Ce qu'on ferait pas pour 25 points ! 🫣
cc @ph0wn@infosec.exchange @cryptax@mastodon.social 🫰
💌 Les Apprentis Soudeurs 💌
Remote
laluka
@laluka@infosec.exchange
mastodon 4.8.0-alpha.3+glitchSharing is Caring, Hacker, Eternel Learner, Cat! =^~^=
0 Followers
0 Following
33 Posts
Joined November 07, 2022
Hoy ⚔️
Next Stream : FrangiPh0wn CTF - What, How, Who, WriteUps! 💣
👉 Mardi 17 Fevrier à 21h Ft. @Cryptax , Miaou, YoyoChaud
👉 Join Live https://www.twitch.tv/thelaluka
👉 Discord Events https://discord.com/events/1133771735255236608/1471476449411076308
💣️Achivement Unlocked 💣️
Être disponible en format PAPIER ? Yes !
Dans le ZOOM Metiers-Cybersecurite par l'ONISEP !
lalu@offenskill, bientôt disponible dans vos meilleurs CDI et BU ! 🫰
J'en profite pour faire une -rare- communication pro :
- Refonte du site OffenSkill (pentests/code-audits/trainings) : https://offenskill.com/
- Pas mal de dispos en ce début d'année pour m'occuper de vos Infras et Backends Web & Cloud 😇
- @_p4st1s (X) & moi même attendons vos projets & besoins à @OffenSkillCorp (X) 🌹
Hoy ⚔️
Next Stream : GitSint - Github Tracking & Graphing for OSINT
Guests : Hokanosekai & Glider
When : Mercredi 3 Juin à 21h // ⚠️ *pas* Mardi ⚠️
Where : 🏡 is still at https://www.twitch.tv/thelaluka 💌
Replay de Mardi dernier ⬇️
En vous souhaitant une belle journée 🌻
Heya! 😼
Last Tuesday, Flora (twitch floratheexplorer_cyber) & I spent some time crafting, playing, and PoC'ind n-days.
Demo gods were clearly against us, but hey... We won. 😎 Wekan SSRF full read & Winrar unrar to RCE! 🔥
Today. is. SHIPPING DAY! 🥳
https://community.offenskill.com/
21h demain (mardi donc) @ https://www.twitch.tv/thelaluka
An... Encrypted PostCard ?
Not too long ago, a close friend sent me a postcard! 💌
It contained a quite specific message; here is the full story! 🌷
- Ok, the card is related to encryption. We have a QR code; what's inside??
- So we do have a PGP encrypted message, but where is the key??
I spent a few hours trying to make sense of the orange bars -> artifacts left by the postal service; they weren't there when sent...
Spent some time on steg & other QR codes & bars? Nothing too specific... Then WHERE?
At some point, I noticed really small, darker dots, like a marker changing direction leaving a dot of "ink," but no real text, nothing showing up... I asked my friend "Should I heat it or something like lemon juice inks?" and the quick response was "Nope, do not alter the postcard, things can be read with the physical object without destructive actions" or more like "NO DO NOT BREAK IT LMAO" 🙄
- So... There were hints of ink, and the physical object was needed to get the key... Nothing under the sun, nothing with my mobile phone flash, nothing... What if it's ink, but one that we can't see? I sent a "Hey, could this be UV light?" to my friend to not waste time -read "cheat"- on dead ends...
IT'S A MATCH!
Now the question becomes: How do you get UV light, without being a doctor, without buying an extra item you'll use once in your lifetime, etc...
I quickly thought about two options:
- 1: A friend of mine helped me fix a table by applying a specific resin that dries with UV light. Why not?
- 2: Drying with UV light... Like... Nail paint?? *calls gf's little sister to borrow her nail UV light*
One week passes, the UV lamp comes with a nice family weekend, and I can now read the key!! 🥰
BUT! (There's always a BUT...)
Nothing decrypts, why is this?
After a few variations attempted, it turns out my friend had a few drinks; remember kids, don't drink'n'encrypt for your own safety!
It was actually a new-line not well handled by CLI options, but pasting the new line in any UI gpg prompt worked! 👌
Thanks for reading, and Thanks Kelia for the kind thoughts! 💟
Bloup ! Replay Time ! 🌷
Avec une *hypothétique* partie 2 en vue, où on introduirait un stack-overflow là où il n'y en avait en fait pas ( _oups ), pour voir si nos stratégies de contournement de sécu fonctionne ?
Sounds appealing or meh ? 🤔
La bise all, bon presque week-end & see-you @breizhctf@bird.makeup soon ! 💌
Stream is UP !
Topic : PostScript, Apache FOP, N/0-dayzzZ
Ft. @Icare1337 @truffzor @sigabrt9
https://www.twitch.tv/thelaluka
Stream is UP!
Fin estimée 23h30 🥱
https://www.twitch.tv/thelaluka
Mardi dernier, on écoutait @Icare1337 @truffzor et @sigabrt9 nous parler d'exploit PostScript, que ce soit en code, en pwn, en web, ou en client lourd 😏
Et vous... Vous reprendrez bien une tasse d'injections GS ? ☕️
Stream is UP !
https://www.twitch.tv/thelaluka
Bloup 🫧
Stream is UP!
https://www.twitch.tv/thelaluka
Quick Stream (donc pas ce soir) avec @NoobosaurusR3x@infosec.exchange ! 💌
https://www.twitch.tv/thelaluka
Hoy hoy !
On se retrouve toujours demain soir (Mardi 21h) pour un stream d'exploitation PHP / Laravel !
⚠️ CEPENDANNNNNNT ⚠️
Petit article de recherche @OffenSkillCorp (X) released ! 💣️
https://thinkloveshare.com/offenskill/enketo-auth-bypass-ssrf-xxe-and-file-read/
Hoy ! ⚔️
Prochain stream Mardi 10 à 20h ! 🪚
⚠️ c'est 1h plus tôt que d'hab ET en anglais 🌎️
Au programme ?
PoC de N-day Ft. FloraTheExplorer! 💌
https://www.twitch.tv/floratheexplorer_cyber
https://www.twitch.tv/thelaluka
Yo.
Bien remis du FIC / EC2 / Taff ? 😉
Last week, on a lancé un claude en roue libre sur @digitalocean et vous l'avez prompt'tué.
Gg ! On remet ca ??
La rediff > https://www.youtube.com/live/_KCU7i5pXv8
LaluLog 01 - Life Update, 30 ans, Bug Bounty, Pentest, AI, CTF, C'est le bordel, comment rester zen ? 🌿
Hoy ⚔️
Prochain stream ce Mardi 27 Janvier à 21h 🔄
Topic : Ne plus JAMAIS écrire de rapport de pentest ❤️🔥
Ft. @milou__sh (@Tiburce_G @critbugchungus) et @vulnotes (@hiippiiie)
As always > https://www.twitch.tv/thelaluka
Gentle memo à la vue de l'engouement : C'est ce soir, rdv 21h ! 😏
Stream is UP! ⬆️
https://www.twitch.tv/thelaluka
Hoy ⚔️
Next Stream : Live Laravel LiveWire Lpwnage 💣
👉 Mardi 10 Fevrier à 21h Ft. @worty@infosec.exchange & @_remsio_@bird.makeup
👉 https://www.twitch.tv/thelaluka
👉 Rappel via Discord Events https://discord.com/events/1133771735255236608/1468573565988376606
Next Stream 👉️ 5 p.m. CEST on Monday 20th of July in E.N.G.L.I.S.H. 🧨
We'll gather with @TheSytten@mastodon.social (Staff) & @aituglo@bird.makeup (Ambassador) to chat about the latest @caidoio@bird.makeup Releases, Plugins, and Adoption of the Agentic Era!
- FYI 1 : Not the usual date & time (France & Quebec)
- FYI 2 : Not the usual language (English for abroad friends)
- FYI 3 : Have a nice say you sexy little bug 😘
- FYI 4 : Go update your wordpress yo, shit's on fire! sigh
Seeya at https://www.twitch.tv/thelaluka 💝
Last Stream Replay on V8 Browser Exploitation Ft. Valekoz & W00dy ❤️🔥
https://youtube.com/live/yMiX94TJ6Ek
Désolé mon son était dégueu (fail de micro, faites signes live si ca arrive 🙏), MAIS anyway les invités ont un bon son et c'est eux qui prez donc ca passe 👌
Woosh le replay 🪄 Sourcé, chapitré, touusa ! ✌️
cc @milou__sh @vulnotes 💌
Hoy ! ⚔️
On se retrouve Mardi 12 Mai à 21h pour.. 😏
Péter du V8 en compagnie de Valekoz et W00dy 💣
https://www.twitch.tv/thelaluka
Et xoxo pour vos très nombreux retours sur la dernière vidéo ! 💌
Woosh HOT replay de mardi dernier ! 💌
cc @worty@infosec.exchange @_remsio_@bird.makeup @synacktiv@bird.makeup 🍀
Stream is UP !
Fin estimée ~> 23h30
https://www.twitch.tv/thelaluka