Alexandre ZANNI
InformationRoom#Name: CheckmateProfile: tryhackme.comDifficulty: EasyDescription: Exploit weak password practices across Marco’s internal systems to achieve full compromise.Write-upOverview#Install tools used in this WU on BlackArch Linux:sudo pacman -S legba cewl cupp john ruby var ctx =...
Alexandre ZANNI
InformationRoom#Name: SupportProfile: tryhackme.comDifficulty: MediumDescription: Pentest the Support Ops platform to exploit vulnerabilities and achieve RCE.Write-upOverview#Install tools used in this WU on BlackArch Linux:sudo pacman -S nmap ffuf legba curl john var ctx =...
Alexandre ZANNI
InformationRoom#Name: RecruitProfile: tryhackme.comDifficulty: MediumDescription: Infiltrate Recruit's new portal. Map the site, hunt for flaws, and gain unauthorised accessWrite-upOverview#Install tools used in this WU on BlackArch Linux:sudo pacman -S curl var ctx =...
Alexandre ZANNI
InformationRoom#Name: Capture!Profile: tryhackme.comDifficulty: EasyDescription: Can you bypass the login form?Write-upOverview#Install tools used in this WU on BlackArch Linux:sudo pacman -S ruby var ctx = document.getElementById('chart3792').getContext('2d'); var options = { type:...
Alexandre ZANNI
InformationRoom#Name: OverpassProfile: tryhackme.comDifficulty: EasyDescription: What happens when some broke CompSci students make a password manager?Write-upOverview#Install tools used in this WU on BlackArch Linux:sudo pacman -S nmap wget ffuf curl htmlq hydra john ruby openssh var ctx =...
Alexandre ZANNI
Write-up#Write-up pour le défi Dojo #44 - Surveillance du matériel créé par BrumensYWH.La solution officielle publiée par YesWeHack se trouve ici.Ci-dessous, vous trouverez ma solution qui a été retenue comme gagnante en termes de qualité.Code#Code du défi (Ruby) :require 'erb'require 'cgi'require...
Alexandre ZANNI
InformationRoom#Name: Lesson Learned?Profile: tryhackme.comDifficulty: EasyDescription: Have you learned your lesson?Write-upOverview#Install tools used in this WU on BlackArch Linux:sudo pacman -S nmap legba var ctx = document.getElementById('chart7275').getContext('2d'); var options =...
Alexandre ZANNI
InformationRoom#Name: BillingProfile: tryhackme.comDifficulty: EasyDescription: Some mistakes can be costly.Write-upOverview#Install tools used in this WU on BlackArch Linux:sudo pacman -S nmap nuclei ffuf pass-station metasploit var ctx =...
Alexandre ZANNI
InformationRoom#Name: Bypass Disable FunctionsProfile: tryhackme.comDifficulty: InfoDescription: Practice bypassing disabled dangerous features that run operating system commands or start processes.Write-upOverview#Install tools used in this WU on BlackArch Linux:sudo pacman -S nmap ffuf...
Alexandre ZANNI
Information#CTF#Nom : BreizhCTF 2k25Site web : www.breizhctf.comType : Sur site — France — RennesFormat : JeopardyWeb - CurlMania#Vous n'avez qu'une seule chose à faire, suivre les instructions...Auteur : MikaLe site https://curlmania.ctf.bzh/ nous donnera le flag si nous réussissons à envoyer une...
brakmic
Tweet I am writing this article as a kind of follow-up to the previous one where I described a deployment comprising an Angular app, a BFF (backend for frontend) based on Express.js, and a Keycloak server. I won’t go into too much detail as this has been described there already, so if you have...
brakmic
Tweet In this article, we’ll use the BFF (Backend for Frontend) pattern to build a secure system comprising a web app, a Keycloak server, and a dedicated backend service that brokers authentication flows between them. Our goal? Design an application that never stores sensitive data in the...
Alexandre ZANNI
InformationRoom#Name: New York FlankeesProfile: tryhackme.comDifficulty: MediumDescription: Can you, the rogue adventurer, break through Stefan's defences to take control of his blog!Write-upOverview#Install tools used in this WU on BlackArch Linux:sudo pacman -S nmap curl rustpad...
Alexandre ZANNI
SaisonÉpisode15SpotifyDeezerYoutubeYoutube MusicAmazon MusicGoogle PodcastApple PodcastPodcast IndexpodCloudPodchaserpodtailPodcasts FrançaisVodioSpreakerLexique#PdC - Preuves de Concept - Production d'un code source permettant de prouver la présence ou l'exploitabilité d'une vulnérabilité dans un...
Alexandre ZANNI
SaisonÉpisode14SpotifyDeezerYoutubeYoutube MusicAmazon MusicGoogle PodcastApple PodcastPodcast IndexpodCloudPodchaserpodtailPodcasts FrançaisVodioSpreakerNotes#Gitlab en bref :forge logicielle (gestion du code source, intégration et déploiement continue, collaboration, etc.)beaucoup déployé en...
Technorage
Learn why Svelte matters and if you should you care about it