Florian Picca

Cryptography lover. Member of @AperiKube

[Florian Picca @ENOENT_]

A friend and I released our first open-source tool on our company's GitHub. If you're auditing #Android apps, give it a try !

[Stackered @StackeredSAS]

Nous rendons aujourd’hui disponible Amande, un outil d'analyse d'APK et Manifest pour #Android.

https://t.co/ffwWyaR9kw.

[Florian Picca @ENOENT_]

@maki_mitz @pry0cc the RS -> HS algorithm switching would just allow you to forge a new token (if vulnerable), but not to get the private key

[Florian Picca @ENOENT_]

@sasaga92 @Synacktiv yes

[Aperi'Kube @AperiKube]

@PhackCTF Meilleurs lots de CTF ever 🐰 Merci encore au @PhackCTF !

[Florian Picca @ENOENT_]

I made write ups for all the crypto challenges of FCSC 2021 organized by ANSSI. They were really interesting and challenging. https://t.co/nfppvdQkPM

[CryptoHack @CryptoHack__]

Sharing a partially redacted PEM online is the same as sharing the PEM.

In this blog post, we show that with partial exposure of a PEM, private data can be extracted to recover the full private key.

https://t.co/ExvAGluxke

[Florian Picca @ENOENT_]

@_SaxX_ Recovery the full private key based on the infos you just leaked looks a lot like a CTF challenge and might be doable (cc @CryptoHack__ )

[Florian Picca @ENOENT_]

I've written a tool to recover the RSA/ECDSA public key used to sign JWT tokens, because most of the time you don't have access to it. https://t.co/J8u5vjbnEN

[CryptoHack @CryptoHack__]

Our first Twitter vulnerable code mini-puzzle. What's the problem with this code? #crypto #cryptography #puzzle

[ANSSI @ANSSI_FR]

ENOENT (Florian Picca) est adepte de #crypto et passionné par la résolution de #CTF
« C’est un domaine qui me passionne et pour lequel je donne tout » #FCSC2020 En savoir + sur @ENOENT_
🗨️ https://t.co/gr2wWzcRyt

[Florian Picca @ENOENT_]

@G4N4P4T1 @enoent Nice !

[Maki @maki_mitz]

Les #writeups de Forensics pour le #ctf #FCSC2020 organisé par @ANSSI_FR sont dispo sur mon blog : https://t.co/PbA8L6UDab

Normalement, c'est assez complet! Have fun!

Encore merci à l'orga pour les challenges et à @_nwodtuhs pour la relecture 😘
#LesPresquesTutoDeNico

[Areizen @Areizen_]

Petit writeup d'un chall d'exfiltration de contenu de PDF chiffré à l'occasion du #FCSC2020
https://t.co/EK6Vb5JcEK

[Laluka@OffenSkill @TheLaluka]

New article !
How share a shell with your friends to troubleshoot stuff when EVERYTHING ELSE FAILS, a tail of tmux, socat, ssh tunnels, tmate, gotty, ngrok and more ! \o/
https://t.co/Ud9UtVW35E

[Florian Picca @ENOENT_]

New blog post about the ROCA vulnerability ! You'll also find my own multiprocess attack in Sage as a bonus :)
#crypto #ctf
https://t.co/huDw1LfaQo

[Haax @Haax9_]

Almost one year ago, I started to put together things I know, things I read and things I learn, on a same place. Some days ago, I decided to refactor and reorganize the whole content. And today, I release it ! Here is a global #Infosec cheatsheet : https://t.co/8m64htgr6J [1/2]

[Florian Picca @ENOENT_]

@CryptoHack__ Lo-Hi Card Game. It felt more like exploiting a vulnerable application than just exploiting the underlying issue

[CryptoHack @CryptoHack__]

Users can now upload challenge solutions to CryptoHack.

Solutions are unlocked after you submit the flag and you will gain access to all user's solutions.

We hope this helps the community learn together.

Excited to read your write-ups!

https://t.co/2rqaCKEmA5

[StormXploit @StormXploit]

Hello guys! Today, I'd like to promote a new crypto platform which is very fun! This platform is https://t.co/pBPCYd78Mj by @CryptoHack__ . There are many categories like block ciphers, elliptic curves so you can learn a lot! I have to admit that is kinda addictive. Enjoy 😁