Latest news

Solving a challenge of multi-stage encoding using AI

By leveraging the power of the guess feature of `codext`

Posted on December 24, 2020

Recently, I participated to a CTF and got stuck on a steganography challenge. This seemed to be encoded multiple times and at least one step could be hard to guess. Once I found it, I decided to build my guess feature in codext using an AI algorithm of Graph Search... [Read More]

Transforming a Flat Script to a Tool with Tinyscript

Quick adaptation of a script found on GitHub in a tool based on Tinyscript for allowing to easily reuse it later

Posted on August 25, 2020

During a pentest engagement addressing a Pickle vulnerability, I found a Gist for making rotten Pickles. I decided to turn it into a Tinyscript tool for later reuse in other engagements. [Read More]

Building a Simple PDF Password Bruteforcer with Tinyscript

Quick scripting using Tinyscript for building a bruteforcer tailored to PDF password cracking

Posted on June 7, 2020

Our script simply consists of 4 parts: Shebang + imports Metadata Business logic Script’s arguments and business logic invocation [Read More]

How to mess with your Linux sysadmin

When `script` is used to log your actions

Posted on December 13, 2019

Recently, I noticed a process running script on a server for which I had to review the logs. As a reminder, this tool logs every command typed in a terminal but also its output. The running process was : [Read More]

DroneSploit at Black Hat Europe Arsenal 2019

Demonstration of the current capabilities of this brand new drone-focused pentesting framework

Posted on December 5, 2019

Our brand new drone hacking framework was presented at Black Hat Europe Arsenal on Dec 5th, 2019. It was a pleasure to demonstrate its basic features to a large audience. We hope to attract some contributors in a near future to develop modules for other models of drones ! [Read More]

RPL Attacks Framework at Black Hat Europe Arsenal 2018

Demonstration of the capabilities of our WSN RPL attack framework

Posted on December 5, 2018

Our brand new Wireless Sensor Network (WSN) hacking framework for attacking the Routing Protocol for Low-power and lossy networks (RPL) was presented at Black Hat Europe Arsenal on Dec 5th, 2018. It was a pleasure to demonstrate its basic features to an expert audience. We hope it will be useful... [Read More]