Faelian2
Joined 5 years ago
Karma
150
Submissions
51
Member since
Mar 4
Recent submissions
Comment · 24 days ago
`.internal` and `.local` are safe and won't be used in the future. There are reserved for internal networks
Comment · 24 days ago
It's a shame that ICANN did get so greedy and put everyone at risk.
Having internal domain names owned by some guy on the internet has already compromised multiple corporate networks. See the talk from this guy:
https://www.romhack.io/wp-content/uploads/2025/10/Internal-D...
Comment · 9 months ago
I did wrote a small open-source tool in Rust. And I too did encounter that kind of issue when I did start to build a .deb.
Honestly, it was the kind of bug that is not fun to fix, because it's really about dependency, and not some fun code issue. There is no point in making our life harder with this to gatekeep proprietary software to run on our platform.
Comment · 1 year ago
Thanks for putting this site together.
Despite all the comments here, I find your point pretty convincing.
Comment · 1 year ago
That's a really interesting project.
I have been generating documents for a while using https://github.com/enhuiz/eisvogel. It's nice to use markdown, but I feel really limited, and can't do much customization.
I would love to see some templates for this.
Comment · 1 year ago
France is literally making billions by exporting in electricity.
https://oec.world/en/profile/bilateral-product/electricity/r...
It's France 9th biggest export.
Comment · 1 year ago
An explanation of the attack by the company doing the investigation:
https://www.volexity.com/blog/2024/11/22/the-nearest-neighbo...
Comment · 1 year ago
At what timestamp in the documentary do they talk about ?
Comment · 1 year ago
I love how he is porting every local attack to web applications.
I am also a bit frightening that the number of attack you have to know for the Burp Certification keeps getting longer.
Comment · 1 year ago
I don't use GDB a lot. But when I do, I generally use the pwndb extension.
It's written for exploit development, but even for debugging a C program. It makes things a lot nicer.
Comment · 2 years ago
I am writing an hexadecimal editor in rust, with colors.
https://github.com/0xfalafel/hextazy
I am also playing a bit with Gtk4, Relm4, and creating Active Directory labs with vagrant. https://blog.lasne.pro/posts/ad_lab_part1/
Comment · 2 years ago
Do you guys know if `!isset()` is a good alternative ?
Or if it also has some shortcomings ?
Comment · 2 years ago
As a pentester, I would argue that attackers don't think in graphs either.
Apart from Bloodhound, I can't think of any tools where we have graphs.
For web security, I can't think of something where "graph thinking" applies. But we have a pretty huge list of attacks to test https://portswigger.net/web-security/all-topics.
And ultimately, what is inside your pentest report ? Not a graph, a list of things to do:
- SMB signing.
- Don't use the domain admin to manage every machine.
- ...
The main reason this phrase is so popular, is that it panders to the hacker community: "We are the smart guys, all the defenders do is excel sheets."
IMHO, the nugget of truth in this is that defenders can spend considerable amounts of time on things that don't matter. Like doing CIS benchmark by hand on all servers. While missing the low-hanging fruits that would give them a strong security posture.
In a lot of companies, the defenders are just sysadmins that don't have any idea of what they should focus on.
mail: olivier [at] lasne dot pro