Introduction Every beginner in penetration testing eventually reaches an important milestone: pivoting. When I first had to pivot, I only found: an overwhelming number of tools, each designed ...

For a while, I’ve wanted a simple FTP server, but I didn’t want to bother with installing a service, dealing with complicated configuration, or using something that isn’t portable. So, why not crea...

Intro Last month, the DGSE (the French intelligence agency) and Root-Me hosted a challenge mainly aimed at IT and cybersecurity students. The challenge contains six missions, each exploring a dif...

I never thought I would do a post about lockpicking, as I am very beginner in this field, but here we are. Context time A friend explained me he wanted to prepare his summer vacation in his motorh...

Update I finally updated this fuzzer to give it cleaner output and additional parameters, mostly inspired by ffuf. The new options include HTTP parameters and filtering options, bringing the fuzze...

Earlier this week I worked against a TryHackMe room called Hack Smarter Security. This room is pretty interesting, but I won’t write a full writeup, there is already enough of them. Instead I want...

At work, we use an internal software from another department. This software receives, processes and store data into a local MySQL database ; this data in itself is very useful, but the software doe...