Sébastien MARCHAL retweeted
7 awesome @Burp_Suite Extensions that will help you identify more vulnerabilities 🧵👇
Sébastien MARCHAL retweeted
So many beginners ask what to do after finding subdomains 🧵
1. Do directory search
2. Do Github dork
3. Do google dork
4. FUZZ for params
5. FUZZ for vhosts
6. Find Wayback data (gau, waybackurl)
7. Find javascript files
1/n
Sébastien MARCHAL retweeted
Another long (hacker) story thread 🧵
= Stealing checks worth millions & pwning a bank =
Here’s how I did it, so you can learn.
I was once contracted to do a penetration test on a bank…
Like, retweet, and follow for more hacker stories!
(1/x)
Sébastien MARCHAL retweeted
Quand même drôle toutes ces personnes manifestant ce weekend contre "la surveillance généralisée"...
Bizarrement, on ne les a jamais vu dans nos manifestations contre la Loi Renseignement et son extension récente, contre la surveillance de masse et contre la LOPPSI à son époque.
Sébastien MARCHAL retweeted
Replying to @_JohnHammond
Sébastien MARCHAL retweeted
We are super excited to have reached 10,000 followers and to celebrate, we're giving away 10 custom SSD hoodies that will get you through winter in style! 🥳
To enter just retweet and leave a comment on this post.
Sébastien MARCHAL retweeted
If you see a /cgi-bin directory on a webserver, don't forget to gobuster inside that directory looking for extensions like .sh, .cgi, (and even .py, .pl, or more).... you might be able to find a Shellshock vulnerability. That bug is... still around...
Sébastien MARCHAL retweeted
I mean I do like rustscan, not gonna lie. When will ALL of our daily tools be ported to rust??
Sébastien MARCHAL retweeted
Facebook officially silences the President of the United States. For better or worse, this will be remembered as a turning point in the battle for control over digital speech.
BREAKING: Facebook blocks Trump from accessing his accounts indefinitely, per Zuckerberg. "We believe the risks of allowing the President to continue to use our service during this period are simply too great." facebook.com/zuck/posts/1011…
Sébastien MARCHAL retweeted
an XSS payload, Cuneiform-alphabet based
𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++],
𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀]
+(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀]
+𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")()
#bugbounty #bugbountytips #cybersecurity
Sébastien MARCHAL retweeted
squarectf.com this year starts on 11/13/2020 17:00 EST and runs for 24 hours
With @0b11stan , we placed 72nd out of 750 teams at the SunshineCTF 2020!
Our first reverse engineering oriented CTF, so proud to be in the top 100 teams !
#CTF #ReverseEngineering #assemblylanguage #infosec
Sébastien MARCHAL retweeted
Here's 7 hours of 🔥 content from #VirSecCon2020 on hacking, web, Android, iOS, recon, bug bounty, OSCP/OSCE by @stokfredrik, @TomNomNom, @ChloeMessdaghi, @B3nac, @dawnisabel, @niden, @zseano, @d0nutptr, @ethicalhacker, @uraniumhacker, and @erbbysam.
🎥youtu.be/B3Udl86Zu20
Sébastien MARCHAL retweeted
Take a look at this IP address.
http://31.10.590
Before you tell me that it's invalid and won't work, try it.
Sébastien MARCHAL retweeted
On s'adapte et on trouve de nouveaux coworkers prêts à assurer la communication ! #CONFINEMENTJOUR10 #teletravail #restezchezvous
Sébastien MARCHAL retweeted
We are excited to release Starkiller. Our new application for interfacing with Empire. It allows for multi-user support and ease of operations. Check out our blog post for a full overview. #Empire #infosec #Powershell
bc-security.org/post/an-intr…
Sébastien MARCHAL retweeted
Aujourd’hui @0x_Seb nous parle de #Django le #framework #Python : « Le framework pour les perfectionnistes avec des deadlines »
Sébastien MARCHAL retweeted
Notre prochaine édition aura lieu le 12 juin 2020.
Il s'agit de notre 10ème édition ! On prépare pas mal de trucs cool 😀🎉.
Les inscriptions ouvrent prochainement, mais le CFP est lui déjà ouvert !
[email protected] ou MP 👌
Sébastien MARCHAL retweeted
I had to get a background check for my job, and it turns out the report is a 300+ page pdf of every single tweet I’ve ever liked with the work “fuck” in it.
Enjoy your dystopian bs! *waves*
Sébastien MARCHAL retweeted
#CyberpunkisNow Airbnb has patented software that searches a person's online presence (including social media) to detect 'behavioural & personality traits' & compile one or more scores using machine learning.
Patent:
freepatentsonline.com/y2019/…






























