Swissky

LeHack 2025 - PayloadPLZ Last weekend, I took part in the LeHack 2025 event in Paris. As always, the challenges hosted by YesWeHack were top-notch and full of valuable learning opportunities. This year's highlight was craftin...

Writeup of "Payload Plz" challenge - Le Hack 2025
The goal was to write a polyglot payload for 13 contexts 🤯
swisskyrepo.github.io/blog/payload...

How and Why to Ditch GitHub How much of your code do you feel like entrusting to Microsoft? How about American data centers? Here's an easy way to jump ship and maintain operations.

I migrated my coding life, including my static websites, off GitHub. It's easier than you might think! Here's how I did it.

taggart-tech.com/mig...

I’m Lovin’ It: Exploiting McDonald’s APIs to hijack deliveries and order food for a penny A series of API flaws in McDelivery India made it possible to order food for a penny, hijack other people’s delivery orders, view user information, and more.

A great write up on McDonald's API security by Eaton:

eaton-works.com/2024/12/19/m...

If you want to learn some API hacking techniques, I've just pushed a new API module to DVWA:

github.com/digininja/DVWA

Twitch Twitch is the world

Yop ! 🌿
Reprise des veilles technos ce soir 21h ! 🌖
En compagnie de @drypaint.bsky.social @maltemo.bsky.social @swissky.bsky.social 😎

~ See you there ~
www.twitch.tv/thelaluka

The results are in! Congratulations to the winners—you’ll receive your prize via DM. Thank you all for participating! 😊

New module on #NetExec : wam
Dump #Entra access tokens from Windows Token Broker Cache, and make your way to Entra 🚀

Thanks @xpnsec.com for the technique! More info on his blog : blog.xpnsec.com/wam-bam/

Payloads All The Things

🚀 Big Announcement! 🚀

After 8+ years of working on PayloadsAllTheThings, I’m excited to release it as an ebook on Leanpub! 📖✨

To celebrate, I’m gifting 2 free copies to random reposters! 🔥

👉 Repost for a chance to win

Thank you all for your incredible support! 🙌

#CyberSecurity #Infosec

Payloads All The Things

Payloads All The Things: Web Application Security Cheatsheets leanpub.com/payloadsallt... by Swissky is the featured book on the Leanpub homepage! leanpub.com #ComputerProgramming #ComputerSecurity

Payloads All The Things

This cheatsheet has been a labor of love and countless hours of dedication.

👉 Grab your copy now: leanpub.com/payloadsallt...

The results will be announced on 25th December. Entries will close Tuesday 24th, December at 12:00 PM (GMT) 🕐

Payloads All The Things

🚀 Big Announcement! 🚀

After 8+ years of working on PayloadsAllTheThings, I’m excited to release it as an ebook on Leanpub! 📖✨

To celebrate, I’m gifting 2 free copies to random reposters! 🔥

👉 Repost for a chance to win

Thank you all for your incredible support! 🙌

#CyberSecurity #Infosec

NTLM Relaying - Making the Old New Again | JUMPSEC LABS I am old enough to remember that it was not always possible to get domain admin within the first hour of a test via Active Directory Certificate Services (ADCS) misconfigurations or over permissioned ...

NTLM Relaying – Making the Old New Again
labs.jumpsec.com/ntlm-relayin...

still the best bug: GraphQL discloses internal beer consumption (hackerone.com/reports/419883)

I run @agarri.fr (this main account) and @mastering-burp.agarri.fr (dedicated to @burpsuite.bsky.social tips)

And I like how custom handles bring your "brand" (aka domain name) front and center while helping to combat impersonation

Anatomy of Pokemon glitches Digging into the anatomy of Pokemon Yellow glitches, or how to impress your school friends during break time.

🌧️ On a rainy day, I dove into Pokémon Yellow glitches. Ever wondered how they work under the hood?
As kids, we were already hackers manipulating bits in memory! 🔍👾
Read more in my latest blog post:
swisskyrepo.github.io/Pokemon-Glit...

It’s never too late to solve an old challenge. I spent some time this week-end to try my luck on a hardware challenge from the Ph0wn CTF 2019.
Here is my writeup,
swisskyrepo.github.io/Ph0wn-Flag-D...

DLS 2024 - RedTeam Fails - "Oops my bad I ruined the operation", a story on how to fail a red team assessment 🦖
swisskyrepo.github.io/Drink-Love-S...