@saarsec

We are the saarsec CTF team. Schwenk and pwn. @CISPA @Saar_Uni

 Saarbrücken, Germany
saarsec.rocks
Joined June 2016
  • Tweets143
  • Following30
  • Followers813
69Media
👀infosec.exchange/@saarsec

saarsec (@[email protected])

71 Posts, 9 Following, 71 Followers · We are the saarsec CTF team. Schwenk and pwn. @CISPA @Saar_Uni

infosec.exchange
468
Final Scores and full information (so far) about the #saarCTF 2024 abrupt ending and Denial of Service: infosec.exchange/@saarsec/11…

saarsec (@[email protected])

Attached: 1 image Dear Participants, thank you for making #saarCTF 2024 a fun and exciting time. We hope that despite the unfortunate last hour, everyone was having a good time overall. About that...

infosec.exchange
285
#saarCTF 2024 Network is now open! Good hacking everyone! Our infra team is set and ready :)))
1
300
Due to unforeseen delays, all timings for the #saarCTF 2024 are postponed by 15 minutes. Network opens at 14:15 UTC, Network closes at 22:15 UTC
219
#saarCTF 2024 Vulnbox Decrypt Key: iChjpjxvjzd98gyC
194
Calling all teams from the DACH region (Germany, Austria, Switzerland): #saarCTF 2024 is a DHM Qualifier! The highest ranking eligible DACH team in our CTF will qualify to compete. For more information visit ctf.saarland/
1
1
283
Remember to look at our pinned account to see the accompanying meme
223
With almost *an entire week* left to spare, the registration for saarCTF 2024 is now open! ctf.saarland/ Remember the IRC and don't forget to check our new pinned account for all future announcements👀
207
#saarCTF
1
153
Attacking UNIX Systems via CUPS, Part I evilsocket.net/2024/09/26/At…

Attacking UNIX Systems via CUPS, Part I | evilsocket

Hello friends, this is the first of two, possibly three (if and when I have time to finish the Windows research) writeups. We will start with targeting GNU/Lin…

evilsocket.net
168
1,108
291
3,581
1,061,280
The bad news is there is a vulnerability in the CUPS printer system on Linux. The good news is nobody has ever gotten their printer working on Linux so they are safe.
cts🌸
@gf_25626 Sep 2024
The entire disclosure seems to have been leaked online gist.github.com/stong/c8847e… Here is the report and POC

CUPS disclosure leaked online. Not my report. The original author is @evilsocket

CUPS disclosure leaked online. Not my report. The original author is @evilsocket - cups-browsed.md

gist.github.com
88
646
69
6,167
347,081
👀evilsocket.net/2024/09/26/At…
2
153
The *coolest* saarsec summer party ever!
1
9
450
Another conference, another set of @CISPA faculty cards. Find us at @USENIXSecurity in Philadelphia, learn quirky "facts" about us (hint: we are not all just about serious science all the time), and be invited to our networking event on August 14 if you can collect five.
1
2
1
26
12,845
This is your reminder that we still solicit (self-)nominations for the 2025 EuroS&P PC. If you have published at top security, privacy, or crypto venues before, nominate yourself. If you know others who'd fit, nominate them. Nominations will be considered until end of July.
IEEE European Symposium on Security and Privacy@IEEEEUROSP22 May 2024
Next year's 10th EuroS&P is looking for new PC members! If you want to nominate yourself, please fill in the Google form: forms.gle/QVroyfqwxkRwWQqF8

Nomination PC Euro S&P 2025

You can use this form to nominate someone (e.g., yourself) for the 2025 PC. If you nominate yourself, please note that we expect PC members to participate actively. A timeline will follow later, but...

docs.google.com
17
22
5,322
Shoshana Weissmann, Sloth Committee Chair 🦥
@senatorshoshana26 Jun 2024
WHO FUCKING TOLD YOU I TOLD YOU WHEN DID I TELL YOU A LONG TIME AGO Big Tech’s ID Verifier Hacked
171
📣Official statement: the new EU chat controls proposal for mass scanning is the same old surveillance with new branding. Whether you call it a backdoor, a front door, or “upload moderation” it undermines encryption & creates significant vulnerabilities signal.org/blog/pdfs/upload-…
193
3,649
521
7,747
2,033,647
Blacklisting a string is the best security measure. Works especially well for potentially malicious user input! Follow for more security tips and tricks 💻
Dan Luu@danluu11 Jun 2024
State of the art anti-cheat techniques: Roblox detects if you have the string "x86dbg" in a window title (or window?), so kids are changing their display names and discord server names to x86dbg to get people kicked from Roblox.
The program I’ve opened before this issue started was discord, where my friend named himself “x64dbg”, triggering the kick every time someone had thier DMs open. Even thought it kept after that, the only program that could’ve left it’s drivers running would be Cheat Engine, which I haven’t launched that windows session.

ALT The program I’ve opened before this issue started was discord, where my friend named himself “x64dbg”, triggering the kick every time someone had thier DMs open. Even thought it kept after that, the only program that could’ve left it’s drivers running would be Cheat Engine, which I haven’t launched that windows session.

This was confirmed by Bitdancer to be by design I believe: https://devforum.roblox.com/t/serious-issue-discord-servers-are-able-to-prevent-you-from-playing-roblox/2971604/31?u=ashi_division

ALT This was confirmed by Bitdancer to be by design I believe: https://devforum.roblox.com/t/serious-issue-discord-servers-are-able-to-prevent-you-from-playing-roblox/2971604/31?u=ashi_division

1
257
Today we are beating @0rganizers at their own game: 🧀🧀🧀🧀⛰️⛰️
11
369
Services are online now at github.com/saarsec/saarctf-2… including sample exploits! #saarctf

GitHub - saarsec/saarctf-2023: Services, Checkers and Exploits from saarCTF 2023. https://ctf.saa...

Services, Checkers and Exploits from saarCTF 2023. https://ctf.saarland - saarsec/saarctf-2023

github.com
4
297
Load more