Xavier C.

Security FaNbOy // Drum addict

[Root-Me @rootme_org]

🚀 [NEWS from our SPONSORS] New course at OTERIA!
🎓 Dive into vulnerability research with the 0x41 course by our Expert Sponsor @OteriaCS

Designed by @RandoriSec , @Synacktiv & solo experts : @TheLaluka , @Calin_42 , @ENOENT_, #Unknow101 & #HuGe.

On the program: Reverse engineering, Fuzzing, Cryptography, Binary exploitation

📅 Pre-selection: 25 Feb - 7 Mar on Root-Me PRO
Register now!: https://t.co/95yIsvbeHy

Join the Discord: https://t.co/9hT2ctMouo

[Xavier C. @Calin_42]

@olesovhcom Nice work on that :)
Thank you
and thanks @olesovhcom for the eco range (and the price 😂)

[ANSSI @ANSSI_FR]

#ECSC2024 | Accompagnée des coachs de l'ANSSI, la @ECSC_TeamFrance 🇫🇷 est arrivée à Turin, prête à affronter les épreuves de l'European Cybersecurity Challenge.

💪 N'hésitez pas à les encourager en commentaire !

[Xavier C. @Calin_42]

@0xidel @noujoude1337 Causes :

- Réflexions beaufs quotidiennes
- Une culture de l'ego bien connue qui stigmatise leur parcours pro
- Peu/pas de points de contact en cas de harcèlement
- Peu/pas de sensibilisation
- Le besoin de toujours "prouver" qu'elles méritent leur place

je continue? @0xidel 😊

[Xavier C. @Calin_42]

@lxt33r @Sonia_perso @noujoude1337 @ANSSI_FR @ECSC_TeamFrance @ecsc2024 Cringe un peu non ? @lxt33r

[Marc R @Seifreed]

.@kaspersky's Q2 2024 report unpacks #APT and financial attacks on industrial enterprises, revealing how certain groups are compromising critical infrastructure.

Stay informed on the latest trends—an essential read for industry professionals ⇒ https://t.co/1Jd0AMam9o

[gmh5225.eth @gmhzxy]

Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures
https://t.co/bpGx0Q10eD

[Xavier C. @Calin_42]

@Luzark_ @0x09AL

[Synacktiv @Synacktiv]

In their latest blogpost, @hugow_vincent and @loadlow developed in-memory post-exploitation payloads to inject and hook common Java applications. Come and see the Java shenanigans involved to interact with the apps from the inside!
https://t.co/uqbXWwS5sk

[Xavier C. @Calin_42]

@podalirius_ Putain je suis terminé 😂😂

[IAM!ERICA @EricaZelic]

Never too soon

[Xavier C. @Calin_42]

@hasherezade 👀 😍

[Xavier C. @Calin_42]

@H_Miser Always a pleasure to re-read this amazing write-up :)
Thanks for the refresh

[Xavier C. @Calin_42]

@pac0um_Sec ◡̈

[Synacktiv @Synacktiv]

Interested in finding and exploiting vulnerabilities in old video games? If so, you'll love our latest blogpost on American Conquest by @tomtombinary!
https://t.co/KpUXLyJtk1

[Laluka@OffenSkill @TheLaluka]

~ Message d'utilité publique ~
🌺 Lettre ouverte au pollen 🏵️

Nique bien tes grands morts, Cordialement.

🖕

[Synacktiv @Synacktiv]

In his latest blogpost, @yaumn_ analyzes MDI's detection of PKINIT authentication, explains how to bypass it and releases Invoke-RunAsWithCert, a tool to perform Kerberos authentication via PKINIT with the Windows API from a non domain-joined machine.
https://t.co/RVxH47USMD

[Dirk-jan @_dirkjan]

New blog: Lateral movement and on-prem NT hash dumping with Microsoft Entra Temporary Access Passes.
Some tips and tricks on abusing TAPs for Windows Hello persistence and NT hash recovery over Cloud Kerberos Trust. https://t.co/h3XHjBhwtz

[Synacktiv @Synacktiv]

In our latest blogpost, @croco_byte presents an often overlooked AD attack surface related to OUs ACLs,with the release of a dedicated exploitation tool, https://t.co/RRSBNZXXWA (https://t.co/NVy2xuP2yX).
https://t.co/6sPEjza33b

[Xavier C. @Calin_42]

@kalin0x Quel est le nom de la potion magique ? :p