Shiro retweetledi
For our first talk, Ambre presents her previous research about firmware images identification #SSTIC2025
English
Shiro
89 posts
Shiro
@ShiroPycatchown
Vulnerability researcher @Synacktiv, pwn and reverse enthusiast; doing some CTF on my freetime @ @RMUBYGG
Katılım Eylül 2014
166 Takip Edilen219 Takipçiler
Shiro retweetledi
🔥Introducing Arion🔥
A high-performance C++ framework for emulating executable binaries.
Based on Unicorn and inspired by Qiling, Arion offers an easy-to-use interface and super low execution times making it a great ally for fuzzing or other applications.
github.com/h311d1n3r/Arion
English
Shiro retweetledi
The FastCGI library, mostly used in embedded equipment, was vulnerable for decades to an integer overflow over the IPC socket in 32-bits architecture. Check out how @ShiroPycatchown found it and exploited it for RCE!
synacktiv.com/en/publication…
English
Shiro retweetledi
📢 Workshop #hardware confirmé !
➡️ @Phil_BARR3TT
🗓 "Introduction au Car-Hacking : comment construire sa "Car in a Box""
👉 barbhack.fr 🚗🏴☠️⚒️
#car #hacking #ot #iot #barbhack23
Français
Shiro retweetledi
🏴☠️Hackers ! Speakers ! Sponsors !
🏁 Ouverture généraleeeee 🏁
🎫 Billets. 🔊CFP 🎁 Kit sponsors
>> 26 août Barbhack 2023 <<
🏝 barbhack.fr/2023/fr/
#hacking #conference #barbhack23 cc @asso_hzv
GIF
Français
@Synacktiv @_p0ly_ @vdehors Really looking forward the blogpost/conference if it's planed, amazing job
English
After having finished their exploit in an hotel room, @_p0ly_ and @vdehors successfully compromised the Tesla Model 3 infotainment through bluetooth and elevated their privileges to root!
Combined with the previous entry, this could have been a full chain to take over the car!
TrendAI Zero Day Initiative@thezdi
👀👀👀👀👀
English
Shiro retweetledi
Le site de la THCon fait peau neuve pour la prochaine édition qui se tiendra du 20 au 21 Avril ! N'hésitez pas à y faire un tour pour prévoir votre venue ! 🥰
@ToulouseHacking
THConvention@ToulouseHacking
Happy new year ! 🎉 Our website is now updated !!! Quick reminder for our Call For Paper ! If you are interested in being a speaker for the THCon 2023 the 20th or 21th of April, feel free to submit your work to our CFP on our Website. 📝 #THCon2023 #CyberSecurity
Français
Si des gens vous disent qu'une version NSFW de ce logo a existé, c'est bien évidemment faux.
RootMeUpBeforeYouGoGo@RMUBYGG
We had the chance to team up with some friends of @AperiKube and @navalgroup for this edition of #leHack CTF and managed to win the first place ! 🥳🤘 Thanks @_leHACK_ for the whole event and congratulations to the Capgemini alliance and @Synacktiv ! See u next year
Français
Shiro retweetledi
We had the chance to team up with some friends of @AperiKube and @navalgroup for this edition of #leHack CTF and managed to win the first place ! 🥳🤘
Thanks @_leHACK_ for the whole event and congratulations to the Capgemini alliance and @Synacktiv !
See u next year
English
Shiro retweetledi
Toute dernière place étudiante récupérée, surfin' to the limits
Barbhack@_barbhack_
🔥 Places BarbHack 2022 : GO ! 🎟 Étudiants / Pros / Soutiens 🎁 Billet = 1 Entrée + 1 T-shirt + Repas midi + BBQ soir + Boissons + Conférences + Rumps + CTF + Workshops ... 🏖 Toulon, le 27 août 2022 🏴☠️ #hzv @asso_hzv #hacking #barbhack22 ▶️ helloasso.com/associations/h…
Français
Terminé second dans ma spécialité derrière l'indétrônable @voydstack durant cette édition de l'FCSC.
Voici deux writeups pwn écrits pour être compréhensible par des semi-débutants (enfin je l'espère).
github.com/Pycatchown/wri…
github.com/Pycatchown/wri…
Français
Shiro retweetledi
@TheLaluka @podalirius_ 'don't want to sound mean though, I just disagree with the idea, I think it could be a good one for specific cases, but not for a generic shellcode
English
@ShiroPycatchown @podalirius_ Well, might be a bit longer to generate the shellcode, but once you have it, it can be replayed anywhere independently from the shell type, so "a bit more portable", given you have python..
But you're right, the problem is just moved away :p
English
[thread] Isn't it annoying when you have a working shellcode, but the wrong rights in the spawned shell ? Newer versions of UNIX shells no longer transfer SUID rights by default. Here is the shells affected by this, as well as a new shellcode for tclsh:
podalirius.net/en/articles/un…
English
@TheLaluka @podalirius_ Well, portable... You got to have the right python path, the right version for the binary, and hope for it to be there. While when you have a shell, if you want it to be persistent, well, you have a shell, so just write the commands
English
@TheLaluka @podalirius_ Honestly; that still sounds longer than just adding a setresuid call on the shellcode, or maybe I did not completely understand what you meant.
English
@podalirius_ Why copy it ? Just add the setuid bit on the main python instance, and then have a python snippet ready to spawn a clean shell and remove its own setuid bit ?
English
Shiro retweetledi
👏Félicitations à notre #pentester Baptiste qui termine sur la seconde place du podium avec son équipe RootMeUpbeforeyouGoGo à l'occasion du #BarbhackCTF lors du #barbhack21 ce week-end à @Toulon 😎
#barbhack #CTF #hacking
Barbhack@_barbhack_
📣 Gagnants #CTF BarbHack 2021 ! 🏅Synacktiv 🥈RootMeUpbeforeyouGoGo 🥉NavHack 👏 Félicitations à tous rdv en 2022!
Français
Shiro retweetledi
We end up #2 of the Barbhack's CTF! Really proud of this result 🤘
Big GG to all the other teams, last hour was insane
Thank you @_barbhack_ for this awesome event, we had a ton of fun meeting a lot of wonderful hackers and with the great confs/workshops. See u next year ❤️
Barbhack@_barbhack_
📣 Scoreboard #CTF #BarbHack21 👏 Bravo à toutes les #teams 💪 🏴☠️ A vos RT, Like et commentaires 🤓 Dites nous ce que vous avez pensé du #ctf 2021 #teamctf
English
Shiro retweetledi
