mastodon 4.8.0-alpha.3+glitchWeb developer, script kiddie, and security enthusiast
We're back home after another amazing @hackfest@infosec.exchange . My son and I had a great time attending talks, watching the social engineering contest, and participating in the Hackfest Generation village.
A huge thank you to the organizers, volunteers, speakers, and sponsors. We're already looking forward to next year. My wife and my other son might even come with us this time.
Every month (or so), I host a @hackthebox meetup with the @hackfest@infosec.exchange community. I share my screen and we hack a machine together, live. The first Wednesday of the month is in French, the second in English.
The format is beginner-friendly: we tackle Easy or Medium rated machines. Since I only pick machines I've already completed, we avoid getting stuck for too long — the goal is to learn and improve together.
Interested? Sign up on Meetup (https://www.meetup.com/hack-the-box-meetup-quebec-qc-canada/) and join the #mob-hacking-nights channel on the Hackfest Discord (https://discord.com/channels/724131514161561653/1417514329355325511).
Tonight is the French edition — we're tackling the RedPanda (https://app.hackthebox.com/machines/RedPanda) box. See you there! Next week is the English edition — same box, same format, same fun. Hope to see you too!
I'm throwing away my conference badges I kept for many years. Looking at the pile of lanyards, it looks like I went to quite a few conferences.
I also have a few electronic badges that are still in a box somewhere.
@NorthSec@infosec.exchange was awesome again this year. I learned a ton and I'm already looking forward to next year.
A huge thank you to everyone involved in making the event. You folks rock!
And thanks to my CTF team. It's always fun competing with you.
I published my first @NorthSec@infosec.exchange CTF write up of the year. For the LED Display Controller track by Marc Olivier Bergeron. It was a fun one.
I published my walkthrough for Code on HTB. In this box I got a shell by exploiting an application that allowed running Python code. Then I cracked a password and used a backup utility to elevate my privileges up to root.
I published my walkthrough for Artificial on #HackTheBox. In this box, I used Remote Code Execution to get a shell, cracked some password hashes, and exploited a backup application to elevate my privileges.
I'm also getting rid of all those elephpants. We need to get rid of all the clutter.
J'ai beaucoup aimé l'épisode panel du BSides de @polysecure@infosec.exchange . Les panels sont toujours excellents.
Et quel excellent titre: Les boeufs sont lents mais la terre est patiente.
Par contre j'ai du avoir l'air un peu fou à rire tout seul au gym.
I published my walkthrough for Planning on #HackTheBox.
In this box, I had to exploit a known vulnerability in Grafana to get a shell, find some credentials to get a user connection. And finally exploit an application to manage cron jobs to get root.
J'aime beaucoup de dernier épisode de @polysecure@infosec.exchange avec @mrun1k0d3r@bird.makeup https://polysecure.ca/posts/episode-0x615.html#9fda03be