n0s @n_zero_s

... nzeros.me Joined January 2022

Tweets

24
Followers

117
Following

663
Likes

156

M0ngi @M0ngii

10 months ago

Dropping my kernel exploitation notes I've been working on since I first started researching in this I'll keep updating the repo so please, let me know if there's smthg unclear or must be fixed You'll also find future writeups & challenges authored there. github.com/M0ngi/Kernel-E…

3 7 20 822 9

Matan Berson @MtnBer

a year ago

Just wrote a ~2.5 page blog post on Client Side Path Traversal, covering what CSPT is, why it can be so impactful, some advanced exploitation and WAF bypass techniques, and a bug which I found in a live hacking event (redacted ofc) matanber.com/blog/cspt-leve…

8 110 389 36K 328

c0m0r1 @c0m0r1

a year ago

I'm speechless

31 239 2K 510K 720

Download Image

n0s @n_zero_s

2 years ago

I contributed with 7 web challenges for #BHMEA2023 this year, hope you like them! Congrats to @Strellic_ for blooding today’s insane chall 🤯

1 0 28 3K 1

Download Image

Kévin GERVOT (Mizu) @kevin_mizu

2 years ago

Excited to launch my first browser extension, DOMLogger++! Now available for both Firefox and Chromium! 🎉 DOMLogger++ allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations 🔥 Check it out 👇 github.com/kevin-mizu/dom… 1/5

9 106 341 42K 208

Kévin GERVOT (Mizu) @kevin_mizu

2 years ago

I wasn't knowing what to do yesterday night so, I decided to create an XSS challenge 🚩 There is nothing to win, I made it just for fun! If you want to try it out, click on the link below 👇 mizu.re/challenges/xss… The final goal it to pop an alert without any interaction 🔥

5 23 102 24K 39

Download Image

HackGit @hack_git

2 years ago

CVE-2023-38831 Winrar exploit generator github.com/b1tg/CVE-2023-… #cve #infosec #pentesting

4 302 945 87K 339

Download Image

hakim @hakivvi

2 years ago

just wrote about an issue in flask_sock package which allows executing HTTP requests in the same WebSocket stream, which effectively bypasses frontend server rules, it was part of a CTF challenge at Securinets CTF: repzret.blogspot.com/2023/08/analyz….

0 2 2 299 0

Log_s | Léo Desmonts @L0g__s

2 years ago

Here is a write-up of a fun web challenge from the @SecuriNets CTF I worked on with @xanhacks and @0xThaz, featuring CRLF injections and service worker cache poisoning. log-s.xyz/posts/securine… Enjoy 😁

2 9 22 5K 1

n0s @n_zero_s

2 years ago

I'am dropping a writeup for Two tasks released at @SecuriNets CTF Quals 2k23. 0 CSP: XSS through Service worker cache poisoning and CRLF injection. Mark4archive: Race condition, Websocket request smuggling, LFI, Deserialization -> RCE. nzeros.me/2023/08/08/sec…

2 12 39 3K 9

M0ngi @M0ngii

2 years ago

I'll drop this here. An analysis for exploiting _dl_fini function in libc 2.31 and 2.35 In 2.31, we had plenty of attack points to control the execution flow. In 2.35 __rtld_lock_lock_recursive became in a read only area so we have less options. Enjoy. github.com/M0ngi/CTF-Writ…

0 11 27 2K 8

SOter14 Team @SOter14Team

3 years ago

We played bi0s CTF this weekend and got 8th, enjoyable and creative challenges. Forensics was really missed though! Congratulations to our members and the other teams, and thanks to @teambi0s for the CTF ❤️ #ctf #cybersecurity #bi0sctf

teambi0s @teambi0s

3 years ago

0 18 54 13K 0

Download Image

0 3 6 643 0

SOter14 Team @SOter14Team

3 years ago

We are happy to announce that we finished 10th in the NahamCon EU 2022 CTF! Thanks @NahamSec, @Justhackingco, @_JohnHammond, and everyone involved for the great challenges and the super infrastructure. #NahamCon2022EU

0 4 10 962 0

Download Image

SOter14 Team @SOter14Team

3 years ago

We finished 14th globally and 1st in MENA in @CSAW_NYUTandon CTF organised online last weekend, among 900 academic and international teams! We can't wait to participate in the finals at @NYUAbuDhabi Kudos to everyone in the team for their dedication and huge efforts ❤️ #CSAW #CTF