@Elweth_

oui

 Lille, France
elweth.fr/
Joined March 2018
  • Tweets323
  • Following525
  • Followers340
11Media
Prochain meetup ce lundi 26/10 ! 👾 Au programme : - @ImNotFl0 sur le pentest de frigo 👀 - @Elweth_ avec 0€ pour trouver des 0days - @e1k_p1r4t3 via son retex de pwn de caméra 🎥 📍Boulangerie Bar - 26/10 partir de 19h (Salle du bas)
4
1
8
330
On se retrouve le lundi 26/10 pour le meetup d’Octobre👾 Apparemment on va parler frigo & pentest 👀 📍Boulangerie Bar - 26/10 à partir de 19h (Salle du bas) #cybersecurite #lille #defcongroup
4
7
333
Really proud of this 2nd place with @cosad3s and @Liodeus1 ! What an opportunity to find such critical bugs in IoT devices this important. Thank you @yeswehack and @CSAsingapore
YesWeHack ⠵
@yeswehackOct 15
🏁 #SPIRITCYBER26 has come to a close after weeks of persistence, creativity and pushing the limits. Huge congratulations to the top five: 🥇nullIoT 🥈One Prompt to Pwn Them All 🥉Peenoise 🏆Hamtarou 🏆Undefined Behavior 👏 Big shoutout to all the team that took part in the qualifiers. Every valid report helped push the challenge further and strengthen the connected technologies supporting Singapore’s #SmartNation. 🤝 Proud to have joined forces again with @CSAsingapore for another round of hacking for a good cause. Till next year!
2
7
104
🏁 #SPIRITCYBER26 has come to a close after weeks of persistence, creativity and pushing the limits. Huge congratulations to the top five: 🥇nullIoT 🥈One Prompt to Pwn Them All 🥉Peenoise 🏆Hamtarou 🏆Undefined Behavior 👏 Big shoutout to all the team that took part in the qualifiers. Every valid report helped push the challenge further and strengthen the connected technologies supporting Singapore’s #SmartNation. 🤝 Proud to have joined forces again with @CSAsingapore for another round of hacking for a good cause. Till next year!
3
1
18
1,877
I'm happy that my first article as part of the @SLCyberSec research team is finally out! 😁 It covers an interesting ImageMagick race condition that I found back in June, which, combined with a polyglot payload, allowed me to achieve file read/RCE on Discourse. This should resonate with those who've seen the recent @HacktronAI research. I hope you'll enjoy it! 👇
Assetnote
@assetnoteOct 7
Our research team discovered two vulnerabilities in Discourse: a pre-authentication cache poisoning to sitewide XSS (CVE-2026-55674), and an arbitrary file read (RCE) chaining a JPEG race condition with ImageMagick and Ghostscript (CVE-2026-55420). You can read more here:
https://www.slcyber.io/research/a-jpeg-a-race-and-a-ghost-breaking-discourses-image-pipeline

ALT https://www.slcyber.io/research/a-jpeg-a-race-and-a-ghost-breaking-discourses-image-pipeline

8
42
1
208
9,639
I've published UniBLEed, a fully wormable proximity Bluetooth RCE affecting Unitree's G1 humanoids. Blog spans cloud, mobile, firmware, Bluetooth & hardware. Two multi-bug RCE chains. 3 months into ~80 minutes, $6,700 in bounties. Go jailbreak your G1s!! boschko.ca/g1-ble-rce/

UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range

Root on a $20,000 humanoid robot from Bluetooth range. One chain crossing Bluetooth, Unitree’s cloud, mobile, and the firmware running the G1 itself. Here’s the complete technical breakdown of the...

boschko.ca
9
84
10
226
24,347
Imagine being able to acquire the last BugBounty domains with #Claude... What could possibly happen? Check out bugrecon.me to improve your recon ! #bugbounty #recon #Ai
1
1
1
5
740
CVE drops at 6 PM. Twitter starts screaming. Hunters with BugRecon type one query: nginx:1.14.0 Boom. Every asset running that version. Ready for a Nuclei spray in one click. The first PoC wins the bounty. Be first. app.bugrecon.me #bugbounty #cve
2
1
11
1,253
Elweth retweeted
22sh
@0x22shMar 11
You may know that one guy in high school who showed up at every party without being invited? Well, that was me. I always wondered whether there was an internet version of the same thing internethandout.com/post/fea…
6
19
102
6,474
🚨 RCE in #Livewire (CVE-2025-54068)! Our specialists uncovered a critical flaw allowing remote code execution without the APP_KEY, exploiting Livewire’s hydration mechanism + PHP’s loose typing. 🔗 Patch now! (v3.6.4+) synacktiv.com/en/publication…

Livewire: remote command execution through unmarshaling

Livewire: remote command execution through unmarshaling

synacktiv.com
2
61
6
164
49,477
Last month at #codeblue 2025, our expert Valentino discussed the internals of Kindle devices and unveiled an audiobook vulnerability he discovered. Missed it? It's not too late! Join us tomorrow at #BHEU 2025 for a very novel briefing📚 blackhat.com/eu-25/briefings…
4
8
931
Rendez-vous lundi 27/10 pour le meetup d’octobre ! 🎃 Programme : @Elweth_ @_Ali4s_ * Création d’un scanner de sous-domaines sous stéroïdes uniquement pour flatter mon égo ? * Automatisation de la recon web pour gagner du temps et de💰 📍Boulangerie Bar - 19H (Salle du bas)
3
1
4
744
New Research by @siunam321! - lab.ctbb.show/research/crlf-… CRLF Injection → Nested Response Splitting (CSP gadget). Inject \r\n\r\n in headers to push HTML into the body and bypass script-src 'self'.

CRLF Injection Nested Response Splitting CSP Gadget

If you can do CRLF injection in the response header, most likely you can also do response resplitting to achieve reflected XSS. Even if a strict CSP is in place, you could bypass it by using response...

lab.ctbb.show
2
30
1
140
14,283
LHE with @Liodeus1 @_Ali4s_ @cosad3s are still good ideas 🇮🇹🤌 @cybersaiyanIT
1
10
385
Big update: Subdomain enumeration now uses separate quotas for each plan! This means MORE data for the same price. Plus, our free tier still lets you discover hundreds of subdomains monthly - no payment required. Check out the documentation docs.profundis.io/api/subdom… #bugbounty

Subdomain enumeration | Profundis Documentation

Enumerate observed subdomain names through the Profundis API, read its streaming response and control credit spending.

docs.profundis.io
2
7
27
2,258
Le prochain meetup aura lieu ce lundi 02/06👾 Au programme : - L’ADCS post-certifried, la fin de la easy win ? @Prepouce_ - Targeting postMessage vulnerabilities by @Elweth_ 📍Boulangerie Bar - 02/06 à partir de 19h (Salle du bas) #Cyber #infosec
3
8
502
Enjoyed CTF10K? We’re back. 🎯 #CTF20K – After the success of CTF10K, we're doing it again: the ultimate solo challenge, open to all skill levels, to celebrate Root-Me hitting 20K Discord members! 📅 May 10, 10:00 CEST – May 11, 23:59 CEST 💻 Pwn, Crypto, Web, Reverse, Misc… 🏆 Lots of prizes, lots of glory 🔗 ctf20k.root-me.org
Illustration image of the CTF20k with dates and explicit categories : Intro, Crypto, Reverse, Web, Pwn, Misc, Blockchain.

ALT Illustration image of the CTF20k with dates and explicit categories : Intro, Crypto, Reverse, Web, Pwn, Misc, Blockchain.

1
11
2
25
6,599
The #FCSC2025 ended yesterday, and my write-ups are now available here 👇 mizu.re/post/fcsc-2025-write… Btw, like every year, all the challenges have also been added to hackropole.fr! 🚩 1/2
Kévin GERVOT (Mizu)@kevin_mizu18 Apr 2025
This year again, with @BitK_, we've made the Web challenges 🚩 The CTF is solo and lasts 10 days, if you have some time, please give it a look 😁 Btw, even if you're not doing Web challenges, there are 100+ challenges in various categories, you should find something you like!
2
20
90
5,152
Slides of my BSides Seattle presentation about how to bypass the Content Security Policy nzt-48.org/slides/how-to-byp… @bsidesseattle @SecurityBSides #BSidesSeattle #BSidesSeattle2005
1
12
65
4,100
Le prochain meetup aura lieu ce soir (24/02)👾 Au programme : - Pwn2Own Ireland : Retour d’expérience par @ImNotFl0 @___t0___ @MajorTomSec - Exploiting CTF bugs in real life by @Elweth_ 📍Boulangerie Bar - 24/02 à partir de 19h (Salle du bas) #Cyber #infosec
1
2
10
985
Load more