@guedou

A geek. What else ? I tweet things I read. #scapy #networking #security

 Paris, France
my.geekstory.net
Joined April 2007
  • Tweets28.2K
  • Following1K
  • Followers2.8K
1.5KMedia
Reversing a Japanese Wireless SD Card - From Zero to Code Execution #BHUSA #slides goo.gl/oijvdN
6
94
2
121
Guillaume Valadon retweeted
NoLimitSecu@nolimitsecuOct 5
#Podcast #Cybersécurité Épisode #552 consacré aux fuites de clés privées, avec @guedou et Gaëtan Ferry nolimitsecu.fr/fuites-de-cle…

Fuites de clés privées - NoLimitSecu

Episode #552 Fuites de clés privées Avec guillaume valadon et Gaëtan Ferry Référence : https://www.sstic.org/2026/presentation/private-key-leaks_insights-from-certificate-transparency/

nolimitsecu.fr
8
4
1,070
AI Agent Security: Six Controls From Nine Real Incidents blog.gitguardian.com/ai-agen…

AI Agent Security: Six Controls From Nine Real Incidents

An AI agent runs with your credentials and acts before you can stop it. Nine incidents show what that costs. Six controls limit the damage: sandbox the agent, scope its credentials, lock its config...

blog.gitguardian.com
2
2
296
Guillaume Valadon retweeted
Trail of Bits
@trailofbitsSep 3
1,535 potential bugs found, 1,017 awaiting patches, 326 fixes open upstream, 192 merged. Since Aug 4: +398 bugs, +46 merged, 55 codebases under review, and scapy has overtaken vllm as the most-reported codebase in Patch the Planet. trailofbits.com/patch-the-pl…

Dashboard · Patch the Planet · Trail of Bits

Live view of the Patch the Planet initiative: issues identified, patches shipped, and projects onboarded.

trailofbits.com
1
12
1
37
4,763
Guillaume Valadon retweeted
Chaofan Shou
@shouccccSep 10
I bought a Fable dataset from one of the top Chinese LLM routers yesterday. With just 6TB data, I can take over 7 Chinese/CIS gov entities & 19 top Chinese firms like Xiaomi, Huawei, NIO, Minimax using SSH keys, VPN configs, Aliyun keys, GitLab tokens sent to the router.
Chaofan Shou
@shouccccApr 10
26 LLM routers are secretly injecting malicious tool calls and stealing creds. One drained our client $500k wallet. We also managed to poison routers to forward traffic to us. Within several hours, we can directly take over ~400 hosts. Check our paper: arxiv.org/abs/2604.08407
274
1,046
409
9,634
3,789,647
Guillaume Valadon retweeted
Synacktiv
@Synacktiv10 Jul 2025
🔐 Data encryption in Laravel environments is based on one secret: the APP_KEY. Our ninja @_remsio_ studied the impact of its leakage on the internet during an entire year. synacktiv.com/en/publication…

Laravel: APP_KEY leakage analysis

Laravel: APP_KEY leakage analysis

synacktiv.com
2
38
1
89
8,924
Guillaume Valadon retweeted
quarkslab@quarkslab25 Oct 2024
Sacre BLE! Fuzzing Bluetooth Low Energy GATT and annoying your colleagues for fun and silence Let Baptiste Boyer show you the way blog.quarkslab.com/bluetooth…
Fighting the BLE Machine

ALT Fighting the BLE Machine

2
26
75
11,085
Guillaume Valadon retweeted
Richard Carlier@richnourichnou23 Oct 2024
NiceGUI - let any browser be the frontend of your Python code #python #gui nicegui.io/
1
2
379
Guillaume Valadon retweeted
quarkslab@quarkslab18 Oct 2024
Our 2024-2025 internships season has started Check out the 3 new openings and apply for fun and knowledge! (paid internships, fur coats not included) blog.quarkslab.com/internshi…
3 interns at Quarkslab's secret lab doing extra cool internship things

ALT 3 interns at Quarkslab's secret lab doing extra cool internship things

18
29
6,162
Docker Zombie Layers: Why Deleted Layers Can Still Haunt You blog.gitguardian.com/docker-…

Docker Zombie Layers: Why Deleted Layers Can Still Haunt You

Docker Zombie Layers are unreferenced image layers that continue to exist for weeks in registries, even after being removed from a manifest. In this hands-on deep dive, we explore how these layers...

blog.gitguardian.com
3
313
javascript How to extract urls,srcs and hrefs from all HTML elements in any website? Open DevTools and run urls = [] $$('*').forEach(element => { urls.push(element.src) urls.push(element.href) urls.push(element.url) }); console.log(...new Set(urls)) #infosec #cybersec
3
94
441
27,147
Guillaume Valadon retweeted
Romain THOMAS@rh0main30 Sep 2024
Extracting liblockdown.dylib from visionOS dyld shared cache and running it with a DBI on macOS? Challenge accepted! 📖 Blog: romainthomas.fr/post/24-09-a… 🎞️ Demo: youtube.com/watch?v=5L05OE5m… ⌨️ Code: github.com/romainthomas/visi…
23
66
4,703
Guillaume Valadon retweeted
Hexacon@hexacon_fr6 Sep 2024
You can find all the talks announced on the agenda: hexacon.fr/conference/agenda… Again, a big thanks to the review committee for their contribution as well as everyone who took the time to submit a talk. 🙏

Hexacon - Conference – Agenda

Two days of conferences, two parties

hexacon.fr
2
18
25
9,075
Guillaume Valadon retweeted
NinjaLab@NinjaLabFr3 Sep 2024
We are very excited to share our last research work: 𝐄𝐔𝐂𝐋𝐄𝐀𝐊, authored by Thomas Roche. An electromagnetic Side-Channel Vulnerability in the ECDSA implementation of all Infineon security microcontrollers, notably impacting all YubiKey 5 Series. ninjalab.io/eucleak/

EUCLEAK - NinjaLab

Download the Writeup Illustration Romain Flamand – Flamingo Studio – [email protected] Abstract Secure elements are small microcontrollers whose main purpose is to generate/store secrets and...

ninjalab.io
12
115
34
273
84,488
Guillaume Valadon retweeted
Barbhack@_barbhack_31 Aug 2024
📣 @MISCRedac sponsor PRESSE de l’édition @_barbhack_ 2024 ! Vite votre exemplaire 🏃‍♂️🏃‍➡️ #barbhack24 @touloncongres 📷
3
4
833
Guillaume Valadon retweeted
MISCmag@MISCRedac23 Aug 2024
Petit aperçu du numéro attendu en kiosque dès le 30 août prochain #cybersécurité #hyperviseur #vmescape #exploit #vmware #qemu
2
13
3
38
11,670
Guillaume Valadon retweeted
RMC
@RMCInfo30 Jul 2024
🏀 Le 3 points + faute de Strazel, à dix secondes de la fin, qui permet aux Bleus d'aller chercher la prolongation contre le Japon à Lille ! #RMCLive
11
3
46
15,467
Guillaume Valadon retweeted
matteyeux@matteyeux11 Jul 2024
Unstripped SPTM found in the wild👀
9
23
190
37,122
Guillaume Valadon retweeted
MISCmag@MISCRedac28 Jun 2024
Gros plan sur les techniques de contournement des #EDR dans notre nouveau numéro, disponible en kiosque, sur notre boutique (ports offerts) et/ou en lecture en ligne immédiate (Kiosk Online) => boutique.ed-diamond.com/en-k…
20
4
44
7,431
This is the first working PoC of a ~350 LoC pure Python eBPF loader that launches a pre-compiled eBPF program, retrieves per packet process information, and matches them with packets sniffed with Scapy 🤘
2
7
54
6,547
Load more