Fragscapy is a tool that aims at detecting flaws in firewall and IDS by fuzzing the network messages sent through it. This open source project is available at Amossys' Github.

Yes, the most famous network scanner embeds Machine Learning. Really? A deep neural network with many scientific keywords ? Not at all, I'm more talking about grandpa machine learning. Let us discover it!

Analyse des surfaces d'attaques matérielles d'une ampoule LED connectée. Cet article analyse d'abord les échanges réseau sans fil, puis explique comment la lampe est démontée de façon non destructive pour accéder au port de debug de sa carte principale.

Publication des offres de stage pour l'année 2018-2019. Au menu : packer, wasm, analyse de binaires, cyber range, ids, android, ia, crypto, recherche de vulnérabilités, red team et linux.

The MemITM tool has been developped in order to allow intercepting really easily "messages" in Windows processes memory.

Portable Executable binaries embed timestamps stored by the compiler, which may in some cases appear inconsistent. This article details the origin of these inconsistencies and gives a code sample which may be used to get only the correct timestamps for threat hunting purposes.

Présentation de l'activité de recherche de compromissions du CERT AMOSSYS.

Amossys was a sponsor of the BreizhCTF 2k18, a French hacking competition over a single night (April 20-21th). Many challenges were proposed in a wide range of topics (Web, Reverse, Cryptography, etc). For this occasion, a team was created among our employees (Los Pedrolitos). Here are some write-ups of the solved challenges. And thanks to the organization team for this excellent event in Rennes!

We present here an in-depth analysis of the BADFLICK backdoor, which is used by the TEMP.Periscope group also known as "Leviathan".

Since Windows 10 TH2, NTDLL's syscall routines have changed: syscalls can now be performed with the SYSCALL instruction, and with the INT 2E old one. We say "old" because, until this change, this method had not been supported on x64 architectures since Windows 8. So why such a change? Let's try to find out.