Magnussen @_magnussen_

#CTF player | Member of funcMyLife() magnussen.funcmylife.fr Joined January 2018

Tweets

112
Followers

112
Following

120
Likes

176

ACCEIS @acceis

3 years ago

Vulnérabilités : P3 + P4 + P5 = P1 ou comment voler des sessions utilisateur en enchaînant plusieurs vuln à bas risque : acceis.fr/transformer-de… 🐞Défaut de configuration de l’attribut domaine des cookies > prise de contrôle de sous-domaine > redirection arbitraire d’URL > XSS🐞

1 3 7 0 0

Download Image

ACCEIS @acceis

3 years ago

Pour une bière gratuite, notre expert @swuitch est prêt à tout 🍺 Il nous explique comment il a poncé une application #Java utilisant #JNI pour "camoufler" l'authentification. 👉 acceis.fr/frida-jni-et-8… #Frida #JNI #une86pourLucas

0 18 54 0 1

Download Image

Magnussen @_magnussen_

5 years ago

WU for Laboratory, easy Linux machine on @hackthebox_eu ! Find the git subdomain and create an account, Exploit Gitlab RCE & LFI (CVE-2020-10977) to get a shell, use gitlab-rails to reset admin password, abuse path variable with local script to get root funcmylife.fr/write-up/htb/l…

0 2 6 0 0

thbz @thbz__

5 years ago

Je profite de la trend Signal pour rappeler que Duckduckgo est un moteur de recherche vraiment pratique, surtout quand on fait de l'informatique. (thread)

1 6 33 0 2

Haax @Haax9_

5 years ago

Just pushed the latest update to my Infosec Cheatsheet (cheatsheet.haax.fr), adding some #OSINT tools & resources + other stuff. I had too much bookmarks waiting to be reviewed! Probably the last update to end this wtf 2020 year (:

0 4 12 0 1

Magnussen @_magnussen_

5 years ago

WU for Openkeys, medium OpenBSD machine on @hackthebox_eu ! Find swap files and bypass OpenBSD auth framework to retrieve user ssh key. Exploit xlock to privesc. funcmylife.fr/write-up/htb/o…

0 1 5 0 0

Magnussen @_magnussen_

5 years ago

WU for SneakyMailer, medium Linux machine on @hackthebox_eu! Probably one of the greatest box I've solved! Perform phishing campaign, upload a reverse shell through FTP, create a malicious python package to get SSH access, exploit Pip3 to get root funcmylife.fr/write-up/htb/s…

0 1 3 0 0

switch @swuitch

5 years ago

My write up for the DGhAck hardware challenge strange thing. With a little introduction to avr reverse for Arduino! 0xswitch.fr/CTF/dghack-202…

3 4 41 0 0

Download Gif

Remsio @_remsio_

5 years ago

Hey I worked on a cheatsheet after passing the OSCP, I decided to release it publicly even if it's far to be complete to motivate me to improve it even more, feel free to use it 😁 cheatsheet.remsio.com

0 3 26 0 1

Magnussen @_magnussen_

5 years ago

Write-up for Buff, easy Windows machine, on @hackthebox_eu ! Exploit Unauthenticated RCE on Gym Management System 1.0 and then exploit buffer overflow vulnerability on CloudMe to get Administrator access. funcmylife.fr/write-up/htb/b…

0 3 5 0 0

Magnussen @_magnussen_

5 years ago

Write-up for Tabby, easy Linux machine, on @hackthebox_eu ! Exploit LFI to get tomcat-users.xml, send a malicious War file to get reverse shell, crack ash password through zip file, create a privileged container with LXD to get root funcmylife.fr/write-up/htb/t…

0 3 6 0 0

thbz @thbz__

5 years ago

Writeup of HTB Blunder, a Linux easy box about web enumeration, password reuse and sudo CVE exploitation thbz.fr/writeups/htb_b…

0 1 3 0 0

Magnussen @_magnussen_

5 years ago

Write-up for Blunder, easy Linux machine, on @hackthebox_eu ! Find file with username, create custom wordlist with Cewl, exploit bf on Bludit, exploit CVE to get a webshell, find credz in php file, exploit sudo -u#-1 to get root funcmylife.fr/write-up/htb/b…

0 3 3 0 0

Magnussen @_magnussen_

5 years ago

Write-up for Cache, medium Linux machine, on @hackthebox_eu! Find HMS subdomain, exploit SQLi to find admin creds, exploit file upload to get a reverse shell, password reuse, retrieve password stored in memcached, exploit Docker to get root funcmylife.fr/write-up/htb/c…

0 4 10 0 0

noraj @noraj_rawsec

5 years ago

Admirer - Write-up - #HackTheBox blog.raw.pm/en/HackTheBox-… TL;DR: CTF-like box with a bit of code review for initial access (PHP) and EoP (python).

0 1 2 0 0

Download Image

Charlie Bromberg « Shutdown » @_nwodtuhs

5 years ago

🎉The time has come to give you all access to 𝗧𝗵𝗲 𝗛𝗮𝗰𝗸𝗲𝗿 𝗥𝗲𝗰𝗶𝗽𝗲𝘀 🥳 This project is aimed at providing guides on various hacking topics : AD, web, servers, *INT, SE, physical intrusion... It's far from over but I hope you'll like it 🙏 thehacker.recipes

7 100 256 0 51

Haax @Haax9_

5 years ago

Hey Twitter ! I just released another slightly different blogpost. This time, small #OSINT and #GEOINT investigation, about geolocating and tracking a flight ! It was kinda fun and I learnt many things. Have fun while reading and feel free to share! FR/EN haax.fr/fr/writeups/os…

0 21 37 0 3

switch @swuitch

5 years ago

my write up for alles CTF - pwnkemon (hardware) by @LiveOverflow 0xswitch.fr/CTF/alles-ctf-… given a logic analyzer output from a SPI communication between 2 game boys you had to reconstruct a pokemon exchange from generation I !

0 20 71 0 5

Magnussen @_magnussen_

5 years ago

Write-up for Remote (Easy Windows) on @hackthebox_eu! Find NFS share with credentials to log in on Umbraco (CMS); Exploit RCE on CMS; Find Team Viewer credentials and connect with WinRM funcmylife.fr/write-up/htb/r…

0 3 9 0 1

Magnussen @_magnussen_

5 years ago

Write-up for Magic (Medium Linux) on @hackthebox_eu! Redirect based SQL injection; Tampered php reverse shell; Dump database for user creds; exploit SUID on unsecure PATH funcmylife.fr/write-up/htb/m…