@lanjelot

Pentester, member of @thegooniesctf CTF team, author of the brute-forcing tool Patator

 Australia & France
github.com/lanjelot
Joined February 2009
  • Tweets813
  • Following233
  • Followers1K
7Media
lanjelot retweeted
elttam@elttam25 Jun 2024
New blog post: plORMbing your Django ORM - Part one of a series about ORM Leak vulnerabilities and attacking the Django ORM. elttam.com/blog/plormbing-yo…

plORMbing your Django ORM - elttam

Understand ORM Leak vulnerabilities and how attackers exploit Django's ORM to extract sensitive data from your application.

elttam.com
1
38
2
78
8,101
Sebastien Macke (@Lanjelot) showed @CrikeyCon the very magical tool - Talkback ( elttam.com/blog/talkback-int… ) - if you are drowning in InfoSec news, or floating down Cyber Creek in a barbwire canoe - this may be your life raft! Very kool!
2
1
1
366
Droppy is excited for lanjelot up on stage where he'll share his tips and tricks. Join us 23 March for Keeping up with the Pwnses - A walk-through of Talkback. events.humanitix.com/crikeyc…

CrikeyCon IX

Get tickets on Humanitix - CrikeyCon IX hosted by Droppy & The Sleuth. Find event information.

events.humanitix.com
4
4
517
lanjelot retweeted
elttam@elttam11 Jan 2024
New blog post: Keeping up with the Pwnses, an introduction to Talkback elttam.com/blog/talkback-int…

Keeping up with the Pwnses - elttam

Introducing Talkback, a smart infosec resource aggregator. Learn how it works, its key features, and how to use the UI and GraphQL API.

elttam.com
12
18
5,494
I will be impressed by ChatGPT when it can do my tax return for me.
2
194
Just released patator v1.0 github.com/lanjelot/patator

GitHub - lanjelot/patator: Patator is a multi-purpose brute-forcer, with a modular design and a...

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage. - lanjelot/patator

github.com
9
32
4,293
lanjelot retweeted
elttam@elttam30 Mar 2023
Today we're releasing a public beta of Talkback, a smart infosec resource aggregator to help you keep up with news and research. Please visit talkback.sh and give it a try! We'll be releasing new features and improvements over time.

Talkback

Talkback is a smart infosec resource aggregator, designed to help security enthusiasts, practitioners and researchers be more productive.

talkback.sh
3
27
3
42
12,118
During a security assessement on a WordPress website, a ninja found a vulnerability in the Aryo Activity Log plugin and used it to exfiltrate the database. Read the security advisory and install the latest version v2.7.0: synacktiv.com/sites/default/…
15
1
47
Oracle of Blaire was definitely a cool chall in @angstromctf, worked with @lanjelot (also member of @thegooniesctf). Here's our writeup: thegoonies.github.io/2021/04…
2
1
Shakti CTF 2021 - Art Gallery 2 [web] by @lanjelot via @thegooniesctf: thegoonies.github.io/2021/04…
3
3
My write-up for AgentTesterV2 (web) thegoonies.github.io/2021/03… #NahamConCTF thx @NahamSec @_johnhammond @jorge_ctf and everyone else involved for this sweet CTF
8
19
DiceGang CTF 2021 - Dice is you [rev] by @DaniloNC via @thegooniesctf: thegoonies.github.io/2021/02…
1
3
#Podcast #Cybersécurité Épisode #293 : Interview de @_r3no_ co-fondateur de @Synacktiv nolimitsecu.fr/interview-ren…
1
21
1
47
lanjelot retweeted
G@Grazfather25 Jan 2021
Pleased to announce release 2021.01 "Plaintive Manager" of GEF! This release has a ton of bug fixes, a few new features, and a good set of QoL improvements. Additionally, it has changes from the largest cohort of new contributors yet! #gdb #pwning #CTF github.com/hugsy/gef/release…

Release 2021.01 - Plaintive Manager · hugsy/gef

Routine release because it's been a while 😂 Bug were fixed, issues were addressed, people are happy. Enjoy 🍻!

github.com
7
30
As hackers, we've all noticed that human error pattern in computers right? Though a technology 100% created by humans. So could a hacker please explain to me how can we trust any vaccine to be bug free and why would you get the shot when there's a chance things could go wrong?
4
2
How did i miss this! So funny
Stevie Martin@5tevieM29 Nov 2020
when you need to confirm you're not a robot
1
#php #sqli #nostalgia :)
elttam@elttam2 Nov 2020
github.com/elttam/ko7demo Here's @lanjelot's docker setup to play with CVE-2019-8979 in Koseven (a PHP7 Framework). It was discovered by huzr2018 but we noticed the patch never made it to the latest stable release, we reported the oversight to the developers and it's now fixed

GitHub - elttam/ko7demo: A docker-contained koseven hello world to play with SQL injection CVE-20...

A docker-contained koseven hello world to play with SQL injection CVE-2019-8979 affecting versions < 3.3.10 - elttam/ko7demo

github.com
2
lanjelot retweeted
elttam@elttam29 Sep 2020
Fancy getting your hands dirty with AES-GCM today? check out elttam.com/blog/key-recovery… by @lanjelot

Attacks on GCM with Repeated Nonces - elttam

Reusing a nonce in AES-GCM is catastrophic. Learn how nonce reuse enables key recovery attacks and what it means for your web application.

elttam.com
8
16
Just received my first donation for GitHub.com/lanjelot/patator from a generous Canadian. Great feeling. Thanks buddy!
1
8
lanjelot retweeted
brendan@bscarvell12 May 2018
Technical details for my nodeIntegration bypass for Electron.js (CVE-2018-1000136) is up - trustwave.com/Resources/Spid…
61
5
98
Load more