My Artifactory pentesting notes: errno.fr/artifactory/At…

My WebLogic pentest notes errno.fr/WebLogic.html

My security advisory for DELL EMC VNX products: errno.fr/VNX_advisory

If you want to play with an Active Directory lab. Here is the "Game Of Active Directory" project. Still a lot of stuff to add but already fun to play with ;) github.com/Orange-Cyberde…

About Jenkins tokens: errno.fr/JenkinsTokens.…

New article "The oldest privesc: injecting careless administrators’ terminals using TTY pushback": errno.fr/TTYPushback.ht…

I wrote an article on bypassing BitLocker on a Lenovo laptop: errno.fr/BypassingBitlo…

Bunch of vulns I found last year in Control-M Web: errno.fr/ControlMWebAdv…

I wrote an article on Dependency Confusions in Docker: errno.fr/DockerDependen…

Bruteforcing Jenkins' keys, an addendum to CVE-2024-23897: errno.fr/bruteforcing_C…

I wrote an article on the knowledge, time and money needed to perform a chip off attack: errno.fr/NAND_chip_off_…

Cool article by PT Swarm on the history and future of DMA attacks: swarm.ptsecurity.com/new-dog-old-tr…

A few IDA tips to reverse engineer U-Boot: errno.fr/IDA_tips_for_r…

Wrote an article on Privescing a BitLocker + PIN-Encrypted Company Laptop: errno.fr/Bitlocker_TPM_…

Found a dumb vulnerability in your webmail 2+ months ago, seems your techsupport doesn't want to fix it, should I go public with it? @1and1