CrewCTF is back with its 2025 edition with just 6 weeks to go . Book your calendars, registration opens soon at crewc.tf

TFC CTF 2025 has concluded. 🎉 Congratulations to our winners! 🏆: thehackerscrew 🥈: TRX 🥉: p3wp3w See you all in Bucharest, Romania!

This weekend we participated in TFCCTF by The Few Chosen & NSSCTF by Norske Nøkkelsnikere and placed 🥇in both! Winning TFCCTF we also qualified for DefCamp finals in Bucharest, Romania. Huge thanks to both teams for organizing wonderful event and congratulations to other winners🥳

Registrations for crewCTF 2025 are now open 2025.crewc.tf/register Thank you to our generous sponsors who made our event possible : OtterSec Google Cloud #crewCTF2025 #CTF

Come play :)

come play this weekend :)

I received an email from a reader asking if I could explain the payload of the "XSS without () and ;" here is it I am not the one who invent it, just someone trying to explain every details of it. Based on it, we can also make it worked in both browsers blog.huli.tw/2025/09/15/en/…

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

CrewCTF 2025 is live ! play at 2025.crewc.tf #crewCTF2025

And that's a wrap, CrewCTF 2025 is over ! Winners of this edition are - 🥇 TRX 🥈 valgrind 🥉 r3kapig Thank you everyone for participating and hope you had fun. CrewCTF will be back with its 5th edition next year, till then Happy hacking 🪛 #crewCTF2025

Writeup for my 2 web challs (+ revenge) here: albertofdr.github.io/post/crewctf-2… Hope you enjoyed them ;)

We are excited to announce that we played sardinia Cybercamp CTF 2025 organized by Sardinia Len (Srdnlen) last weekend and placed 🥈 Congratulations to other winners and thank you Sardinia Len (Srdnlen) for organizing such an awesome event. We are looking forward to playing the next edition.

When I first spoke out about the genocide, I was one of the few voices in tech, and it came at a cost. I faced sabotage especially from the VC class: lies, leaks, threats, and blocked investments. It was painful, but I never once regretted standing up for the children in Gaza.

Every retweet i see is to make Ayla Croft win, run for president next 😼👀

Not the government of thailand referring the tourists as aliens 😭😭 what even

we are here 🌊 #theSAS2025

Tuk tuking towards the CTF type shit #theSAS2025

😋😋 #theSAS2025

Been fun #theSAS2025

I found out that you can use "ftp::" to convert a limited Dom Clobering situation into a full CSPT. Then, while talking about it with m0z, he found that we can also use "https::" This can be used to prevent URL parsing of href, allowing us to hit other endpoints