Pentester
France
Joined January 2010
- Tweets445
- Following351
- Followers104
- Likes522
#0day CVE-2024-24919 sur #Checkpoint VPN Quantum avec campgnes d'exploitation actives. 😅😅 Le Hotfix officiel exploite une RCE dans la webUI pour patcher ! 😅😅
Source : support.checkpoint.com/resul…
Over 24k exposed Ivanti Connect Secure gateways identified by Censys. 24.7% (6,000+) show signs of being vulnerable. 🌐 Also uncovered: Deceptive hosts emulating Ivanti Connect Secure across AWS. 🕵️♂️ Read the research here: censys.com/ivanti-connect-in… #ivanti
Je sens que les scores vont exploser sur les applis de #tracking :) En tous cas superbe article sur l'analyse du protocole #bluetooth des Diomyos !
Bluetooth communications reverse engineering (Domyos EL500)
Beginner introduction blog post by @Palantir555
jcjc-dev.com/2023/03/19/reve…
#bluetooth
Coincidence, ou pas. Quand tu vois ce genre de popup quand tu rentres dans le parking en sortant de #hexacon2022 ... tu te poses des questions 😅
Jérôme Francillon retweeted
Let's improve the integration with @pdiscoveryio tools: dnsx is now supported for A & AAAA records, and the "default-logins" nuclei templates are now tagged!
Jérôme Francillon retweeted
Support for httpx (@pdiscoveryio) has just been merged... Another (great) early Xmas present for my users! github.com/ivre/ivre/pull/12…
Jérôme Francillon retweeted
We did it 😃! What a blast to be part of a team able to claim the title of Master of Pwn! Kudos to all other participants and to @thezdi for the flawless organization.
Let’s wait for the patches, then we’ll share the technical details with the community 🤙
Here are the final Master of Pwn standings. Congrats to @Synacktiv on claiming the title. It was a close race, but they pull through.
Jérôme Francillon retweeted
Nice write up on the "underground" market for buying and selling access to companies: ke-la.com/all-access-pass-fi…
Top methods are RDP and VPN access.
Once you read the blog, check out the visualization:
curatedintel.org/2021/10/ini…
#assumedbreach
Jérôme Francillon retweeted
This is even more severe. The RCE is the simplest RCE you can ever imagine. Simply remove the auth header and you are root. remotely. on all machines. Is this really 2021?
Quand même les coffres forts de #password ne nous protègent plus ... il est temps de trouver d'autres solutions d'authentification que le mot de passe ! 😩
1Password Secret Retrieval — Methodology and Implementation : posts.specterops.io/1passwor… credits @djhohnstein
Utilities to extract secrets from 1Password : github.com/djhohnstein/1Pass…
1Password Secret Extraction (Demo) : youtube.com/watch?v=IrnpRSDU…
Jérôme Francillon retweeted
My #ProxyShell details are out! This is a guest post we published at @thezdi's blog, please check it out!😝
blog.orange.tw/2021/08/proxy…
Great writeup ! congratz @hascat team !
Official Team Hashcat write-up of this year's @CrackMeIfYouCan contest at @defcon 2021: github.com/hashcat/team-hash…
Jérôme Francillon retweeted
Network access to Pakistan’s top fed agency FBR sold on Russian forum hackread.com/network-access-…
Jérôme Francillon retweeted
As I didn't see anyone publishing something similar I thought I'd do a quick write up of why #PetitPotam works unauthenticated and in turn how Windows RPC servers are supposed to be secured, or not in Microsoft's case. tiraniddo.dev/2021/08/how-to… h/t to @topotam77
Jérôme Francillon retweeted
Hotcobalt – New Cobalt Strike DoS Vulnerability That Lets You Halt Operations : labs.sentinelone.com/hotcoba… credits @SentinelOne @gal_kristal
Cobalt Strike Hunting — Malleable C2 jQuery profile & rundll32 Analysis : michaelkoczwara.medium.com/c…
Jérôme Francillon retweeted
A New Attack Surface on Microsoft Exchange! The series covers most of my Black Hat USA and DEFCON talks (with slides and video inside). More articles and vulnerabilities are coming soon!
blog.orange.tw/2021/08/proxy…