My presentation at NorthSec is now available here: youtube.com/watch?v=hslR6h… #nsec203 #ItIsPronouncedJOD

Update about my #infosec challenge coins

Very nice waf bypass on AWS Waf gosecure.net/blog/2023/06/2…

Great research from Marc Olivier our SQLi ninja. The "MSSQL doesn't need ; terminators" was also used in his NorthSec track. This track was wild and the greatest design of SQLi challenges I have ever seen. Very whitebox.

Another AWS WAF bypass allowing SQLi caused by an unorthodox MSSQL design choice gosecure.net/blog/2023/06/2…

Turns out you don't need semi-colons to batch queries in MSSQL! SELECT * FROM test WHERE id = 1 WAITFOR DELAY '0:0:5' Great writeup by GoSecure, we'll update the Web Security Academy SQLi cheat sheet shortly. gosecure.net/blog/2023/06/2…

Want to (partly) automate your next client security check? I threw together some lines of PowerShell to query lots of the stuff I used to check manually. Bonus: If you use PwnDoc for your reports, I even got you covered there <3 github.com/LuemmelSec/Pen…

Anyone knows where/how I can buy a Crypto Ag H-460 machine? #AskingForAFriend #cryptography

Hi everyone! I’m looking for a new role. If you need (or know a place who does) a senior leader in Threat Research, Detection Engineering, Threat Hunting, OffSec or even a CISO let’s talk. Curious to see if my next opportunity will come from Twitter or LinkedIn. Bets are on!!

Never play cards with cryptographers.

Pictures from NorthSec 2023 are out! 📷 photos.google.com/share/AF1QipNB…

Billets au tarif lève-tôt en vente demain (vendredi) midi! (ET) Early bird tickets on sale tomorrow (friday) at noon! (HE) tickets.nsec.io/2024/ Hype? 😎

Tomasz Łakomy Oh my…

i wonder if burp scanner would have caught this!

Ben Sadeghipour HackerOne

Hyped for #nsec2024 with NorthSec