A geek. What else ? I tweet things I read. #scapy #networking #security
Paris, France
- Tweets 28,224
- Following 1,021
- Followers 2,782
- Likes 11,366
Guillaume Valadon retweeted
#Podcast #Cybersécurité
Épisode #552 consacré aux fuites de clés privées, avec @guedou et Gaëtan Ferry
nolimitsecu.fr/fuites-de-cle…
8
4
1,105
AI Agent Security: Six Controls From Nine Real Incidents
blog.gitguardian.com/ai-agen…
2
2
298
Guillaume Valadon retweeted
1,535 potential bugs found, 1,017 awaiting patches, 326 fixes open upstream, 192 merged.
Since Aug 4: +398 bugs, +46 merged, 55 codebases under review, and scapy has overtaken vllm as the most-reported codebase in Patch the Planet.
trailofbits.com/patch-the-pl…
1
12
36
4,779
Guillaume Valadon retweeted
I bought a Fable dataset from one of the top Chinese LLM routers yesterday.
With just 6TB data, I can take over 7 Chinese/CIS gov entities & 19 top Chinese firms like Xiaomi, Huawei, NIO, Minimax using SSH keys, VPN configs, Aliyun keys, GitLab tokens sent to the router.
26 LLM routers are secretly injecting malicious tool calls and stealing creds. One drained our client $500k wallet.
We also managed to poison routers to forward traffic to us. Within several hours, we can directly take over ~400 hosts.
Check our paper: arxiv.org/abs/2604.08407
272
1,043
9,623
3,792,477
Guillaume Valadon retweeted
🔐 Data encryption in Laravel environments is based on one secret: the APP_KEY. Our ninja @_remsio_ studied the impact of its leakage on the internet during an entire year.
synacktiv.com/en/publication…
2
38
89
8,925
Guillaume Valadon retweeted
Sacre BLE!
Fuzzing Bluetooth Low Energy GATT and annoying your colleagues for fun and silence
Let Baptiste Boyer show you the way
blog.quarkslab.com/bluetooth…
ALT Fighting the BLE Machine
2
26
75
11,088
Guillaume Valadon retweeted
Our 2024-2025 internships season has started
Check out the 3 new openings and apply for fun and knowledge!
(paid internships, fur coats not included)
blog.quarkslab.com/internshi…
ALT 3 interns at Quarkslab's secret lab doing extra cool internship things
18
29
6,164
Docker Zombie Layers: Why Deleted Layers Can Still Haunt You blog.gitguardian.com/docker-…
3
313
Guillaume Valadon retweeted
javascript How to extract urls,srcs and hrefs from all HTML elements in any website? Open DevTools and run
urls = []
$$('*').forEach(element => {
urls.push(element.src)
urls.push(element.href)
urls.push(element.url)
}); console.log(...new Set(urls))
#infosec #cybersec
3
94
442
27,147
Guillaume Valadon retweeted
Extracting liblockdown.dylib from visionOS dyld shared cache and running it
with a DBI on macOS?
Challenge accepted!
📖 Blog: romainthomas.fr/post/24-09-a…
🎞️ Demo: piped.video/watch?v=5L05OE5m…
⌨️ Code: github.com/romainthomas/visi…
23
66
4,703
Guillaume Valadon retweeted
You can find all the talks announced on the agenda: hexacon.fr/conference/agenda…
Again, a big thanks to the review committee for their contribution as well as everyone who took the time to submit a talk. 🙏
2
18
25
9,075
Guillaume Valadon retweeted
We are very excited to share our last research work: 𝐄𝐔𝐂𝐋𝐄𝐀𝐊, authored by Thomas Roche.
An electromagnetic Side-Channel Vulnerability in the ECDSA implementation of all Infineon security microcontrollers, notably impacting all YubiKey 5 Series.
ninjalab.io/eucleak/
12
115
273
84,492
Guillaume Valadon retweeted
📣 @MISCRedac sponsor PRESSE de l’édition
@_barbhack_ 2024 ! Vite votre exemplaire 🏃♂️🏃➡️
#barbhack24 @touloncongres
📷
3
4
833
Guillaume Valadon retweeted
Petit aperçu du numéro attendu en kiosque dès le 30 août prochain #cybersécurité #hyperviseur #vmescape #exploit #vmware #qemu
2
13
38
11,672
Guillaume Valadon retweeted
🏀 Le 3 points + faute de Strazel, à dix secondes de la fin, qui permet aux Bleus d'aller chercher la prolongation contre le Japon à Lille ! #RMCLive
11
46
15,467
Guillaume Valadon retweeted
Gros plan sur les techniques de contournement des #EDR dans notre nouveau numéro, disponible en kiosque, sur notre boutique (ports offerts) et/ou en lecture en ligne immédiate (Kiosk Online) => boutique.ed-diamond.com/en-k…
20
44
7,431
This is the first working PoC of a ~350 LoC pure Python eBPF loader that launches a pre-compiled eBPF program, retrieves per packet process information, and matches them with packets sniffed with Scapy 🤘
2
7
54
6,547
Guillaume Valadon retweeted
Not a good move by @vivatech. We all grow and improve together when we work as a community, I see that in the @quantum_village on a daily basis, thanks to @LargeCardinal and @V__Wave and scores of other community-minded people.
We'd really like it if the organisers of @VivaTech would reach out to the REAL organisers of @quantum_village (that is, @V__Wave and I) so that it didn't look like they are ripping us off... because it certainly appears this way. RT for reach to get some attention!
3
6
1,112