I continued to play with the vulnhub virtual machine and started the TopHatSec - Freshly.

"The goal of this challenge is to break into the machine via the web and find the secret hidden in a sensitive file. If you can find the secret, send me an email for verification. :)"

This weekend (4 April 2015) take place the qualification round for "Nuit du Hack" CTF from 00:01 to 23:59. It was a Jeopardy CTF.

I have participated with the Zenk-Security team. At the end we got the 7th position and are qualified for the final which would be a Attack-Defense CTF in Paris in June.

I publish here the ones for the challenges I participated to and make a writeup of. All the writeup for this CTF are accessible here (in french).

The first of April is always the occasion for some great pranks. 2015 was a great year, as the CERN confirmed the existence of the Force, Google published a mirroring website and gentoo an old fashion one. In France we got a security event call SSTIC for which the tickets are very rare therefore the SSTIC challenge allows the ones with the flag to reserve a ticket. An April prank challenge was post yesterday.

I work on a Windows machine for my dally job. On my personal desktop I use Arch Linux and i3 therefore my music player is in curses and does not need any mouse. In fact I use cmus. So I tried to replace my old media player clementine with cmus on Windows in cygwin.

For that we need to compile cmus from sources.

I host my own services with a web access, for my mail and calendar I used Roundcube a wonderful webmail and agendav for my calendar. Nevertheless I am used to have everything in one place (thank you Google for the bad habit) and agendav was no more working on my …

Recently I put unwanted data (a password) in one of my git commit. This commit was not push to an public server (like github or bitbucket) therefore there was no real security breach other than my git history.

The problem was to remove the data by rewriting the git history …

Short news from by blog:

Yesterday I publish my blog with a brand new theme. The main reason is to not have the classical bootstrap theme like everybody else. Nevertheless I am no graphic artist that is why I use a theme designed by someone else.

The theme is based …

Few weeks ago my girlfriend lost her laptop Windows password, I do not have any hint about it and of course I am not an other of it (otherwise mimicatz would have been my friend). I asked her to try basic password ("12345", "password"…) then she asked me to reset …

This article concern the ZTE OPEN C and Firefox OS and would be in French.

J'ai testé le téléphone ZTE OPEN C avec Firefox OS 0.3 pendant une semaine. Première surprise au déballage, le téléphone ressemble beaucoup au Samsung Galaxy S. Mis à part le bouton « power » qui est …

I start the LAMPSecurity CTF4 challenge of vulnhub available here. The goal is to get a root shell on the server.

Discovery

First of all we need to determine the IP address of the server. Since we launch it in a bridged virtual machine the local router got the IP …