Raphaël Lacroix @Chepycou
🇫🇷 French ✏️ Penetration tester, CTF Player 🎹 Plays piano, drums and composes blog.ar-lacroix.fr Toulouse Joined September 2025-
Tweets90
-
Followers12
-
Following310
-
Likes2K
🚨Wiz Research update: MCP Auto-Execution: From Git Clone to Cloud Compromise. This let malicious repos run code and steal AWS credentials without consent via workspace MCP configs. Attackers could compromise cloud envs. Fixed in language server 1.65.0 (CVE-2026-12957). wiz.io/blog/amazon-q-…
0x3lk.github.io/posts/xsskerne… a high quality blog post from @0x3lk about @ToulouseHacking's 2026 most infamous reverse challenge. Worth reading if you love kernel, drivers and reverse.
Onelogon: Taking over Active Directory Accounts via Netlogon🔑 We analyzed Netlogon, bypassed the Zerologon patch, resulting in a full auth bypass. An attacker can leverage this to compromise computer accounts, or even the entire AD. Non-standard config must be present tho 🧵
We just increased the maximum number of pinned chats from 4 to 10, so you can show 6 more people how much you love what they have to say.
I just wrote a new blog on bypassing CA policies in Entra ID that have a resource exclusion, and why you probably want to enable baseline enforcement if you have such policies. Enjoy! dirkjanm.io/bypassing-cond…
‼️🚨 Critical remote code execution in libssh2, the SSH client library embedded in countless tools: CVE-2026-55200, rated CVSS 9.2 by VulnCheck. Every version up to and including 1.11.1 is affected. It's an out-of-bounds heap write in ssh2_transport_read(), which fails to bound-check the SSH packet_length field. A malicious or MITM'd SSH server can send oversized packets to corrupt memory and run code on the connecting client. No known exploitation yet and it's not in CISA's KEV. Fix: move to a build that includes commit 7acf3df (PR #2052), and inventory anything that links libssh2 for SSH, SCP, or SFTP.
We've been working on something for a while. The talks your blue team doesn't want you to see. 🔴 Red Teaming. Initial Access. AD. Cloud & Web exploitation. 📍 Paris - Le Dernier Étage 📅 March 19–20, 2027 entrypoint.fr CFP and additional details coming soon.
considering switching from @HedgeDocOrg to @DocmostHQ anyone got feedbacks ?
@awesomekling @ladybirdbrowser Waiting for a @ladybirdbrowser-based @zenbrowser
We are starting to upload the videos of this year's talks. And nothing better to start with than our two keynotes : youtube.com/watch?v=fbicyl… and youtube.com/watch?v=obdPo6… from @misc0110 and @aurelsec
You won’t believe what’s next for Android! Tune in to the The Android Show | I/O Edition May 12 at 10 am PT for a look at the future. Set a reminder at Android.com/io-2026 and be the first to know 🗓️ #TheAndroidShow
To help protect Signal users from phishing and social engineering attacks, we’ve introduced additional confirmations and educational messaging in the app to help people better detect fraudulent profiles, especially message requests from scammers posing as Signal. More changes are on the way.
Last week happened the THCon 2026 CTF. A huge congrats to all our participants, especially the winners of this year on-site CTF : - 🥉 1984 (@UT3PaulSabatier) - 🥈 FlagaDOS (@ITrust_CyberSec) - 🏅 Old Tokenz (various companies)
The CTF has ended, we thank you all 2134 players for taking part in it (except those that DoSed the infra 😅). Here is the leaderboard. Happy hacking until next year (and this time we'll make sure the infra holds on for 2000 people rather than the 500 of last year 😅).
🥁 barbhack.fr is back ! Et c'est le 29 août 2026 👉 Les sponsors c'est ici : [email protected] 😎 ⏩ Le Call for paper est #OPEN cfp.barbhack.fr #MayThe4th #CTF #CFP #BBQ
GrapheneOS fixes Android VPN leak Google refused to patch #GrapheneOS #Google #Android cyberinsider.com/grapheneos-fix…
And that's a wrap for THCon 2026. Thanks again to all our sponsors, speakers, participants organizers and everyone else who contributed to make this day unique ! Remember that the CTF startes tomorrow on ctf.thcon.party, see you there or see you next year 👨💻
❤️🔥
THCon 2026 has started. We are experiencing a technical difficulty regarding the stream. The talks are still recorded so you'll be able to replay them.
bl4ck4rch @bl4ckarch
231 Followers 430 Following Security Researcher & Pentester at @orangecyberdef | CTF enthusiast | @hackthebox_eu MVP 2025
Ossama @0x3lk
18 Followers 56 Following Just doing offsec stuff @Orangecyberdef | Maldev & Binary exploitation | Tweets are my own
CatchMe @AmrTawfik00
3 Followers 39 Following
Crypto and Politics @CryptoQ57233
75 Followers 39 Following I like discussing crypto and politics. Let's use facts and logic. Not logical fallacies.
Strictly Lux3 @axel8845
500 Followers 2K Following All the money in the world | $Jup $Pengu $wen $Xrp
dnlvarga @dnlvarga
0 Followers 5 Following
HasMbappewonlaliga @0day21
0 Followers 14 Following
Jacob Hinkle @Sentinal_Eye
0 Followers 11 Following
Spiros Pitikaris 🏴 @cmpspiti
1K Followers 1K Following | Offensive Security & Digital Forensics Operator | 🇬🇧🇬🇷
Antoine Cervoise @acervoise
532 Followers 410 Following Security champion. @synacktiv #offsec #arduino #diy #cigars #beers #freesoftware Tweets are my own.
Alejandro Hernández @nitr0usmx
5K Followers 560 Following ✇ Cybersecurity ✧ Director of Services at @IOActive ✎ Stock Trading ◮ Spanglish
Gillis Jones @Gillis57
5K Followers 1K Following Hacker. Journalist. Photographer. Currently covering California.
James Arlen @myrcurial
18K Followers 702 Following @[email protected] Infosec Geek, Hacker, Social Activist, Author, Speaker, Parent. VA3MYR. Chief Information Security Officer at https://t.co/0YzMUvV7nW
bl4ck4rch @bl4ckarch
231 Followers 430 Following Security Researcher & Pentester at @orangecyberdef | CTF enthusiast | @hackthebox_eu MVP 2025
Adam Chester 🏴�... @_xpn_
39K Followers 533 Following TRACE at @SpecterOps | Blog at https://t.co/tjfTOlmau2
Jérémy Jean @cryptanalyse
790 Followers 232 Following Cryptographer @ANSSI_FR / Coach for #ECSC #TeamFR. Admin #Hackropole. Tweets are my own. 🦋 https://t.co/iVmgyw8uW5
GoHugo.io @GoHugoIO
13K Followers 10 Following A Fast and Flexible Static Site Generator built with love in GoLang
Bjørn Erik Pedersen @bepsays
2K Followers 750 Following Software Developer and Saxophonist from Norway • Creator of @gohugoio • More code at https://t.co/KrMUUL4zgs • Photos: https://t.co/vGDaZ4CsBz
Steve Francia @spf13
29K Followers 8K Following Always learning • Former MD @twosigma, @golang GPM @Google, VP @Docker, VP @MongoDB, @Drupal board • @gohugoio, Cobra & spf13-vim creator • Father of 4
ippsec @ippsec
124K Followers 367 Following
Entrypoint @Entrypoint_fr
233 Followers 2 Following Real world offensive security conference in Paris 🗓️ 19-20 March 2027
@Cravaterouge.infosec... @rouge_cravate
318 Followers 107 Following Need a hand with your IT security? Send me a DM You can also find me on @cravaterouge.infosec.exchange
Dave Kennedy @HackingDave
231K Followers 6K Following Founder @Binary_Defense @TrustedSec Co-Owner https://t.co/HQC75WhdJh. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
SAP @SAP
297K Followers 147 Following We bring out the best in every business. | Privacy Statement: https://t.co/aceUYW4DWh Personal attacks, harassment, private info, or threats will be removed.
Charlie Eriksen @CharlieEriksen
3K Followers 412 Following Security Researcher @AikidoSecurity. Previously @SecCodeWarrior, co-founder at Adversaryio & Principal Security Engineer/Partner @thesyndis. Opinions all my own
Lupin @0xLupin
18K Followers 764 Following Roni Carta alias Lupin. Founder & CEO @ Depi. R&D. Red Teamer. Bug Hunter. Musician 🤘
Tony @TJ_Null
23K Followers 489 Following Blue Teamer in Disguise. Blog at https://t.co/spa33ybIVL. SANS Netwars Champion. Former community manager and founder of the Offsec community for @offsectraining
Jean @Jean_Maes_1994
12K Followers 1K Following @sansoffensive Certified instructor/SEC565 author/SEC699 co author https://t.co/cp5DerI3g4
Ido Veltzman @Idov31
4K Followers 34 Following I'm a security researcher who uses this platform to share my projects and research. Opinions are my own. https://t.co/UiWgKq40sV
Matt Eidelberg @Tyl0us
6K Followers 280 Following Red Teamer @BHinfoSecurity. Implant Dev is my passion. Part-time Comic Book Nerd.
Cody Thomas @its_a_feature_
8K Followers 312 Following Mythic Developer (https://t.co/Uz4fOxIUbe) | @SpecterOps @[email protected] | @its-a-feature.bsky.social
Zach Stein @synzack21
712 Followers 412 Following Red Teamer | Penetration Tester | AD Nerd | Adversary Simulation @SpecterOps
Jim Sykora @ TROOPERS @JimSycurity
3K Followers 2K Following I enjoy security, technology, learning, books, & the great outdoors. Trying to be human & kind. Opinions = mine. He/Him/Hän
Chris Thompson @_Mayyhem
3K Followers 491 Following Senior Security Researcher @SpecterOps https://t.co/Sz5fRYkX6u
Duane Michael @subat0mik
1K Followers 528 Following Security Researcher, Teacher, Leader @SpecterOps
Ossama @0x3lk
18 Followers 56 Following Just doing offsec stuff @Orangecyberdef | Maldev & Binary exploitation | Tweets are my own
BlackWasp @BlWasp_
2K Followers 250 Following Pentester and Red Team technical leader at Advens | Microsoft MVP
Rémi @shoxxdj
582 Followers 1K Following Pentester. 👨💻🏴☠️ CTF Player & Blogger 🌐 Organiser & President @Sth4ck 🍷 Random things @hack_4_values #FPV pilot ✈️ #Fr RubiksCubeLover 🤯 #HappyHacking !
Perri Adams @perribus
7K Followers 986 Following @Dartmouth ISTS Fellow & @SAISHopkins Adjunct Prof., inter alia. Former @DARPA, @DEFCON CTF, etc. @DistrictCon, @hexacon_fr, @LABScon_io CFP Review Boards
Axel Souchet @0vercl0k
13K Followers 583 Following ¯\_(ツ)_/¯, blogging on https://t.co/36oOc8Mgha and posting codes on https://t.co/P83Oen94Rc.
Attack and Defense @attackndefense
1K Followers 8 Following @[email protected] - Mozilla's Security Internals for Security Engineers, Security Researchers, and Bug Bounty Hunters.
James Kettle @albinowax
84K Followers 103 Following Director of Research at @PortSwigger aka @Burp_Suite. Find my research, tools & contact details at https://t.co/vP6UbGmvl3
L4ys @_L4ys
4K Followers 1K Following Co-Founder of @TrapaSecurity and @PwnableTW MSRC Top 100 / ZDI Platinum Hunting bugs for fun
Brian Pak @brian_pak
4K Followers 204 Following ai + security + alpha CEO @theori_io / @xint_official → building the world's best AI hacker 9x DEF CON CTF winner CMU CS '11 | founded PPP & MMM
💻🥷 WarthogTK �... @warthogtk
2K Followers 6K Following Pentester | MD (Intensivist & Healthcare Simulation in another life) | Infosec, Geopolitics, Defense, Hybrid warfare, DCS, Gaming, Metal Opinions are my own
Jay LaCroix (Learn Li... @JayTheLinuxGuy
18K Followers 246 Following Technologist, Linux fanboy. Host/owner of LearnLinuxTV, author of Mastering Ubuntu Server Fourth Edition. He/Him.Trends for United States
You might like
