Renaud Bidou (@rbidou) header
Renaud Bidou (@rbidou) profile picture

Renaud Bidou

@rbidou

Know what you are doing

 Paris
Joined July 2009
  • Tweets3.3K
  • Following277
  • Followers496
12Media
Photo by Renaud Bidou (@rbidou)Photo by Renaud Bidou (@rbidou)Photo by Renaud Bidou (@rbidou)Photo by Renaud Bidou (@rbidou)Photo by Renaud Bidou (@rbidou)Photo by Renaud Bidou (@rbidou)Photo by Renaud Bidou (@rbidou)Photo by Renaud Bidou (@rbidou)Photo by Renaud Bidou (@rbidou)
LLM Forensics: audit where a model comes from, detect undeclared derivatives, and understand what an adversarial fine-tune taught a model. github.com/rbidou/llm-forens…
Image from Renaud Bidou (@rbidou)
1
45
Renaud Bidou retweeted
XSS Payloads (@XssPayloads) profile picture
XSS Payloads@XssPayloadsOct 28
Scalable Vector Grief Bypassing 6 SVG sanitizer to run JavaScript in Firefox even when the response body is completely harmless XML. By @garethheyes portswigger.net/research/sca…
Scalable Vector Grief

Scalable Vector Grief

I tested eight popular SVG sanitizers and bypassed six of them. In this post, I'll show you how a response header can run JavaScript in Firefox even when the response body is completely harmless XML.

portswigger.net
4
10
2,108
Smuggling Shouldn't Exist Anymore, Right ? xclow3n.com/post/smuggling-s…
Smuggling Shouldn't Exist Anymore, Right?

Smuggling Shouldn't Exist Anymore, Right?

A victim asked for /account and got the attacker's marker back, on a backend socket the proxy believed was clean. Ten products reuse a connection where the previous request is not finished, and reuse...

xclow3n.com
15
[PyRASP] PyRASP 0.10.2 released with performance improvements, and a new SQL injection detection engine. Home: pyrasp.paracyberbellum.io Github: github.com/rbidou/pyrasp Release Notes: github.com/rbidou/pyrasp/blo…
Image from ParaCyberBellum (@ParaCyberBellum)
1
28
Divergence: formatting a script can turn it into a different program, across 37+ JavaScript processors trustsig.eu/blog/javascript-…

Divergence: formatting a script can turn it into a different program, across 37+ JavaScript...

A formatter, minifier or deobfuscator can be made to turn one script into another. 186 techniques across 37+ JavaScript processors, from Chromium DevTools to WebCrack, plus a Tetris script that...

trustsig.eu
28
PowerShell Accepts Spellings of -EncodedCommand Your Detection Has Never Seen ridgelinecyber.com/blog/enco… Simple, efficient

PowerShell Accepts Spellings of -EncodedCommand Your Detection Has Never Seen

PowerShell accepts -EncodedCommand as any prefix, after a slash or a Unicode dash. Test your detection on twelve spellings, then decode safely.

ridgelinecyber.com
2
23
[PyRASP] PyRASP 0.10.1 is out with improved machine learning and LLM engines Home: pyrasp.paracyberbellum.io/ GitHub: github.com/rbidou/pyrasp Release Notes: github.com/rbidou/pyrasp/blo…
Image from ParaCyberBellum (@ParaCyberBellum)
1
35
[REVIEW] Security Review #325 is out! paracyberbellum.io/resources…
Image from ParaCyberBellum (@ParaCyberBellum)
1
22
[PyRASP] PyRASP 0.10.0 is out with support for new frameworks as well as generic security through WSGI and ASGI gateways. Home: pyrasp.paracyberbellum.io GitHub: github.com/rbidou/pyrasp Release Notes: github.com/rbidou/pyrasp/blo…
Image from ParaCyberBellum (@ParaCyberBellum)
1
20
SAML: A fractal of bad design blog.trailofbits.com/2026/09…
SAML: A fractal of bad design

SAML: A fractal of bad design

SAML, the XML-based authentication protocol that birthed the SSO industry, is fundamentally flawed due to XML complexity, canonicalization issues, enveloped signatures, and design ossification,...

blog.trailofbits.com
34
Quantum Computers Are Not a Threat to 128-bit Symmetric Keys words.filippo.io/128-bits/
25
Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation arxiv.org/pdf/2607.24888
23
Active Directory Attack Architecture Map v2.0 kypvas.github.io/ad_attack_a…
20
[PyRASP] PyRASP 0.9.4 is out to prevent AI-powered apocalypse thanks to smart bot detection, additional DLP capabilities and suspicious characters identification. Home: paracyberbellum.io/solutions… GitHub: github.com/rbidou/pyrasp Release Notes: github.com/rbidou/pyrasp/blo…
Image from ParaCyberBellum (@ParaCyberBellum)
2
1
56
[REVIEW] Security Review #322 is out! paracyberbellum.io/resources…
Image from ParaCyberBellum (@ParaCyberBellum)
1
20
I finally released a new PyRASP version :-)
ParaCyberBellum (@ParaCyberBellum) profile pictureParaCyberBellum@ParaCyberBellumSep 5
[PyRASP] PyRASP 0.9.3 is out, with suspicious characters detection and ja4h fingerprints support. Github: github.com/rbidou/pyrasp Doc: rbidou.gitbook.io/pyrasp PyPi: pypi.org/project/pyrasp/
Image from ParaCyberBellum (@ParaCyberBellum)
36
MCP Client, A CLI client to test MCP Tools. Designed for quick testing. Supports MCP Python SDK v2. github.com/rbidou/mcp-client Obviously related to the latest @ParaCyberBellum project...
GitHub - rbidou/mcp-client: A CLI client to test MCP Tools. Designed for quick testing. Supports...

GitHub - rbidou/mcp-client: A CLI client to test MCP Tools. Designed for quick testing. Supports...

A CLI client to test MCP Tools. Designed for quick testing. Supports MCP Python SDK v2. - rbidou/mcp-client

github.com
48
[NEW] 50+ MCP Tools made available from our server. Augment your SOC and empower your Red Team toolkit. paracyberbellum.io/solutions…
Image from ParaCyberBellum (@ParaCyberBellum)
1
25
Renaud Bidou retweeted
XSS Payloads (@XssPayloads) profile picture
XSS Payloads@XssPayloadsAug 20
CRLF-Powered Desync Attacks: Beheading HTTP Streams A smart one by @t0xodile portswigger.net/research/crl…
CRLF-Powered Desync Attacks: Beheading HTTP Streams

CRLF-Powered Desync Attacks: Beheading HTTP Streams

Abstract In this paper we’ll show that HTTP Header Injection is severely underestimated. Forget open redirects or Cross-Site Scripting and instead, embrace the catastrophic potential of the CRLF-Power

portswigger.net
18
84
5,832
DNS Cache Poisoning Like it’s 2006 usenix.org/system/files/usen…
1
40
Load more