoint.fr/entrypoint…
Image from Entrypoint (@Entrypoint_fr)
28
4
43
8,822
We've been working on something for a while. The talks your blue team doesn't want you to see. 🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation. 📍 Paris - Le Dernier Étage 📅 March 19–20, 2027 entrypoint.fr CFP and additional details coming soon.
1
54
2
100
20,812
HID recently disclosed HID-PSA-2025-002, a critical flaw in the #ActivID Authentication Appliance 8.7. In our new blog post, @us3r777 and @__pierreg break down exactly how they uncovered it, from methodology to exploitation 💡 Read it here ⬇️ synacktiv.com/en/publication…
ActivID administrator account takeover : the story behind

ActivID administrator account takeover : the story behind

ActivID administrator account takeover : the story behind

synacktiv.com
11
21
3,093
Today, we’re releasing watchTowr Labs’ @chudyPB’s BlackHat .NET research, owning Barracuda, Ivanti and more solutions. Enjoy the read as Piotr explains a new .NET Framework primitive, used to achieve pre- and post-auth RCE on numerous enterprise appliances. labs.watchtowr.com/soapwn-pw…
SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies And WSDL

SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies And WSDL

Welcome back! As we near the end of 2025, we are, of course, waiting for the next round of SSLVPN exploitation to occur in January (as it did in 2024 and 2025). Weeeeeeeee. Before then, we want to...

labs.watchtowr.com
3
108
11
365
88,773
C'est la rentrée ! 🔥 Prochain Bière Sécu Lyon le mercredi 24 septembre ! RDV à 19:00 au bar associatif Boomrang (adhésion de 2€) Première tournée offerte par @Synacktiv 🍻 Inscriptions via : framadate.org/BSL24sept Un sujet à présenter ? Contactez-nous ici ou sur Discord !
1
4
5
2,315
And domain-level RCE in Veeam B&R fixed today (CVE-2025-23121). My first (and hopefully not last) CVE, where I'm credited together with @codewhitesec 😎
watchTowr (@watchtowrcyber) profile picturewatchTowr
@watchtowrcyber17 Jun 2025
Veeam has released patches today - veeam.com/kb4743
KB4743: Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2

KB4743: Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2

Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2

veeam.com
1
12
60
6,906
🚨 Interested in Windows kernel exploitation? Our @sstic 2025 talk on the Shadow Stack implementation in the Windows kernel is now online! 📄 Paper: sstic.org/media/SSTIC2025/SS… 📑 Slides: sstic.org/media/SSTIC2025/SS…
Synacktiv (@Synacktiv) profile pictureSynacktiv
@Synacktiv5 Jun 2025
It's already #SSTIC2025 day 2! @netsecurity1 and us3r present the Windows kernel shadow stack mitigation 🪟
Image from Synacktiv (@Synacktiv)
61
175
18,718
Pierre retweeted
frycos (@frycos) profile picture
frycos@frycos28 Apr 2025
My blog post on some vulns in GFI MailEssentials frycos.github.io/vulns4free/…

GFI MailEssentials - Yet Another .NET Target

What is this product GFI MailEssentials all about? We’re living the future, right? So let’s ask the GFI AI.

frycos.github.io
1
35
85
8,488
📍 RDV ce soir à 19:00 au Peaky Blinders - 83 Cr Charlemagne, 69002 Lyon ! Au programme : - Mehdi (mtalbi 🦋) nous présentera "Escaping from bhyve" ! 🍯 - aiglematth nous présentera "Another one bytes the Rust" ! 🦀 🎤 Un sujet de dernière minute à présenter ? Contactez-nous !
2
4
470
C'est le premier BiereSecu Lyon de l'année 2025 ! 📍 RDV dès 19:00 ce mercredi 19 février au Peaky Blinders - 83 Cr Charlemagne, 69002 Lyon 🎤 Un sujet à présenter ? Contactez-nous sur Twitter ou via notre Discord ! discord.com/invite/wCHweeqr 👋 A bientôt !
3
4
448
David Lynch (1946-2025) 🖤
Image from Letterboxd (@letterboxd)
418
19,601
6,711
101,509
4,725,450
The first episode of #Severance Season 2 premieres Friday.
137
1,347
525
13,108
690,840
🔥 C'est la reprise du Bière Sécu Lyon ! 📍 RDV à 19:00 le jeudi 17 octobre au Peaky Blinders - 83 Cr Charlemagne, 69002 Lyon 🎤 Un sujet à présenter ? Contactez-nous sur Twitter ou via notre Discord ! discord.com/invite/wCHweeqr 👋 A bientôt !
5
8
1,140
The final part of @chudyPB's look at #Exchange bugs in a post-ProxyNotShell world covers the no aurgument constructor. It allowed him to find 3 more vulns, even after Exchange PowerShell had been hardened by switching to a strict allow list of types. zerodayinitiative.com/blog/2…
Zero Day Initiative — Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument...

Zero Day Initiative — Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument...

As you may know, I recently presented my Exchange-related talk during OffensiveCon 2024. This series of 4 blog posts is meant to supplement the talk and provide additional technical details.

zerodayinitiative.com
2
25
2
64
15,502
Load more