@Gaburall

Security Researcher | CTF Player #TeamFR 2022 & @FlatNetworkOrg | 🥷@Synacktiv

 ~
woody.sh/
Joined August 2016
  • Tweets250
  • Following389
  • Followers501
Just dropped a BOF (Beacon Object File) with a SYSTEM LPE + persistence by hijacking the Visual Studio Installer service via AppDomainManager. Native ETW kill, no binary replacement, beacon runs in-process inside a signed Microsoft binary. github.com/0xaled/Vipere

GitHub - 0xaled/Vipere: BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE...

BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native ETW evasion. For Cobalt Strike & Adaptix. - 0xaled/Vipere

github.com
3
56
207
8,542
Woody retweeted
Synacktiv
@SynacktivJul 8
🚀 Le pôle Reverse de @Synacktiv recrute ! Vous poncez les CTF ? Vous aimez la R&D et vous souhaitez évoluer aux côtés d'experts reconnus dans le domaine ? Rejoignez-nous ! 📍 Paris, Rennes, Toulouse, Lille, Bordeaux, Lyon ou full remote (France). 👉 synacktiv.com/recherche-et-e…
8
21
3,095
🚨 The #Entrypoint2027 Call For Papers is now open! Have original offensive security research to share? New techniques, tools, or attack stories ? We want to hear from you. 📅 CFP closes: Sept 20, 2026. Our review board will be revealed soon. 👉 cfp.entrypoint.fr/entrypoint…
28
4
43
8,784
Woody retweeted
Hexacon@hexacon_frMay 22
iOS for Security Engineers by Quentin Meffre (@0xdagger) and Victor Cutillas (@v1csec) 📅 Oct 12-15 📍 Espace Vinci or Espace Cléry, Paris 2nd 👉 hexacon.fr/trainer/ios_for_s…
5
19
1,898
High quality steganographers @r3kapig @kalmarunionenDM @smiley_ctf
1
3
83
3,814
🚨 New post on blog.lexfo.fr: how to sniff BLE communications with an SDR (e.g. HackRF One) — the challenges of frequency hopping and strengths of the SDR approach for security researchers. Read it ➜ blog.lexfo.fr/sniffing-ble-s… #BLE #SDR #Security
7
14
1,080
corCTF 2025 has ended! Congrats to the top 5: 1. @FlatNetworkOrg 2. @r3kapig @ProjectSEKAIctf 3. The Amazing Digital Orange 4. @TheRomanXpl0it 5. STM Thank you to all of our players and sponsors! @osec_io, Research Innovations, @ret2systems, @trailofbits, @vector35, @googlecloud
11
3
63
11,870
Replying to @Formation_bzh
@Formation_bzh annule à J-15 la 1re année BTS SIO SLAM (11 admissibles). Une honte ! Pour les jeunes : nouvelle école à trouver, alternance, logements... Traitement inhumain de ses jeunes considérés comme des lignes d'un tableau excel. On attend des réponses. #ESNA #UIMM
1
12
29
2,902
Guillaume Chouquet, fondateur et directeur de l'ESNA, viré de sa propre école par l'@Formation_bzh !!! Je suis consterné et en colère. C'est affligeant de prendre une telle décision quand on sait tout ce que le bonhomme a fait pour l'école et les alternants !
14
42
8
98
23,407
Today was my last day as a pentester at Bsecure, and it feels a bit surreal. After a three-year journey of hunting on the side, I’m finally ready to go all-in as a full-time bug bounty hunter. To celebrate this milestone, I've written an article sharing the full story. It’s a transparent look at the path that got me here: the wins, the lessons, the real financial numbers, and my honest advice for anyone considering this adventure. You can read all about my journey from pentester to full-time hunter here: gelu.chat/posts/from-pentest…
29
70
2
370
34,668
🔥Release 1.0.1-alpha of Arion is out🔥 github.com/h311d1n3r/Arion/r… The C++ emulation framework has many new features and is getting more and more stable. Here is a short thread about the main additions :
1
9
25
2,175
Load more