Jean Marsault
@iansus
Followers
1K
Following
2K
Media
223
Statuses
2K
Red-Team & DFIR @WavestoneFR YoloSw4g CTF Opinions are my own
Paris, France
Joined August 2010
trying my luck here, has anyone struggled with "message stream modified" when trying to use a ccache file, valid with KfW, recognized by klist and usable by kinit / kvno, but a Java-based app fails with this error?.
0
0
0
RT @pentest_swissky: Breaking PHP's mt_rand() with 2 values and no bruteforce.
ambionics.io
We demonstrate how one can recover mt_rand()'s seed with only two outputs and without any bruteforce.
0
6
0
RT @OtterHacker: A few months ago I've created a "Pefect DLL Loader". You can find some details on my article that was just published today….
riskinsight-wavestone.com
For the last few weeks, I was developing a full custom Command and Control (C2). This C2 uses several Windows DLL for network communication and specially the WINHTTP.DLL one to handle HTTP requests...
0
92
0
RT @l4x4: Thanks to a great article from @itm4n, I discovered a bypass to install vulnerable printer's drivers when low level users are all….
itm4n.github.io
Following the publication of my blog post A Practical Guide to PrintNightmare in 2024, a few people brought to my attention that there was a way to bypass the Point and Print (PnP) restrictions...
0
66
0
Y'a que moi qui ai l'impression que le wifi SNCF c'est de pire en pire ?.Et je vous dis pas si c'est vraiment des Mb et pas des Mo.
1
0
1
Va falloir expliquer ce qu'on appelle une cyber attaque hein, j'en ai déjà géré plusieurs dizaines, mais de la a en avoir 1 pour chaque paire d'humain sur la planète. 🤔. Ou alors 1 paquet malveillant (most likely DDoS) == une cyber attaque ?.
01net.com
Une vague de cyberattaques menace de s'abattre sur la France durant les Jeux Olympiques de Paris. La Russie devrait notamment profiter de l'occasion pour exercer sa vengeance. Par ailleurs, l'événe...
8
4
24
One of the most beautiful classic/epic piano/violin set of tracks I came across in the last years.Congratz to A. S. Versnaeyen & Gabriel Saban. Vol 1: Vol 2:
open.spotify.com
Anne Sophie Versnaeyen · Album · 2019 · 12 songs
0
0
3
Very nice article by @OtterHacker on process injection with #NtSetInformationProcess & #Nirvana debugger!.
riskinsight-wavestone.com
Process injection is a family of malware development techniques allowing an attacker to execute a malicious payload into legitimate addressable memory space of a legitimate process. These techniques...
0
6
22
RT @th3m4ks: Hey @orangecyberdef, you just published a GitHub project under your org’s name whose code is 94% copy-pasted from of a competi….
0
5
0
Curious case:.* Exploiting ESC01 either via MMC GUI or via certipy.* Using Rubeus & Kekeo to get TGT via certificate.* Certificate is in NTAuthStore and in AD Certification Authorities (so normally in trust stores). Getting KDC_ERR_CLIENT_NOT_TRUSTED in every combinatio. Ideas?.
5
5
25
RT @Synacktiv: Ever wanted to understand PHP concepts in depth? This series of 2 articles by @_remsio_ details a POP chain targeting the do….
synacktiv.com
0
46
0
RT @CERTXMCO: [#Event🚀] Bravo à @iansus qui remporte son Groot suite à notre challenge ! 🤩.Merci à tous pour cette journée a @_barbhack_ et….
0
1
0
Does anyone have a reliable way of decrypting IIS encrypted connection strings without using ASPNet_RegIIS.exe?.
1
0
1
After 10 years & seasons, I just watched the last episode of #TheBlacklist. Truly an amazing and intense thriller show. Thank you @iJamesSpader for your performance!
1
7
30
Road to zombie virus, enjoy your last days!.
NEWS 🚨: U.S. Space Command has confirmed that fragments of an interstellar meteor have been recovered in the Pacific Ocean. This is the first time humans have come in contact with something from another Solar System 😳
0
0
1
🚩 @wavestoneFR CTF team #YoloSw4g ranks first of 80+ teams at #CyberEx23!. 🚩 Thanks @INCIBE and @OEA_Cyber for the organization & challenges!. 🚩 Congratz to @_Qazeer @th3m4ks and @meaz0u for the great team we've been for the last 8 hours, now we go to a well-deserved sleep!
3
6
26
Infosec people, if you use chatGPT-3 in your security research what are your best tips/prompt to face the inaccuracies it produces. In 1 out of 3 prompts, answers on subjects not widely covered are incomplete/wrong (esp. CLIs with missing prerequisites or extrapolated behaviour).
3
0
1