dolgepesto

pentester

[Tim Schuerewegen @timschuerewegen]

The Nintendo Talking Flower firmware does not check the size of the language index table when loading it from SPI flash into RAM, allowing me to corrupt the stack, execute arbitrary code, and dump the protected STM32 firmware🤣
(SHA1 51ec2ee3bbc12772cd4abed1bf2d26b02e541e14)

[Hack'n Speak @hacknspeak]

🎙️🇫🇷 Nouvel épisode du podcast Hack'n Speak accompagné du seul et unique roi @sar5430 👑

Nous abordons le métier du reverse "défensif" ainsi que de la création de https://t.co/B6psyeTCsr ! 🔥

Bonne écoute à toutes et à tous 🎶

https://t.co/dhhgptQsED

[ElcomSoft @ElcomSoft]

Understanding BitLocker TPM Protection:
https://t.co/ejXXBc0NWh
#dfir #cybersecurity

[dolgepesto @Dolvro]

@kiwicom247 ?

[dolgepesto @Dolvro]

@kiwicom247 It’s been more than 6 months since I asked the refund of my flight from Paris to Rabat and I haven’t received any news yet. Can someone check the status please Thanks.

[Sam Curry @samwcyo]

New writeup:

"We Hacked Apple for 3 Months: Here’s What We Found"

Featuring...
@bbuerhaus, @NahamSec, @erbbysam, and @_StaticFlow_

https://t.co/XE757tadE9

[The Hacker News @TheHackersNews]

This is interesting...

Even a guest account on Windows can brute-force to crack password for any local account, including the administrator, through LogonUserW API because it offers unrestricted login attempts.

Here's a PoC tool created by @DarkCoderSc:

https://t.co/E7y1la0jk1

[SysDream @sysdream]

IoT: Pentest of a Connected Camera https://t.co/yql131rX1t
#LAB

[SysDream @sysdream]

Even expensive alarm systems may not be secure! Our analysis of a certified one (NF&A2P**: French certification, level 2/3):

https://t.co/KOPGnaK7KK

#infosec #pentest #IoTSecurity

[dolgepesto @Dolvro]

Barbie's IoT Mansion burglary
#HIP19 #BeReady #Sysdream

[Hack In Paris @hackinparis]

Teaser of #HIP19 workshop : BREAK INTO A DIGITALLY PROTECTED HOUSE by @sysdream team
https://t.co/YyYHaHr6JT

[dolgepesto @Dolvro]

@QuokkaLight @stan1slas @ANSSI_FR @FFF Ramènes la coupe à la maison

[SysDream @sysdream]

Dans lequel vous trouverez une publication de notre Lab, p20, IoT corner : "Hacking IoT : Test d'intrusion d'une caméra connectée". Écrit par @my3ker. #pentest #infosec #IoT

[SysDream @sysdream]

Chashell, our Go reverse shell, cross-platform and communicating over DNS.
#pentest #infosec #redteam

https://t.co/tsL32Tlkdu

[SysDream @sysdream]

Bien que le metier de pentesteur n'existe pas (cc @bloginfo), nous recrutons des consultants (en pentest !) seniors : [email protected]. ;-)
#infosec #pentest

[Emad Shanab - أبو عبد الله @Alra3ees]

nmap Cheat Sheet.

[Michael @MikeTolmie]

This is why I use an RFID blocking wallet. #Security #Awareness #RFID

[Mother Of Sarcasm @SarcasmMother]

Its sad that April 1st is the only day of the year where people actually question validity of the news they read.

[xMagass @xMagass]

Jamais vu autant de troll dans un seul Chall #ndhquals https://t.co/KWanO2DYP4

[BleepingComputer @BleepinComputer]

New Site Resurrects CrackMe Challenges From the Old https://t.co/iv3mvFUJgx - by @LawrenceAbrams
https://t.co/T3GytjeynY

[stanislas @sar5430]

I've just finished to import all crackmes from https://t.co/5OgQeQwqbN on https://t.co/D4bYntrzOl
It means that almost 3000 crackmes are available :)
You can find thoses under the user "https://t.co/5OgQeQwqbN". I'll import solutions soon !