Founder of @N0PSctf | Cybersecurity Engineer 🦋
Joined September 2024
- Tweets66
- Following404
- Followers52
- Likes1.8K
Pinned Tweet
Finally a first swag ^.^ Thanks @yeswehack !
Challenge completed! ⚡
Congrats to the 3 winners of our latest Dojo Challenge - Phishing 🐟
The hackers were invited to use punycode encoding and perform a code injection to reveal the flag 🚩
Check out the community write-up 👉 yeswehack.com/dojo/dojo-ctf-…
#YesWeRHackers #CTF #BugBounty
Ranked 12th/2500 in the Root-Me Xmas CTF and had a lot of fun tryharding all along december!
Kudos to all the staff for the amazing work, it was the epitome of awesomeness from start to finish 🤍
Also, dropping few writeups of mine here ^^
yourssto.github.io/posts/roo…
Sto retweeted
Hoy!
Tomorrow at 9 PM (French time), @Agarri_FR and I will be co-hosting a @CaidoIO Stream EP with the Caido team! 😍
Expect a solid tech-tour, cool new features being flexd', and a nicely put-together Burp vs Caido comparison! 😎⚔️
By the way, this episode will be in English to welcome @Rhynorater & @TheSytten, so get your best FrenGlish ready! 😅
My write‑up for @intigriti october challenge is here: yourssto.github.io/posts/int…
On the same occasion, finally launched a blog as it's a little project I’d been meaning to do for a while!
Designed in two nights, Hugo‑based, theme from scratch, so every feedback is welcome ^^🤍
Sto retweeted
Sometimes, SQL injection is still possible, even when prepared statements are being used. Our researcher @hash_kitten has written up a blog post about a novel technique for SQL Injection in PDO’s prepared statements: slcyber.io/assetnote-securit…
Received this poster following @WOCSA_asso 2025 :
Our team, Arancina, representing @EURECOM, ranked 1st🔥
So honored to play alongside the 3 amazing Arancinos pysu, @CaptWake & @0xletmewin0🫶
Shoutout to @yeswehack for the poster!
P.S : Keychain = homemade because.. Arancina^^🍊
Sto retweeted
🔥 What a night!
The Before @leHACK_ meetup sold out in 4 days — and it was worth it.
Talks, 🍕, lightning RUMPs, and good vibes with @hackthebox_eu, @osint_fr & 💜 @BrHackeuses crew.
Big shoutout to all the speakers, helpers & hackers.
We BrHacked it. Together.
#BrHackeuses
Sto retweeted
Today was my last day as a pentester at Bsecure, and it feels a bit surreal. After a three-year journey of hunting on the side, I’m finally ready to go all-in as a full-time bug bounty hunter.
To celebrate this milestone, I've written an article sharing the full story. It’s a transparent look at the path that got me here: the wins, the lessons, the real financial numbers, and my honest advice for anyone considering this adventure.
You can read all about my journey from pentester to full-time hunter here: gelu.chat/posts/from-pentest…
Sto retweeted
Writeup of "Payload Plz" challenge - Le Hack 2025
The goal was to write a polyglot payload for 13 contexts 🤯
swisskyrepo.github.io/blog/2…
Played remotely the @yeswehack #PayloadPlz challenge and ranked 15th ^^
(A rank that landed just next to the legend Swissky!💫)
payload-plz.com/scoreboard
Sto retweeted
Decrypting Diversity Summit was BrHacked✨🔐
From crypto to impostor syndrome & ending on Montpellier beach🏖️, this conference was one of a kind
@jose_you25 & @YoursSto proudly represented our collective during the poster session, sharing our mission❤️🔥
Shoutout to the organizers
Sto retweeted
BEFORE @leHACK_ PROGRAM
📅June 26 @ESGI
🎤7:15PM Talks
• X-n0 :Domain Privesc & Trust Abuse
• @Tadlos_Nayr:Shell TL;DR tips&tricks
🍕8PM Social
⚡9:30PM RUMPS @gr0bot_& @bl4ckarch, @ray_2sec,@rayanlecat& @bragames2,@zaabbiixx, @Ll7baucarre& Ob3ud,@realDumbleDork,@veak_official
Just completed the "Dojo #42 - Hex Color Palette" challenge on @YesWeHack!🌟
dojo-yeswehack.com/challenge…
#YesWeHack #ChallengeAccepted
Sto retweeted
Malek Sfaxi (aka @YoursSto), our new ninja currently intern at @NinjaLabFr , co-organizes the @N0PSctf , a 36 hours capture-the-flag challenge which will happen from 31 of May to 1 of June 2025.
Feel free to participate !
nops.re/
Sto retweeted
Registrations for N0PSctf 2025 are now open via ctf.nops.re/! 💥
Sto retweeted
We are proud to announce that a conference paper about #EUCLEAK (SCA attack against Infineon secure elements affecting Yubikeys: ninjalab.io/eucleak/) has been accepted to @IEEESSP 2025.
Thomas will be there next week to present his work, if you are in SF, come and say hi!
Sto retweeted
Using #objectwalker I just found a new Server Side Template Injection payload to access the os module from within a jinja2 template:
I will add it in @pentest_swissky's PayloadAllTheThings
More infos about objectwalker here: xitter.cf/podalirius_/status/165…
(1/3) I've released publicly a new tool/library called #objectwalker that I have been working on for a few months. 🥳
ObjectWalker allows you to find paths into python objects to find interesting targets, in breadth first search or depth first search!
➡️github.com/p0dalirius/object…
Just completed the "Dojo #41 - Ruby treasure" challenge on @YesWeHack!
Level up with me! 🌟
dojo-yeswehack.com/challenge…
#YesWeHack #ChallengeAccepted
Sto retweeted
I almost can't believe it, but I am finally releasing my Gitbook about CTF and Hacking, which is a year in the making. It contains many tricks, explanations, and resources from my experience and research. I hope it becomes a valuable resource for everyone!
book.jorianwoltjer.com//
Sto retweeted
The article is out ! 🤟
Title: We hacked Google’s A.I Gemini and leaked its source code (at least some part)
We worked on this with @Rhynorater and I'm so excited this is finally out ;)
Link in the thread 🧵
