baddhack

[noraj @noraj_rawsec]

Comme j'en ai marre d'être appelé pour de la publicité et que j'aime bien les RegExp :
https://t.co/TqFQjSnPOr

[𒉭 lildoudou 🇫🇷⚜️ @lildoudou_]

J’assume

Le @BreizhCTF est pour moi le meilleur évent de cyber de France.
Orga au top, animation parfaite, lieu incroyable, CTF intéressant original et bien fait, nourriture divine et ambiance folle.

Merci à tous pour cette journée / nuit ✨

[Arn'Hack @arn_hack]

We're doing better than last year with a good 4th place in the @BreizhCTF ! 🔥🔥

A big thank you to the organizers, and count on us to do even better next year 👀

@Tek_7987
@Thxb35
@xanhacks
@0xThaz
@L0g__s

[Lucas Florian Tesson @PandatiX]

Coucou maman je passe à la télé 🥳

[Bertrand Martin @bertrandmart1]

Je continue ma recherche en full remote (depuis Dakar mais prêt à venir en Europe qques temps si nécessaire). J'ai pas mal de ça ⬇️ dans mes retours 😐 mais je ne désespère pas 🌝 Si vous connaissez des recruteurs/entreprises qui recrutent en cyber en full remote ➡️ DM

[Bertrand Martin @bertrandmart1]

In my job search in Dakar, I don't know what has been more challenging : navigating the local job market where my profile is absolutely not sought after, or the expat job market that is incredibly closed to outsiders. That's why I now only focus on full-remote opportunities.

[GCC-ENSIBS @gcc_ensibs]

… see you in 48H #CTF ….

[Centri @centri_org]

You asked and we answered...

Because of the interest in our merch, we've decided to run a giveaway! We're offering merch bundles to 10 lucky winners (items may vary to those shown).

To enter:

🛡️ Follow us and @CysecCareers
🛡️ Retweet this tweet

Worldwide. Closes Jan 5, 2024

[GCC-ENSIBS @gcc_ensibs]

Congrats everyone for this 100% French podium !! 🇫🇷🥖

We are proudly standing at the 1st place in this @hackthebox_eu CTF in front of over 900 worldwide universities ! 🏴‍☠️🥇

Thanks to everyone,
GG @EsnaBretagne and @ecole2600 ! 🚀

See you next year ! 🔥 @ENSIBS

[xanhacks @xanhacks]

🏆 Thrilled to achieve 1st place with my team @GCC_ENSIBS at the @HackTheBox_eu University CTF 2023, alongside two other French teams, @EsnaBretagne and @Phreaks2600 🔥

⤵️Write-Up about Race Condition, OAuth Misconfiguration, XSS & RCE via HTML2PDF
https://t.co/q8r8CbKy97

[Naacbin @naacbin]

I have made 2 writeups for #ECSC2023 and #DGhAck. For the 2nd one, I used https://t.co/HD4XPjqVQ2

[1] Recovering PDF using DataRun of $LogFile
> https://t.co/jlqgXrv7Im
[2] Decrypt empire C2 communication by extracting private key from memory
> https://t.co/JPFTys7afX

[Rémi GASCOU (Podalirius) @podalirius_]

[thread] Did you know that ssh tries to authenticate with stored keys BEFORE the key specified with -i in the command line ? I just noticed this, the hard way 😐.

Let's imagine you have more than 5 keys loaded in your ssh agent. When authenticating to a remote server, you get:

[GCC-ENSIBS @gcc_ensibs]

GCC est à la finale du @CsawEurope 2023 Embedded Security Challenge - ESC !

J1 - Journée de conférence 🔥📖

@50mgDrahoxx, Rémi, Okan et Théo sont présents sur place pour représenter le club !

[Adrien Linuxtricks  @_adriend_]

Une #carte intéressante a été créée pour résumer les #cyberattaques envers les organismes publics en #France, grâce au fond de carte libre #OpenStreetMap

https://t.co/mm7Co7eEsC

[FIRST.org @FIRSTdotOrg]

The CVSS Special Interest Group is proud to announce the official release of CVSS v4.0 - https://t.co/xxaoQ2iMjF. This latest version of CVSS seeks to provide all users with the highest fidelity vulnerability assessment.

#FIRSTdotOrg #CVSS #BuildingTrust #PSIRT #CSIRT

[noraj @noraj_rawsec]

haiti v2.0.0 is out!

🍾 Reached 600+ (632) hash types supported
📈 113 new hash types
☀️ New list command to list all supported hash types
☑️ Many enhancements (add JtR or HC ref/id, better description, fixes) and better detection

https://t.co/mfdm7AwtUU

[CERT Orange Cyberdefense @CERTCyberdef]

New critical vulnerability #CVE-2023-20198 affecting Cisco IOS XE devices when Web UI is enabled.
⚠ CVSS: 10
❌ Fixes : not available

Related to the attack:
5.149.249[.]74
154.53.56[.]231

Cisco provided some way to check if the system might be compromised 1/2

[Naacbin @naacbin]

Inspired by @ACEResponder works on Sliver C2, I create a tool to decrypt Covenant communications : https://t.co/hKXgVsregt

[Maëlle @maelle_le_bon]

Bonjour à toute la commu cybersécu👋. J'essaie de récolter un max d'infos sur l'envie de chacun pendant les compétitions Capture The Flag. https://t.co/HTQ4H6c5rD

Les résultats seront partagés dans quelques semaines.
Merci d'avance pour vos RT🙏

#ctf #infosec #CyberSecurity

[Emile Marié @emile_marie_9]

Here is my retex on the OSCP 2023 https://t.co/u52qAUBe6R