@sijsu

computers are an insecure mess Computer Science student @matfyz, used to CTF with @WreckTheLine @CzechCyberTeam

 Prague, Czech Republic
sijisu.eu
Joined December 2016
  • Tweets659
  • Following854
  • Followers212
2Media
Update your MikroTik RouterOS again, to at least 7.24.3 Just published a blog on how you could turn the Webfig "file-read" CVE-2026-67281 (already published by @CERT_Polska_en) into a delayed RCE and on *two other RCEs* in DHCP relay and Webfig. More: sijisu.eu/posts/3-mikrotik-p…

Finding 3 MikroTik pre-auth RCEs - Sijisu

This is the story of GPT 5.6 Sol, DeepSeek v4 Flash 0731, and me finding three pre-authentication RCEs in MikroTik …

sijisu.eu
1
9
300
Sijisu retweeted
FeDEX
@FetchDEX10 Dec 2023
Cyber Mimic Defense CTF was so much fun. From car hacking and AI hacking all the way to the Great Wall.
2
7
2
57
8,756
Awesome event! Thank you
HackingForSoju@HackingForSoju20 Aug 2023
24hrs, 213 flags, and 800 bottles of Red Bull later (plus some Soju)... Congrats to @WreckTheLine, @TokyoWesterns and @dicegangctf for their wins at @MidnightSunCTF ⛳️ Winners take home #BinaryNinja licenses sponsored by @Vector35 and @CorelliumHQ licenses and other prizes 🏆
1
11
948
The #CTF was a blast 💥 Thank you all for joining and huge kudos to the teams that captured the most flags and reached the top of the leaderboard! #HackTheBox #DEFCON #Hacking #CaptureTheFlag @ProjectSEKAIctf @adragos_ @sijsu
1
6
1
84
12,741
We Wrecked The Line from the wrong side 😰 Cheers to our allies @PwnThyBytes @0tolerance_ctf
1
2
28
4,999
Tenhle týden se vůbec na podobných twitterových účtech urodila Spousta Dobrých Rad™️. V odpovědích na tohle vlákno xitter.cf/sijsu/status/164015773… jedna organizace obhajuje (mj. stylem "ale správci hesel mají taky zranitelnosti") jakýsi systém karet, že se prý tak dá vytvořit silné heslo
1
2
7
1,532
How real programmers assign to variables: >>> def asgn(x,y): f = open("/proc/self/mem", 'wb');f.seek(id(x)+24);f.write(struct.pack("<Q", y));f.flush() ... >>> var = 13 >>> asgn(var, 42) >>> print(var) 42
7
I wrote a two-part series on fuzzing and exploiting the Trackmania Nations Forever server. Part 1 covers the snapshot + grammar fuzzer, part 2 focuses on the exploitation. blog.bricked.tech/posts/tmnf… Enjoy 🥳!
4
93
4
393
Here are the official #BGGP3 entries and scores! Thank you to everyone that took part in this, see you next year! github.com/netspooky/BGGP/tr…
The BGGP3 flyer

ALT The BGGP3 flyer

A screenshot of the stats section of the linked repo on github

ALT A screenshot of the stats section of the linked repo on github

1
33
8
87
"with far too many staff (about half of Twitter's 10,000 employees, and growing) given access to sensitive live production systems and user data in order to do their jobs" documentcloud.org/documents/…
2
This will level up your next AD CTF experience! Tulip - flow analyzer used by #TeamEurope on ICC 2022 - is now open source! Awesome work by @rdjgr and @Bazumo
Rick de Jager@rdjgr23 Jul 2022
The flow analyzer myself and @Bazumo wrote for ICC 2022 is now finally public! It comes out of the box with fancy Attack/Defence features, like Suricata integration, traffic tagging, automatic exploit generation, and more! github.com/OpenAttackDefense… #icc_games

GitHub - OpenAttackDefenseTools/tulip: Network analysis tool for Attack Defence CTF

Network analysis tool for Attack Defence CTF. Contribute to OpenAttackDefenseTools/tulip development by creating an account on GitHub.

github.com
1
Sijisu retweeted
ENISA
@enisa_eu17 Jun 2022
#ICC_games 2022: 7 teams, 65 countries, 6 continents, 1 winner! We are excited to introduce the winners of the 1st International Cybersecurity Challenge... 🏆 Team Europe 🇪🇺 Congratulations to all!
5
48
13
159
Fingers crossed for the ceremony tommorow🤞
ENISA
@enisa_eu16 Jun 2022
The 1st International Cybersecurity Challenge is over! The teams celebrate their participation while waiting to learn the winners during the award ceremony tomorrow at 17.30 EEST. Join us tomorrow to crown the champions! #ICC_games
3
Sijisu retweeted
Ed@EdOverflow27 Apr 2022
After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: rfc-editor.org/rfc/rfc9116. I would like to use this opportunity to thank those who made this possible. Thank you. ❤️
The security.txt specification has been published as RFC 9116

ALT The security.txt specification has been published as RFC 9116

43
938
107
2,707
We know the winners of #ECSC2021. 🎉 🥇Team GERMANY 🇩🇪 🥈Team POLAND 🇵🇱 🥉Team ITALY 🇮🇹 Congratulations to the winners and thanks to all national teams for participating.👏 – at Prague, Czech Republic
5
22
3
167
I like writing C code because of the expressive syntax, strong type system, and safety AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
This Post is from an account that no longer exists. Learn more
1
5
HTTP/2: The Sequel is Always Worse by @albinowax portswigger.net/research/htt…

HTTP/2: The Sequel is Always Worse

In this research paper James Kettle introduces multiple new classes of HTTP/2-exclusive attacks, demonstrated on popular websites and servers.

portswigger.net
12
473
31
994
well played signal signal.org/blog/cellebrite-v…
2
46
11
161
BREAKING. Czechia expels 18 (!) diplomats after discovering that GRU's unit 29155 - same guys we proved were behind the Skripal and Gebrev poisonings - were behind the explosions at Czech ammunition factories in 2014.
125
3,197
445
9,851
Can get your coders to free my last name from icloud jail? Been locked out for 6+ months because of an uncapitalized t in TRUE, my surname but also a computer command. Now that I a layman have explained problem to you a giant computer company, could u fix? @apple @AppleSupport
Rachel True
@RachelTrue27 Feb 2021
Anyone else getting this error from Apple iCloud ? In past or now? I’m 6 months deep freeze & looking for any help. I rem dead coding languages like kobalt.. & this seems like an Apple coding issue — not hardware
51
542
209
1,562
Load more