@ZenkSecurity

irc://irc.rizon.net/zenk-security Computer security - Community Blog / Forum / Wiki / Repository

zenk-security.com
Joined September 2010
  • Tweets1.2K
  • Following319
  • Followers2.7K
18Media
BRAVO à l'équipe @ZenkSecurity qui a réussi en 1er ( dimanche 2h45 du matin) le challenge crazycrypto3 de l'ARCSI fait pour le wargame/CTF de leHACK ❤️ – at Paris, France
1
3
1
12
1,387
Zenk-Security retweeted
Mayfly@M4yFly4 Jul 2022
GOAD v2 is out ! You can now test your AD commands and pentest skill on a multi-domain AD lab. Have fun :) github.com/Orange-Cyberdefen… mayfly277.github.io/posts/GO…
45
429
13
1,160
🇬🇧 Next DEFCON Paris meetup on NOV-21 🇫🇷 Prochain DEFCON Paris le 21 novembre - "Not so hidden services" / "Services pas si cachés que ça", Florian & Charles (ANSSI) - "kdigger", Mahé Tardy (Quarkslab) Le Carlie, 177 rue Saint Martin, Paris Reg: framadate.org/Cithceb3oK9Fne…
15
1
43
Samedi 14 nov, les gagnants du #CTF en ligne recevront des lots offerts par @VillageCABrest dont des produits locaux à déguster :) En mode couvre-feu et/ou confinement ça donne du baume au cœur! #UYBHYS ::: Les inscriptions sont toujours ouvertes ::: pretix.eu/cantine/UYBHYS20/1…
@CyberNavalChair @brestfr @yeswehack @synacktiv @diateam_labs @brest_iroise @LexfoSecurite @xankom @FTBrestPlus

ALT @CyberNavalChair @brestfr @yeswehack @synacktiv @diateam_labs @brest_iroise @LexfoSecurite @xankom @FTBrestPlus

8
2
11
Zenk-Security retweeted
pyn3rd@pyn3rd21 Oct 2020
I have summarized some vulnerability write-ups in Spring Boot environment, and some new tricks will be updated unceasingly here. github.com/pyn3rd/Spring-Boo…

GitHub - pyn3rd/Spring-Boot-Vulnerability

Contribute to pyn3rd/Spring-Boot-Vulnerability development by creating an account on GitHub.

github.com
2
95
3
218
Zenk-Security retweeted
Jake Miller@theBumbleSec8 Sep 2020
Excited to share my latest research! h2c smuggling: request smuggling via HTTP/2 cleartext. Leveraging TCP tunnels provided by HTTP/1.1 upgrades, we can initiate h2c connections directly with compatible back-end services, bypassing proxy access controls. labs.bishopfox.com/tech-blog…
12
310
8
697
Web Cache Entanglement: Novel Pathways to Poisoning by @albinowax #BHUSA portswigger.net/research/web…

Web Cache Entanglement: Novel Pathways to Poisoning

Caches are woven into websites throughout the net, discreetly juggling data between users, and yet they are rarely scrutinized in any depth. In this paper, I'll show you how to remotely probe through

portswigger.net
3
177
11
344
Zenk-Security retweeted
Doyensec
@Doyensec12 Jun 2020
We just released a giant update for InQL, bringing it to 2.0.0! It’s now out on the @BApp_Store Store. This release comes with a new standalone UI, Burp GraphiQL integration, a new editor with search in queries, bug fixes, and many QoL enhancements. blog.doyensec.com/2020/06/11…
2
39
132
Zenk-Security retweeted
Nicolas D@_Homeostasie_9 Jun 2020
[New Post] Here is my detailed write-up on a new #SMBv1 vulnerability named #SMBLost (CVE-2020-1301). #RCE conceivable. Find out why #SMBLost is less harmful than #SMBGhost or #EternalBlue. #PoC causing a remote #DoS available. Stay secure! 🙂 ➡️airbus-cyber-security.com/di…
2
232
10
405
Zenk-Security retweeted
Frank
@jedisct18 Jun 2020
How Canal+ was encrypted in the 80’s fabiensanglard.net/discret11… – at Saint-Mandé, France
35
2
70
Zenk-Security retweeted
bik3te@bik3te21 Apr 2020
Si vous êtes intéressés par la sécurité offensive ou défensive, profitez de cet article gratuit, par @shab4z et moi-même. xitter.cf/editionsdiamond/status…
Éditions Diamond@editionsdiamond21 Apr 2020
L'article gratuit de la semaine est consacré à la sécurité autour de #PowerShell - Retrouvez-le sur notre base documentaire : connect.ed-diamond.com/MISC/…
1
22
28
Zenk-Security retweeted
Yaron Zinar@YaronZi9 Mar 2020
I'm happy to share that @preemptsecurity released a scanner tool to help you detect various #NTLM vulns discovered by our team: github.com/preempt/ntlm-scan… Tool effectively scans for: CVE-2019-1019 CVE-2019-1040 CVE-2019-1166 CVE-2019-1338 CC (and thanks... 😉): @_dirkjan @agsolino
3
183
2
383
Zenk-Security retweeted
Maxou56800@Maxou568007 Feb 2020
Sweat @ZenkSecurity pour descendre dans les catacombes
3
20
Zenk-Security retweeted
Cabusar@cabusar26 Jan 2020
Zenk-security s'est construite pendant 10 ans autour de l'idée de partage non marchand du savoir en sécurité informatique. Nous avons désormais un Discord et il est ouvert à toutes et tous. : discord.gg/s92J2uR #infosec #community

Rejoins le serveur Discord Zenk-Security !

Découvre la communauté Zenk-Security sur Discord - discute avec 344 autres membres et profite du chat vocal et textuel gratuit.

discord.com
25
43
Zenk-Security retweeted
Geluchat
@Geluchat16 Jan 2020
French infosec addict looking for a vulnerability researcher/pentester remote position. RT appreciated ! DMs open ;)
1
91
63
Zenk-Security retweeted
Pixis@HackAndDo3 Dec 2019
I just released "lsassy" ! Tool to remotely parse lsass dumps using #impacket and #pypykatz Automate the whole process using my CME module 🔹lsassy : github.com/Hackndo/lsassy 🔸CME Module : gist.github.com/Hackndo/4326… French article about this technique : beta.hackndo.com/remote-lsas… 🙃

GitHub - login-securite/lsassy: Extract credentials from lsass remotely

Extract credentials from lsass remotely. Contribute to login-securite/lsassy development by creating an account on GitHub.

github.com
4
131
5
264
#Brest le 23 nov #UYBHYS2019 à 11h35 > Dealing with password reuse attacks in 2019 par Pierre-Antoine Haïdar-Bachminska [@Hydraze] Réservez votre place seulement pour 15€ unlockyourbrain.bzh/?portfol… cc @KindredGroup @ZenkSecurity @capucinsbrest
7
1
5
Zenk-Security retweeted
Richard Davy@rd_pentest18 Sep 2019
Turns out that good old dll hijacking can be used to have fun with odbcad32 from the cmdline/non gui secureyourit.co.uk/wp/2019/0…
1
6
15
Zenk-Security retweeted
TechBeacon@TechBeaconCom7 Aug 2019
The token menace ... #SSO frameworks are complex, and their #security relies on the quality of the implementation. @pwntester and @olekmirosh discuss their vulnerability find at #BlackHat2019 #BHUSA #BHUSA2019 techbeacon.com/security/sing…
3
3
Active Directory Kill Chain Attack & Defense github.com/infosecn1nja/AD-A…
1
100
5
254
Load more