thbz

pentest, selfhosting

[thbz @thbz__]

I finally wrote down what I know about self-hosting things on a VPS :)
On the menu: Docker Compose, Traefik, Bitwarden and Nextcloud
There are never too many docker-compose.yml files on the Internet, right?
https://t.co/uFyGoipB98

[ACCEIS @acceis]

On ne va quand même pas tout révéler d’un coup😉 Stay tuned 🎧 Save the date : 27/05 à Rennes. #accessgranted

[Mathis Hammel @MathisHammel]

J'ai besoin de votre aide pour m'aider à entraîner l'équipe de France de cybersécurité !

Quelques détails ci-dessous, merci de partager au maximum 🙏

[ACCEIS @acceis]

Ffuf faster u fool !

@noraj_rawsec vous partage quelques tips utiles pour booster votre fuzzing web avec Ffuf 💪
https://t.co/rjqMOKgfA5

cc Joona Hoikkala (@joohoi) #enum #recon #bruteforce #hacking #pentest

[thbz @thbz__]

@swuitch 👁️

[John Hammond @_JohnHammond]

aaaaand then code execution?? #log4j #minecraft

[ESET Research @ESETresearch]

#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5

[Rémi GASCOU (Podalirius) @podalirius_]

I'm proud to present a new tool, #LDAPmonitor! With this you can monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! Lots of authentication types are supported, and output can be saved to a file.

https://t.co/XJf5QKTLQy

[Tomtombinary @tomtombinary]

Quick exploitation of Age Of Empire II Gold Edition : https://t.co/X3TwHQC88r

[OWASP Top10 @OWASPTop10]

The @OWASP Top 10 team is extremely proud to share the draft OWASP Top 10 2021 for peer review, comment, translation, and suggestions for improvements. We are working on a graphic redesign and a surprise extra for the 20th Anniversary on September 24!

https://t.co/APAGyAEsR6

[vx-underground @vxunderground]

One of the developers for Babuk ransomware group, a 17 year old person from Russia, has been diagnosed with Stage-4 Lung Cancer. He has decided to leaked the ENTIRE Babuk source code for Windows, ESXI, NAS.

You can download the Babuk source here: vx-underground[.]org/tmp/

[you forgot my bacon @i_miss_my_bacon]

Damn my bacon 😯

[Nat Friedman @natfriedman]

Oh, almost forgot to mention. New pro tip: Hit '.' on any GitHub repo. 😍

[Gilbert Gilb's @gilbsgilbs]

Après plusieurs mois d'attente injustifiée, @IN_Groupe a enfin répondu à la demande de la CNIL de publier le code source de TousAntiCovid Verif : https://t.co/WeJJOMDvEv et https://t.co/urCt06mncq . Encore une fois, ils jouent la carte de la comédie sécuritaire burlesque…

[thbz @thbz__]

@swuitch @EuCyberCup @ENSIBS @_magnussen_ can't wait yo 😎

[switch @swuitch]

Few FCSC write-up right here, have a nice sunday

https://t.co/R8LCTCwKnH
https://t.co/i2EpsEG8L6
https://t.co/29nexhqaqs
https://t.co/NAFrdKDkP3

[Synacktiv @Synacktiv]

Lazy to write payloads in @Burp_Suite? HopLa adds autocompletion support and a custom payload library! 🤠 https://t.co/XMGTC35PNQ
cc @alexisdanizan

[Florian Picca @ENOENT_]

I made write ups for all the crypto challenges of FCSC 2021 organized by ANSSI. They were really interesting and challenging. https://t.co/nfppvdQkPM

[Mathis Hammel @MathisHammel]

Suite à la victoire de mon équipe au @HeroCTF le weekend dernier, je préfère que mon voucher VIP HackTheBox serve à quelqu'un qui s'en servira vraiment donc je vous le fais gagner😀

POUR PARTICIPER :
▶️ Follow @MathisHammel (c moi)
▶️ Fav + RT ce tweet

Tirage au sort 7/05 !