onosh retweeted
Every JWT writeup online covers 2–3 attacks and stops.
I got tired of jumping between 40 blog posts, so I wrote the whole thing. All in one place.
rmrf.tips/en
#infosec #appsec #bugbounty #websec #jwt
Just got a reward for a critical vulnerability submitted on @yeswehack -- Improper Access Control - Generic (CWE-284). #YesWeRHackers
onosh retweeted
Got my first CVE (CVE-2024-41908) during my Master's project on fuzzing. The affected product, Siemens NX, has an out-of-bounds read vulnerability (CVSS 7.8).
Given the complexity and the size of the app, it was my biggest challenge so far.
Details here : cert-portal.siemens.com/prod…
onosh retweeted
🟠⚫ Une belle édition @_leHACK_ cette année.
Merci it-gnosis.eu pour l'invitation 😇
On vous partage au passage le Writeup du challenge sur le serveur d'imagerie médicale de @onosh__ (une RCE sur Orthanc) 🔥
book.onosh.ovh/ctf/lehack-20…
onosh retweeted
#Fortinet patched #CVE-2023-27997, a critical vulnerability affecting its VPN #Fortigate. Our latest blogpost describes the technical details about the bug, a pre-auth heap overflow, with a twist. #xortigate
blog.lexfo.fr/xortigate-cve-…
onosh retweeted
👉 Depuis plus de 4 heures notre équipe "SIBer" s'est lancée dans la plus grande compétition de #HackingEthique de France 👾, encore 7 heures pour "capturer le maximum de drapeaux" 🏴☠️ !
#BreizhCTF2k23 #cybersecurité #sibersecurité #siberarbennigour
onosh retweeted
We are happy to announce the publication of the new version of the IRMs (Incident Response Methodologies) resulting from the work of @CertSG with the collaboration of CERT @advens. Feel free to use it! github.com/certsocietegenera…
#IncidentResponse #CyberSecurity #DFIR
onosh retweeted
Premier podium pour la #TeamDLS au CTF de l'@EUCyberWeek !
Nos deux étudiants Thomas Lebrun et Tristan Bizien se positionnent en🥈 en collaboration avec @IMTAtlantique.
@onosh__ prend la 5ème place avec son équipe pro.
Félicitations à l'@EsnaBretagne pour la🥇.
onosh retweeted
Giveaway time! To celebrate 80k followers!
We are going to give a 1-month voucher to **80** people who RT this tweet (picked randomly)!
We are going to send our socks, t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet (picked randomly)!!
onosh retweeted
Time for another giveaway!
We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!!
And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!
onosh retweeted
[Equipe 3]
L’équipe DLS du @LyceedeLaSalle est la seconde équipe étudiante à participer à l’European Cyber Cup.
Les épreuves d’OSINT et de Forensic n’ont plus de secret pour les joueurs qui sont prêts à tout donner.
“Hear us (r)hooting”
onosh retweeted
[#EuroCyberWeek] And the winners of the #CTF are:
🥇France / @ENSIBS
🥈South Africa / @centralesupelec & @IMTLilleDouai
🥉Italy / @TelecomSudParis
Congratulations to the three winners and well done to all participants! 👏
onosh retweeted
Write-up for Blunder, easy Linux machine, on @hackthebox_eu !
Find file with username, create custom wordlist with Cewl, exploit bf on Bludit, exploit CVE to get a webshell, find credz in php file, exploit sudo -u#-1 to get root
funcmylife.fr/write-up/htb/b…
onosh retweeted
Write-up for Cache, medium Linux machine, on @hackthebox_eu!
Find HMS subdomain, exploit SQLi to find admin creds, exploit file upload to get a reverse shell, password reuse, retrieve password stored in memcached, exploit Docker to get root
funcmylife.fr/write-up/htb/c…
onosh retweeted
Write-up for Remote (Easy Windows) on @hackthebox_eu!
Find NFS share with credentials to log in on Umbraco (CMS); Exploit RCE on CMS; Find Team Viewer credentials and connect with WinRM
funcmylife.fr/write-up/htb/r…
onosh retweeted
Félicitations à tous les participants. Merci encore aux sponsors qui nous on fait confiance et qui nous on permit de réaliser ce projet.
Bravo à @SaladTomat0nion Junior pour la première place ! A PolyHack pour la seconde place et à H4ck0liques pour la troisième place !
A bientôt
onosh retweeted
Bonjour a tous ! Après cette petite absence je reviens avec un article simple mais efficace ! Je partage aussi le code qui a servi a réaliser cet article , dispo sur mon github ! RT appréciés
inf0sec.fr/article-18.php
onosh retweeted
curl -s http://artscene.textfiles\.com/vt100/globe.vt | pv -L9600 -q # Spinning ASCII art globe. Visit the parent directory in that URL for more animations.
onosh retweeted
Pour célébrer notre premier anniversaire, nous organisons un tirage au sort !
Pour participer au tirage des 3 Raspberry Pi :
➡️ FOLLOW @h25io
➡️ RETWEET
Les kits de crochetage sont à gagner sur discord.h25.io dans le channel annonces🙂
TAS pendant le stream du 20/08 !
onosh retweeted
I've created a small python script to automatize the creation of Hack The Box write-ups for my team funcMyLife. It scrapes the box page and create a new Hugo content page.
Feel free to use and modify it!
gitlab.com/magnussen7/wu-mak…