All on Hello Friend

Poo-Prolab HTB

Sat, 15 Aug 2026 14:15:53 +0200

Waiting screen.

Linkwarden

Sat, 15 Aug 2026 01:36:51 +0200

Fix duplicate tags in linkwarden

linkwarden/linkwarden#520

I recently deployed Linkwarden in my homelab stack. After giving access to a few friends, we noticed that tags were getting duplicated whenever someone added an existing tag to a link created by someone else. This is a known, still-unfixed issue on GitHub (#520).

Simple and quick fix

The script below merges duplicate tags directly in the database it keeps the oldest tag, reassigns all links to it, and removes the duplicates:

Dante-Prolab HTB

Fri, 14 Aug 2026 00:15:27 +0200

Finally pwned

Overview

Dante Pro Lab is a great environment that mix both Linux and Windows Operating Systems. It’s permit to practice Enumeration, Exploit Development, Lateral Movement, Privilege Escalation, Web Application Attacks.

Synopsis

Dante LLC have enlisted your services to audit their network. The company has not undergone a comprehensive penetration test in the past, and want to reduce their technical debt. They are concerned that any actual breach could lead to a loss of earnings and reputation damage.

Crowdsec

Sun, 09 Aug 2026 00:19:13 +0200

Waiting room

I installed crowdsec to protect my endpoint. here i will document some intersting thing we can see on the dashboard, the blocklist I use limited to 3 beacause I use the free plan. And obviously the stack I personally use. I will show my grafana dashboard to, and explain how it works.

OpenCTI Tropic Trooper

Sat, 01 Aug 2026 16:33:21 +0200

A multinational technology company has been the target of several cyberattacks over the past few months. The attackers have successfully stolen sensitive intellectual property and disrupted the company’s operations. A threat advisory report about similar attacks has been shared, and as a analyst, I have to identify the tactics, techniques, and procedures (TTPs) being used by the threat group and gather as much information as possible about their identity and motive.

HTB Cyber Apocalypse CTF 2026

Wed, 29 Jul 2026 23:14:45 +0200

Overview

Two friends of mine told me about this CTF, and I was curious to test my OSINT skills against it, I have to admit I was a bit disappointed. Even the medium-difficulty OSINT challenges felt quite easy, which was surprising coming from HTB.

That said, we finished 805th/6,743 teams (out of 12,695 participants total), not a small CTF by any means, so overall we were pretty happy with the result, even though we still have a long way to go.

Osint

Wed, 01 Jul 2026 17:33:58 +0200

Big things on their way, Osint industries CTF writeup, Osint Fr too, personnal osint projects, with maltego and open source tools.. I didn’t write everything yet, and I have to anonymise some things..

Osint Letter

Sat, 25 Apr 2026 22:52:13 +0200

This challenge begins with two provided images. Our objective is twofold: first, to identify the postal code visible on the envelope, and second, to determine the full name of the individual mentioned in the accompanying note, along with their age.

We have a note too, and notice this is in french.

Mon cher Édouard,

Aujourd'hui, en rangeant le grenier chez mes grands-parents, je suis tombée sur cette vieille coupure de journal. Ton arrière-grand-père n'avait même pas l'âge de passer le permis quand il s'est distingué ce jour-là. Le benjamin de l'équipe, et certainement pas le moins courageux.

Il serait si fier de te voir sur l'eau à ton tour.

Avec toute mon affection,
Audette

GOAD-Mini

Mon, 06 Apr 2026 22:25:49 +0200

What is it?

GOAD or Game Of Active Directory, is an open source project created by Mayfly (Orange Cyberdefense). It provides a intentionally vulnerable Active Directory lab environment designed for practicing pentest techniques in a legal and controlled setting.

It covers a wide range of AD attack scenarios: enumeration, ACL abuse, Kerberos attacks, ADCS, NTLM relay, and much more.

Several lab sizes are available, from the minimal 2-VM MINILAB to the full GOAD with 5 VMs across 3 domains.

Aircrack-ng

Sat, 28 Feb 2026 10:13:11 +0100

Last Updated 2026-02-28
Here, I'm explaining how I solved my issues.

Why ?

This project is a direct continuation of my Wifijammer experiments. I have a strong interest in wireless communications and protocols like Wi-Fi and BLE, which drives me to test these vulnerabilities firsthand.

Moving forward, I plan to explore more advanced attacks and further deepen my understanding of these protocols to better comprehend how modern wireless security layers interact.

Radio Communications Security

Sun, 25 Jan 2026 20:30:48 +0100

Wireless Security Auditing. See PDF Report

This report explores the vulnerabilities of IoT devices through SDR techniques. Conducted at Sorbonne University, the project addresses the inherent risks of radio communications, where signals propagate in open space, making them susceptible to interception and jamming.

The study utilizes a Raspberry Pi platform equipped with RTL-SDR and PlutoSDR hardware to analyze devices operating on various frequencies. Key experiments include:

Replay Attacks: Intercepting and re-emitting fixed codes to control smart plugs and roller shutters using tools like 433Utils and URH.
False Data Injection Attacks: Manipulating weather station displays by injecting forged temperature frames.
Advanced Signal Analysis: Moving to the 2.442 GHz band to reverse-engineer drone communications using GNU Radio, which involved bypassing XOR encryption and calculating CRC to retrieve a hidden flag.

The project demonstrates that many consumer IoT devices remain fragile due to the use of simple modulations (ASK/OOK) and the absence of protective mechanisms such as rolling codes or robust encryption.

Reverse Hardware Engineering

Mon, 19 Jan 2026 22:06:02 +0100

STM32F4 Firmware Extraction & Protocol Analysis. See PDF Report

Project Description

This project focused on hardware reverse engineering and the study of embedded systems. We dissected an STM32F4-based device to understand its internal logic and communication:

Firmware Extraction: Interfaced with the STM32F4 microcontroller via debug ports to successfully dump the internal memory and retrieve the binary payload.
Protocol Analysis: Identified and decoded TLV (Type-Length-Value) command structures used by the firmware to exchange data with external peripherals.

Wifi beaconing

Sat, 27 Dec 2025 22:11:55 +0100

Maj 2026-02-01
I'll post the full code on GitHub with more technical details. 
Here, I'm explaining how I solved my issues. 
I'm learning to use aircrack so, 
I will not implement deauthentication to not lost my time.

Wireless Security Research : 802.11

I wanted to learn the basics of WiFi network attacks, so I started experimenting with deauthentication and beaconing. Beaconing is interesting because it relies on user interaction. I enjoy creating personalized clones that mimic real-world services; for example, it was fun rebuilding a fake Moodle login page for a French university. After using Aircrack-ng for deauthentication, I decided to focus less on the attack itself and more on improving the realism of my phishing pages. My next steps are to link these fake Access Points (APs) to the pages and implement a small DNS service to redirect all connections to the correct authentication portal.

Reverse Software Engineering

Sat, 20 Dec 2025 18:06:05 +0100

Deep binary analysis of Command & Control components and malicious documents. See PDF Report

Project Description

This project focused on software reverse engineering and the study of complex infection chains. I dissected malicious components to understand their internal mechanics:

Binary Analysis: Used Ghidra and Binary Ninja to reverse-engineer a C2 component, analyzing its communication mechanisms and persistence capabilities.
Malicious Document Analysis: Investigated compromised XLS and PDF files, including macro flow analysis to identify execution vectors.
Infection Chains: Reconstructed the complete attack lifecycle, from document delivery to the execution of the final payload.

Added Value & Professional Objectives

This experience allowed me to develop a rigorous approach to static analysis and a deep understanding of malicious software architectures:

Pentest

Sat, 27 Sep 2025 17:54:12 +0100

Penetration testing on a simulated enterprise infrastructure. See PDF Report

Project Description

This project, conducted at Sorbonne University, consisted of a comprehensive penetration testing exercise on Windows and Linux environments, including web application audits. I applied a rigorous end-to-end methodology:

Reconnaissance & Scanning: Used Nmap for network mapping and service discovery.
Web Analysis: Performed fuzzing and application penetration testing using Burp Suite.
Exploitation: Executed brute-force attacks via Hydra, researched CVEs on ExploitDB, and performed exploitation with Metasploit.
Reporting: Authored a detailed audit report covering vulnerabilities, impact analysis, and remediation recommendations.

Added Value & Professional Objectives

This experience allowed me to consolidate a strong foundation for my cybersecurity career: