Worty @_Worty

Organizer of @HeroCTF || ctf w/ @FlatNetworkOrg || TeamFR 2021, 2022 & 2025 🇫🇷 || 🥷 @Synacktiv Joined March 2020

Tweets

1K
Followers

3K
Following

556
Likes

4K

GreHack @GrehackConf

a week ago

Hi, You've all been waiting for this, and many of you have asked us about it, so mark your calendars because here is the ticket opening date - Wednesday, October 1, at 10 a.m. UTC+2 The workshops will be announced in the days leading up to the opening. As a reminder, be quick!

0 7 12 1K 1

GreHack @GrehackConf

3 weeks ago

📢 #GreHack25 program release! Starting today, we will be announcing this year's program every day! Are you ready for a new year with amazing speakers? Here's the first one: 👤 Aymeric Palhière from @Synacktiv ➡️ Smart Charger, Dumb Idea? See you tomorrow for a next talk 🔥

2 17 38 6K 1

ASIS-CTF @ASIS_CTF

3 weeks ago

A huge shoutout to all the brilliant minds who designed the challenges for the #ASIS #CTF Quals 2025! @ptrYudai @arkark_ @kevin_mizu @_Worty We couldn't have had such an engaging and tough competition without your incredible work. Hope to see you all in our future events!

1 5 38 4K 0

ASIS-CTF @ASIS_CTF

3 weeks ago

⏰ Clock's ticking! 🚨 The #ASIS #CTF Quals 2025 is NOW LIVE. 🚀 🚀 🚀 24 hours to go. Dive in and show us what you've got! Have fun! asisctf.com/register

0 4 9 852 1

NULLCON @nullcon

3 weeks ago

Exploiting LiveWire by Remi & Pierre from @Synacktiv team ! #nullconBerlin2025

1 9 57 4K 5

Download Image

NULLCON @nullcon

3 weeks ago

💡 When convenience meets exploitation… #Livewire makes building dynamic apps seamless, but its unmarshalling mechanism opens the doors to #RCE @_remsio_ & @_Worty shows how attackers can weaponise the #APP_KEY & how the updated laravel-crypto-killer 👉nullcon.net/berlin-2025/sp…

0 8 24 4K 3

Download Image

Worty @_Worty

3 weeks ago

I made a web challenge for this CTF, don’t hesitate to try it ! :D

ASIS-CTF @ASIS_CTF

3 weeks ago

I made a web challenge for this CTF, don’t hesitate to try it ! :D

0 3 21 6K 2

0 1 24 1K 1

Kévin GERVOT (Mizu) @kevin_mizu

3 weeks ago

DOMLogger++ v1.0.9 is now out and available! 🎉 This update fixes a lot of issues, including the historical DevTools bug on Chromium 🔥 It also brings full Caido session handling, which is going to be useful in the near future! 👀 👉 github.com/kevin-mizu/dom… 1/2

2 29 151 7K 46

Download Image

Noobosaurus R3x 🦖 @NoobosaurusR3x

4 weeks ago

@Formation_bzh annule à J-15 la 1re année BTS SIO SLAM (11 admissibles). Une honte ! Pour les jeunes : nouvelle école à trouver, alternance, logements... Traitement inhumain de ses jeunes considérés comme des lignes d'un tableau excel. On attend des réponses. #ESNA #UIMM

1 13 29 2K 0

pwnii @pwnwithlove

a month ago

just dropped a new article about my current way of setting up an android bug bounty lab ヾ(˶ᵔ ᗜ ᵔ˶) it’s the setup I use myself, and I’ve found nice web bugs on android apps with nothing more than a rooted pixel, frida, and some traffic interception yeswehack.com/learn-bug-boun…

5 44 170 9K 120

YesWeHack ⠵ @yeswehack

a month ago

Want to hack mobile applications? 📱 We’ve just published the ultimate guide to building an Android #BugBounty lab with emulators, real devices and proxies (featuring Genymotion, Android emulator, Magisk, Burp, Frida & Medusa) 👇 #BugBountyTips yeswehack.com/learn-bug-boun…

1 35 148 10K 126

YesWeHack ⠵ @yeswehack

a month ago

In the latest #TalkiePwnii, @pwnwithlove takes on a Dojo challenge about predictable tokens & YAML deserialization in Python 🐍 From predictable tokens to achieving RCE via unsafe YAML load - watch the full exploit 👇 #BugBountyTips #YesWeRHackers youtu.be/kSiuk2s-GpA

0 7 24 10K 5

Swissky @pentest_swissky

a month ago

MidnightFlag CTF 2025 Finals - JavaNote - @_Worty worty.fr/post/writeups/…

1 3 15 2K 11

James Kettle @albinowax

2 months ago

The whitepaper is live! Learn how to win the HTTP desync endgame... and why HTTP/1.1 needs to die: http1mustdie.com

20 248 750 78K 335

ESN'HACK @esnhack

2 months ago

Les précommandes devaient s’arrêter, mais nous n'avons pas encore atteint le nombre nécessaire pour bénéficier du tarif de groupe. Elles sont prolongées jusqu’au 11/08. On compte sur vous ;) Chaque commande ou partage compte. Merci pour votre soutien. > helloasso.com/associations/e…

0 2 4 878 0

Download Image

Kévin GERVOT (Mizu) @kevin_mizu

2 months ago

@Rhynorater @_Worty found something similar 2 (or maybe 3?) years ago, where a simple git clone, unzip, and so on is enough to execute code on your machine if you're using zsh. Without zsh, any git command in a git repo is necessary as well! And it still works x)

4 2 36 4K 8

YesWeHack ⠵ @yeswehack

2 months ago

In the latest #TalkiePwnii, @pwnwithlove dives into Hex Color Palette, a Dojo challenge she created 🎨 From XXE exploitation to error-based file disclosure via parameter entities in lxml - learn how to use local DTD to exfiltrate sensitive files👇 youtube.com/watch?v=Npfi6i…

5 9 44 10K 16

Synacktiv @Synacktiv

2 months ago

The latest Synacktiv Summer Challenge was in 2019, and after 6 years, it's back! Send us your solution before the end of August, there are skills to learn and prizes to win 🎁 synacktiv.com/en/publication…

0 10 32 3K 7

Franso @Fransosiche

2 months ago

🚨 Une dépendance peut suffire à compromettre toute une entreprise 🎬 On revient sur l’attaque de dependency confusion qui a frappé Apple, Microsoft, etc. 🔍 + focus sur DepFuzzer avec les créateurs @_Worty & @Scouty__ 📺 youtu.be/UWrC0ok9_mc

2 10 21 2K 4

Download Image

Noobosaurus R3x 🦖 @NoobosaurusR3x

2 months ago

Guillaume Chouquet, fondateur et directeur de l'ESNA, viré de sa propre école par l'@Formation_bzh !!! Je suis consterné et en colère. C'est affligeant de prendre une telle décision quand on sait tout ce que le bonhomme a fait pour l'école et les alternants !