Zenk-Security retweeted
BRAVO à l'équipe @ZenkSecurity qui a réussi en 1er ( dimanche 2h45 du matin) le challenge crazycrypto3 de l'ARCSI fait pour le wargame/CTF de leHACK ❤️ – at Paris, France
Zenk-Security retweeted
GOAD v2 is out !
You can now test your AD commands and pentest skill on a multi-domain AD lab.
Have fun :)
github.com/Orange-Cyberdefen…
mayfly277.github.io/posts/GO…
Zenk-Security retweeted
🇬🇧 Next DEFCON Paris meetup on NOV-21
🇫🇷 Prochain DEFCON Paris le 21 novembre
- "Not so hidden services" / "Services pas si cachés que ça", Florian & Charles (ANSSI)
- "kdigger", Mahé Tardy (Quarkslab)
Le Carlie, 177 rue Saint Martin, Paris
Reg: framadate.org/Cithceb3oK9Fne…
Congrats @Xylit0l, ahm, @Vixepti, _john_doe and JoeChip . 100M points on @foldingathome stats.foldingathome.org/team…
Zenk-Security retweeted
Samedi 14 nov, les gagnants du #CTF en ligne recevront des lots offerts par @VillageCABrest dont des produits locaux à déguster :)
En mode couvre-feu et/ou confinement ça donne du baume au cœur!
#UYBHYS
::: Les inscriptions sont toujours ouvertes ::: pretix.eu/cantine/UYBHYS20/1…
Zenk-Security retweeted
I have summarized some vulnerability write-ups in Spring Boot environment, and some new tricks will be updated unceasingly here. github.com/pyn3rd/Spring-Boo…
Zenk-Security retweeted
Excited to share my latest research! h2c smuggling: request smuggling via HTTP/2 cleartext. Leveraging TCP tunnels provided by HTTP/1.1 upgrades, we can initiate h2c connections directly with compatible back-end services, bypassing proxy access controls. labs.bishopfox.com/tech-blog…
Zenk-Security retweeted
Web Cache Entanglement: Novel Pathways to Poisoning by @albinowax #BHUSA
portswigger.net/research/web…
Zenk-Security retweeted
We just released a giant update for InQL, bringing it to 2.0.0! It’s now out on the @BApp_Store Store. This release comes with a new standalone UI, Burp GraphiQL integration, a new editor with search in queries, bug fixes, and many QoL enhancements. blog.doyensec.com/2020/06/11…
Zenk-Security retweeted
[New Post] Here is my detailed write-up on a new #SMBv1 vulnerability named #SMBLost (CVE-2020-1301).
#RCE conceivable. Find out why #SMBLost is less harmful than #SMBGhost or #EternalBlue.
#PoC causing a remote #DoS available. Stay secure! 🙂
➡️airbus-cyber-security.com/di…
Zenk-Security retweeted
How Canal+ was encrypted in the 80’s fabiensanglard.net/discret11… – at Saint-Mandé, France
Atelier Buffer overflow 101 - Jour 1 [CPU, RAM et GDB] - Ce soir (27 mai) à 20h30 animé par @Beaujeant - discord.com/invite/YTRPAn
Zenk-Security retweeted
Si vous êtes intéressés par la sécurité offensive ou défensive, profitez de cet article gratuit, par @shab4z et moi-même.
xitter.cf/editionsdiamond/status…
L'article gratuit de la semaine est consacré à la sécurité autour de #PowerShell - Retrouvez-le sur notre base documentaire : connect.ed-diamond.com/MISC/…
Zenk-Security retweeted
I'm happy to share that @preemptsecurity released a scanner tool to help you detect various #NTLM vulns discovered by our team: github.com/preempt/ntlm-scan…
Tool effectively scans for:
CVE-2019-1019
CVE-2019-1040
CVE-2019-1166
CVE-2019-1338
CC (and thanks... 😉): @_dirkjan @agsolino
Zenk-Security retweeted
Sweat @ZenkSecurity pour descendre dans les catacombes
Zenk-Security retweeted
Zenk-security s'est construite pendant 10 ans autour de l'idée de partage non marchand du savoir en sécurité informatique.
Nous avons désormais un Discord et il est ouvert à toutes et tous. : discord.gg/s92J2uR
#infosec #community
Zenk-Security retweeted
French infosec addict looking for a vulnerability researcher/pentester remote position.
RT appreciated ! DMs open ;)
Zenk-Security retweeted
I just released "lsassy" ! Tool to remotely parse lsass dumps using #impacket and #pypykatz
Automate the whole process using my CME module
🔹lsassy : github.com/Hackndo/lsassy
🔸CME Module : gist.github.com/Hackndo/4326…
French article about this technique : beta.hackndo.com/remote-lsas…
🙃
























