baddhack retweeted
Comme j'en ai marre d'être appelé pour de la publicité et que j'aime bien les RegExp :
gist.github.com/noraj/462129…
baddhack retweeted
J’assume
Le @BreizhCTF est pour moi le meilleur évent de cyber de France.
Orga au top, animation parfaite, lieu incroyable, CTF intéressant original et bien fait, nourriture divine et ambiance folle.
Merci à tous pour cette journée / nuit ✨
baddhack retweeted
Coucou maman je passe à la télé 🥳
Les rumps du #BreizhCTF2024 démarrent à l'instant !
Neuf sessions sont prévues cette année
baddhack retweeted
Je continue ma recherche en full remote (depuis Dakar mais prêt à venir en Europe qques temps si nécessaire). J'ai pas mal de ça ⬇️ dans mes retours 😐 mais je ne désespère pas 🌝 Si vous connaissez des recruteurs/entreprises qui recrutent en cyber en full remote ➡️ DM
baddhack retweeted
In my job search in Dakar, I don't know what has been more challenging : navigating the local job market where my profile is absolutely not sought after, or the expat job market that is incredibly closed to outsiders. That's why I now only focus on full-remote opportunities.
baddhack retweeted
… see you in 48H #CTF ….
baddhack retweeted
You asked and we answered...
Because of the interest in our merch, we've decided to run a giveaway! We're offering merch bundles to 10 lucky winners (items may vary to those shown).
To enter:
🛡️ Follow us and @CysecCareers
🛡️ Retweet this tweet
Worldwide. Closes Jan 5, 2024
baddhack retweeted
Congrats everyone for this 100% French podium !! 🇫🇷🥖
We are proudly standing at the 1st place in this @hackthebox_eu CTF in front of over 900 worldwide universities ! 🏴☠️🥇
Thanks to everyone,
GG @EsnaBretagne and @ecole2600 ! 🚀
See you next year ! 🔥 @ENSIBS
baddhack retweeted
🏆 Thrilled to achieve 1st place with my team @GCC_ENSIBS at the @HackTheBox_eu University CTF 2023, alongside two other French teams, @EsnaBretagne and @Phreaks2600 🔥
⤵️Write-Up about Race Condition, OAuth Misconfiguration, XSS & RCE via HTML2PDF
xanhacks.xyz/p/phantom-feed/
baddhack retweeted
I have made 2 writeups for #ECSC2023 and #DGhAck. For the 2nd one, I used github.com/naacbin/CovenantD…
[1] Recovering PDF using DataRun of $LogFile
> naacbin.gitlab.io/data-on-th…
[2] Decrypt empire C2 communication by extracting private key from memory
> naacbin.gitlab.io/empire-c2/
baddhack retweeted
[thread] Did you know that ssh tries to authenticate with stored keys BEFORE the key specified with -i in the command line ? I just noticed this, the hard way 😐.
Let's imagine you have more than 5 keys loaded in your ssh agent. When authenticating to a remote server, you get:
baddhack retweeted
GCC est à la finale du @CsawEurope 2023 Embedded Security Challenge - ESC !
J1 - Journée de conférence 🔥📖
@50mgDrahoxx, Rémi, Okan et Théo sont présents sur place pour représenter le club !
baddhack retweeted
Une #carte intéressante a été créée pour résumer les #cyberattaques envers les organismes publics en #France, grâce au fond de carte libre #OpenStreetMap
umap.openstreetmap.fr/fr/map…
baddhack retweeted
The CVSS Special Interest Group is proud to announce the official release of CVSS v4.0 - first.org/cvss/. This latest version of CVSS seeks to provide all users with the highest fidelity vulnerability assessment.
#FIRSTdotOrg #CVSS #BuildingTrust #PSIRT #CSIRT
baddhack retweeted
haiti v2.0.0 is out!
🍾 Reached 600+ (632) hash types supported
📈 113 new hash types
☀️ New list command to list all supported hash types
☑️ Many enhancements (add JtR or HC ref/id, better description, fixes) and better detection
github.com/noraj/haiti/relea…
baddhack retweeted
New critical vulnerability #CVE-2023-20198 affecting Cisco IOS XE devices when Web UI is enabled.
⚠ CVSS: 10
❌ Fixes : not available
Related to the attack:
5.149.249[.]74
154.53.56[.]231
Cisco provided some way to check if the system might be compromised 1/2
baddhack retweeted
Inspired by @ACEResponder works on Sliver C2, I create a tool to decrypt Covenant communications : github.com/naacbin/CovenantD…
baddhack retweeted
Bonjour à toute la commu cybersécu👋. J'essaie de récolter un max d'infos sur l'envie de chacun pendant les compétitions Capture The Flag. forms.gle/dCarNMurrquvsM6Z7
Les résultats seront partagés dans quelques semaines.
Merci d'avance pour vos RT🙏
#ctf #infosec #CyberSecurity
baddhack retweeted
Here is my retex on the OSCP 2023 blog.azumi.fr/posts/oscp-ret…


























