Security professional during the day, learning the hard job of dad rest of the time. Manager AppSec @gitlab
Geneva
Joined September 2009
- Tweets800
- Following265
- Followers66
- Likes295
VMDS retweeted
The $1.5B Bybit hack marks a new era in cryptocurrency security. Attackers have moved beyond technical exploits to sophisticated operational attacks. Read our initial analysis of this historic breach and its industry-wide implications: blog.trailofbits.com/2025/02…
VMDS retweeted
I don't usually ask for help on X, but the situation I'm dealing with is seriously f*cked up... Details below ⤵️
VMDS retweeted
❓Have you ever wanted to get in the mind of a hacker? Well, here's your chance during our Ask a Hacker AMA next week on September 8th.
✏️ Sign up and drop your questions here. bit.ly/3qNOChj
VMDS retweeted
We hope you enjoyed #INS23 ! As usual, thanks to the amazing work of @Ministraitor, all the talks are now available on our YouTube channel:
youtube.com/@scrtinsomnihack…
See you next year ! #INSO23
VMDS retweeted
#job: want to work on security with me at @taurus_hq? from code reviews to key ceremonies to compliance to physical security, a lot to do, solid team and tech and company (just announced a series B)
must be Swiss resident, speaking French or German is a plus but not mandatory
VMDS retweeted
How I found that heap corruption in Git? It was a little bit of luck and good guts feeling about the code to be honest. 🙃
about.gitlab.com/blog/2023/0…
VMDS retweeted
"L'éditeur ne disposait pas d’un plan de reprise des activités digne de ce nom [...]. Les sauvegardes étaient en outre selon eux conservées chez le même hébergeur que les données elles-mêmes."
Avertissement aux PMEs du coin qui se jettent dans le cloud...
letemps.ch/suisse/un-mois-ap…
VMDS retweeted
How did I miss that! This repository is amazing to emulate several attackers🤩
"A PoC that packages payloads into output containers to evade Mark-of-the-Web flag. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX" - @mariuszbit github.com/mgeeky/PackMyPayl…
VMDS retweeted
We have finally published Tproxy (objectifsecurite.gitlab.io/t…) our generic TCP interception proxy (think Burp for TCP): TLS handling, wireshark dissection, intercept and modify by hand or with scripts in GUI or CLI.
There is a complete doc with demos (objectifsecurite.gitlab.io/t…)
VMDS retweeted
This great article prompted me to continue my search for an updated universal ruby gadget! After a lot of digging I managed to chain two together to create a new RCE gadget that works on Ruby 2.0-3.2: devcraft.io/2022/04/04/unive…
New post - Ruby Deserialization - "Gadget" on Rails. In this blog post, we discuss finding a new RCE gadget in latest Rails (7) framework extending the work of @elttam @wcbowling. Ft. @iamnoooob @rootxharsh
httpvoid.com/?p=Ruby-deseria…
VMDS retweeted
How to use @gitlab's security features to detect #log4j vulnerabilities 💥
Amazing blog post collaboration from our Developer Evangelism team across all teams. @olearycrew @john_cogs 🤗
about.gitlab.com/blog/2021/1… #Log4Shell #security
VMDS retweeted
As of today, bounties for new reports submitted to the @gitlab #bugbounty program have been raised across the board.
Most notably, $15,000 maximum for high severity vulnerabilities and $35,000 maximum for critical! 💸
There's also swag up for grabs :)
about.gitlab.com/blog/2021/1…
VMDS retweeted
Interesting tool of the week: github.com/tomnomnom/gron by @TomNomNom
We like: Supports input from a file, URL or stdin so it can be piped to grep and properly searched. Allows the full path to be revealed. Colorizes output. Easily diff sets of JSON.
VMDS retweeted
"Le Signal d'appel au secours (ou Signal de détresse par violences domestiques) est un geste à une main qui peut être utilisé par une personne pour alerter autrui qu'elle se sent menacée et a besoin d'aide."
Ça peut toujours être utile de le connaître...
fr.m.wikipedia.org/wiki/Sign…
VMDS retweeted
Friday means new Bughuntrio scenario to hack on! Check out our newest Container Escape scenario. Are you able to escape all 8 containers? #Docker #CTF
bughuntr.io/scenario/ajxchap…
VMDS retweeted
💥FLASH SALE!💥 For the next 4 hours, everything on our site is 40% off if you use the coupon code FLASH40. Offer's good until 5pm PST, so click on over: nostarch.com/
VMDS retweeted
There are currently over 1.86 Billion websites.
Few provide any real value.
Here are 7 that do: 🧵
VMDS retweeted
> In the future, we hope to be able to publicly share those threat models to help customers, the community and to continue strengthening our hackerone program.
That's pretty exciting. Instead of hiding those we'd get to share and iterate on the threat models with the community.
This Post is from an account that no longer exists. Learn more
VMDS retweeted
🥳 Le MISC Hors-Série 24 Reverse Engineering dirigé par @fredraynal est sorti boutique.ed-diamond.com/en-k… avec de magnifiques articles dont une "Introduction au reverse hardware" par @virtualabs et moi-même 😊. Happy 👨💻 🧰🪛🔬🔥
VMDS retweeted
In a new guest blog, @orange_8361 provides details on how he used 3 bugs to get code execution on #Microsoft #Exchange during #Pwn2Own. He calls it ProxyShell. We call it amazing. Read the details a zerodayinitiative.com/blog/2…
