Elweth
315 posts
Elweth retweetledi
You may know that one guy in high school who showed up at every party without being invited? Well, that was me. I always wondered whether there was an internet version of the same thing
internethandout.com/post/featherjs
English
Elweth retweetledi
🚨 RCE in #Livewire (CVE-2025-54068)!
Our specialists uncovered a critical flaw allowing remote code execution without the APP_KEY, exploiting Livewire’s hydration mechanism + PHP’s loose typing.
🔗 Patch now! (v3.6.4+)
synacktiv.com/en/publication…
English
Elweth retweetledi
Last month at #codeblue 2025, our expert Valentino discussed the internals of Kindle devices and unveiled an audiobook vulnerability he discovered.
Missed it? It's not too late! Join us tomorrow at #BHEU 2025 for a very novel briefing📚
#dont-judge-an-audiobook-by-its-cover-taking-over-your-amazon-account-with-a-kindle-48836" target="_blank" rel="nofollow noopener">blackhat.com/eu-25/briefing…
English
SQL Injection #bugbounty
https://example. com/product.php?id=1
Append a single quote (') to the
URL:http://example. com/product.php?id=1'
If an error message like SQL syntax error appears, the input is vulnerable.
#infosec #cybersecurity #bugbounty #bugbountytips
English
Elweth retweetledi
Elweth retweetledi
New Research by @siunam321! - lab.ctbb.show/research/crlf-…
CRLF Injection → Nested Response Splitting (CSP gadget). Inject \r\n\r\n in headers to push HTML into the body and bypass script-src 'self'.
English
We are reaching 6 BILLION searchable items across all our combined datasets!
And it keeps growing... 😇
English
Elweth retweetledi
Big update: Subdomain enumeration now uses separate quotas for each plan!
This means MORE data for the same price. Plus, our free tier still lets you discover hundreds of subdomains monthly - no payment required.
Check out the documentation docs.profundis.io/api/subdomain-…
#bugbounty
English
That was amazing ! A very nice collab with @cosad3s !
Finally hitting the top 1 😇
YesWeHack ⠵@yeswehack
The hunt is over in Le Loft – and the final scores of our #LHE are in! Hats off to all participants, and in particular to our top 3: 🥇 @aituglo 🥈 @cosad3s 🥉 @SpawnZii A huge thanks to @_leHACK_ 🙌 👀 Check out the final leaderboard: event.yeswehack.com/events/lehack-…
English
There we go, after 3 years of work, endless nights of dev and a truckload of coffee. We are finally releasing the biggest project we've done in our entire life.
I hope you will like it !
Profundis.io@profundisio
Profundis.io is live! Quickly uncover DNS records, subdomains, hosts, and their historical data directly via your browser. No noise, just the data you need for asset discovery and security research. Explore now: profundis.io
English
Elweth retweetledi
Le prochain meetup aura lieu ce lundi 02/06👾
Au programme :
- L’ADCS post-certifried, la fin de la easy win ? @Prepouce_
- Targeting postMessage vulnerabilities by @Elweth_
📍Boulangerie Bar - 02/06 à partir de 19h
(Salle du bas)
#Cyber #infosec
Français
Elweth retweetledi
Enjoyed CTF10K? We’re back.
🎯 #CTF20K – After the success of CTF10K, we're doing it again: the ultimate solo challenge, open to all skill levels, to celebrate Root-Me hitting 20K Discord members!
📅 May 10, 10:00 CEST – May 11, 23:59 CEST
💻 Pwn, Crypto, Web, Reverse, Misc…
🏆 Lots of prizes, lots of glory
🔗 ctf20k.root-me.org
English
Elweth retweetledi
The #FCSC2025 ended yesterday, and my write-ups are now available here 👇
mizu.re/post/fcsc-2025…
Btw, like every year, all the challenges have also been added to hackropole.fr! 🚩
1/2
Kévin GERVOT (Mizu)@kevin_mizu
This year again, with @BitK_, we've made the Web challenges 🚩 The CTF is solo and lasts 10 days, if you have some time, please give it a look 😁 Btw, even if you're not doing Web challenges, there are 100+ challenges in various categories, you should find something you like!
English
During last week, I've played FCSC2025 and managed to reach first place in the web category !
I've written two writeups this year: one about pwning a Chrome extension, and another about a PostgREST service.
worty.fr/post/writeups/…
worty.fr/post/writeups/…
Enjoy the read !
English
Elweth retweetledi
Slides of my BSides Seattle presentation about how to bypass the Content Security Policy
nzt-48.org/slides/how-to-…
@bsidesseattle @SecurityBSides #BSidesSeattle #BSidesSeattle2005
English
Elweth retweetledi