Hi friendz ! 🧙‍♂️ Prochain Stream : Mardi 28 Décembre à 21h ! 🔥 Topics: ON BULLY PHP ! 🧨 - Proc filesystem tricks & mlocate db abuse by Laluka@OffenSkill 🏹💣 - Filter chains & unserialize popchains by Remsio 🥷📚 - Pentest methodology & examples per framework by Antoine Gql 💥🔫

L’ANSSI lance #Hackropole 🏛 une plateforme regroupant la quasi-totalité des épreuves du France Cybersecurity Challenge #FCSC. 🇫🇷 🏆 Une centaine d’épreuves est déjà disponible ! 💪 🚀Rendez-vous dès maintenant sur : cyber.gouv.fr/actualites/lan… #ANSSI #numérique #FCSC #ECSC

CHERCHE JOB OSINT Coucou Twitter, j'ai une amie avec un excellent profil d'analyste/formatrice en OSINT technique qui est à la recherche de son prochain boulot. (Quelques détails dans le tweet suivant 👇) Merci pour vos RT !

🫡

Great article from cxiao about recovering rust function names thanks to panic metadata : cxiao.net/posts/2023-12-…

Ever faced a WAF/EDR while exploiting a Java deserialization? Checkout our latest blogpost by Load. for a stealthier exploitation, exfiltration and persistence by diving deep into translets, transformers and more! synacktiv.com/publications/j…

Just wrote a new blog post about rust symbol recovery, this time targeting cross-compiled targets ! Here is the blog post: nofix.re/posts/2024-23-… I also updated rustbinsign/rustbininfo to identify and handle MinGW targets accordingly.

I wrote a small blog post about a specific error I encountered while coding a custom windows authentication package. It’s mainly about windows login setup and some ACL, nothing new but could be helpful 0xswitch.fr/posts/windows-…

Henlo ! 🧙 Vous vous êtes déjà demandé si un super tool un peu obscure a déjà été présenté ? Si un article a déjà été décortiqué ? Si une technique d'exploitation a déjà été introduite ? Ou même si nos chercheurs et hunters adorés ont déjà été invités à partager leurs

Bonjour citoyens de l'InfoSec, Je suis très heureux de vous annoncer ma nouvelle aventure : OffenSkill ! offenskill.com youtube.com/watch?v=g5KP9C… Suite à mon départ de ManoMano (miss you guys 💌), je me mets -enfin ?- à plein temps en tant que travailleur indépendant !

New blog entry: C++ Unwind Metadata: A Hidden Reverse Engineering Bonanza msreverseengineering.com/blog/2024/8/20…

did someone saw any blog post related to LoopbackLibrary ? I only saw James Forshaw "Elevating Kerberos to the Next Level" but its not so detailed

We BINARLY🔬 have just released idalib v0.2.0, an update to our Hex-Rays SA IDASDK Rust bindings. It includes many new features: bookmarks, comments, and plugins APIs, hex-rays support, and documentation! github.com/binarly-io/ida… Thanks to our contributors: Yegor, [email protected]!

After 6 years, I made a blog thingy again. This time about MmScrubMemory. An innocuous looking function that has bitten my ass several times in the last several years. And if you're developing a hypervisor, it might've bitten yours, too. wbenny.github.io/2024-11-21-mms…

I got a new small blog post about oddities I encountered while working on rustbinsign: reproducing builds of old Tokio crate fails ! You can read more about why this happens and how to work around that here: nofix.re/posts/2025-08-…

Ah, yes, "rendezvoused"

Hello twitter, made an IDA script/plugin to comment your decompiled Rust code with... Rust source code ! It fetches panic information and reads fetch the associated source code to print it to you in the form of a comment. github.com/N0fix/IDA_rust…

I've published my thoughts on part of the anonymization method used in that paper: hackarcana.com/article/anonym… TL;DR: yeeeah... I don't think it works well