Nicolas THIBAUT

Founder at @uppersafe Independent security researcher and pwner at @HexpressoCTF

[The Hacker News @TheHackersNews]

⚠️ WARNING!

A new critical 17-years-old RCE #vulnerability (CVE-2020-8597) affecting 'Point-to-Point Protocol (PPP) daemon' opens nearly all popular #Linux based operating systems and many other embedded devices to remote hackers.

Details ➤ https://t.co/mqWDv3ayKQ

#infosec

[Nicolas Krassas @Dinosn]

Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password https://t.co/rlI33Uuj2C

[chaignc - Sanson @chaignc]

Sunday:
9:00am I was on my train and @sakiirsecurity told me to CTF @SecuriNets
9:10am got root on their server and got all flags :)
4 tips for next year:
* apt upgrade
* containerize or virtualize
* dont give ssh to players
* Keep it up, it was a very good CTF! cc @DefConUA

[Ange @angealbertini]

I made a script to instantly make an MD5 multi-collision of any quartet of executable, image, video and document.
https://t.co/xC4xyif0yF
a pileup of PE/PNG/MP4/PDF.

[The Hacker News @TheHackersNews]

New Systemd Security Flaws Affect Most #Linux Distributions — Patches are on the Way!

https://t.co/TqGq2h8TZ4

CVE-2018-16864 (privilege escalation)
CVE-2018-16865 (privilege escalation)
CVE-2018-16866 (Information leak)

[The Hacker News @TheHackersNews]

Critical #SQLite flaw leaves millions of apps vulnerable to hackers

https://t.co/NPds9Ri5P5

The flaw could even allow remote attackers to target users of affected #Chromium-based browsers just by convincing them into visiting a specially crafted webpage.

[LiveOverflow 🔴 @LiveOverflow]

A casual Vlog about my experience at the @RealWorldCTF in China

https://t.co/bMEKW1BFp8

[Securelist @Securelist]

2018 in a nutshell:

> 1.9 billion online attacks detected
> 11 new malware families discovered
> 830,135 online banking attack attempts
> 55% increase in MS Office attacks
> Plus much more...

Get the full picture: https://t.co/APXsAKWIyR

[LiveOverflow 🔴 @LiveOverflow]

HAHAHHAHAHA I didn't notice that #LCBC fell from the chair during the event (at 2:25). #RealWorldCTF uploaded a clip montage with a song that played constantly during the CTF - so watch it if you want to get some of the onsite flair :D

https://t.co/qB9vA12Aaa

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

I updated #mimikatz to support Windows 1809, even the kernel driver! (with my expired certificate😬)
Of course, misc::memssp to bypass Credential Guard chain included😚
(but also, crypto, event log, terminal server...and passwords in clear when enabled!)
> https://t.co/Wzb5GAfWfd

[The Hacker News @TheHackersNews]

Quora Gets Hacked – 100 Million Users' Data Stolen, Including Email Addresses and Hashed Passwords.

https://t.co/ZT0KrK6ab0

Change Your Password Now.

[Hexpresso @HexpressoCTF]

This was an AMAZING event. Crazy hard but we learned so much and met a lot of people, the bests in their domain! Thanks @RealWorldCTF cc @BitK_ @chaignc @dev2lead @sakiirsecurity @_SaxX_

[Hexpresso @HexpressoCTF]

Hi folks,
Some news from the #realworldctf2018.
One part of the team @BitK_ @dev2lead @sakiirsecurity just arrived.
The other one @chaignc and @_SaxX_ will arrived from today to tomorrow morning.
Follow us if you wanna leave this new amazing experience 😊

[Maki @maki_mitz]

As promised, here is my personal feedback of the ECSC 2018 ! Hope you enjoy it ;)

https://t.co/jZ3un48qHK

cc @ANSSI_FR @dev2lead @chaignc @Antoxyde @SidewayRE @GnominoBis @ENOENT_ @DrStache_ @XeR_0x2A #ECSC2018 #TeamFrance

[Real World CTF @RealWorldCTF]

#RealWorldCTF2018 We have the eyes that the entire city behind us.Hack the real!Together, we are real world CTFer.🌟DEC 01 09:00 AM ~ DEC 02 17:00 PM, 2018(GMT+8)🌟 See you guys in China for the finals!

[Hexpresso @HexpressoCTF]

Hello World.
After a long time we are here again for some news and what a news !!

Check our latest blogspot and don't hesitate to #RT it :
https://t.co/d8PriPw2m6

#rwctf #ctf #looking4Sponsors

[SaxX ¯\_(ツ)_/¯ @_SaxX_]

Hi folks,

we need you for this one!

https://t.co/NAMvUqaWd7

can you please #RT this post #Hexpresso #CTF #RWCTF

[Hexpresso @HexpressoCTF]

Hey @SopraSteria, vous vous souvenez ? https://t.co/9ClMVx3rMy
C'est le moment de nous aider si vous en avez envie ! 😘

[Kev @kevin_backhouse]

Video of my PoC for CVE-2018-4407. It crashes any macOS High Sierra or iOS 11 device that is on the same WiFi network. No user interaction required.

[BitK @BitK_]

It's alive, ALIVE !
The spooky challenge is now live.
Try your xss skills on :
https://t.co/gG1fg4xE5X
#ctf #xss #spooky 🎃🕷️🕸️