Jurassique Hack
@jurassiquehack.bsky.social
🔥 https://www.youtube.com/@JurassiqueHack
💜 https://app.hackthebox.com/profile/2098416
🔒 Cybersécurité | 💻 Code | ⚙️ Hack | ☕ Caféine
🌎 #HackThePlanet
On parle #cybersécurité, #hack & #code for fun and that's it !
💜 https://app.hackthebox.com/profile/2098416
🔒 Cybersécurité | 💻 Code | ⚙️ Hack | ☕ Caféine
🌎 #HackThePlanet
On parle #cybersécurité, #hack & #code for fun and that's it !
Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers thehackernews.com/2026/01/clou... #Cloudflare
Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers
Cloudflare patched an ACME HTTP-01 validation flaw that disabled WAF protections and let unauthorized requests reach origin servers.
thehackernews.com
January 20, 2026 at 12:15 PM
Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers thehackernews.com/2026/01/clou... #Cloudflare
NordVPN denies breach claims, says attackers have "dummy data" www.bleepingcomputer.com/news/securit... #NordVPN
NordVPN denies breach claims, says attackers have "dummy data"
NordVPN denied allegations that its internal Salesforce development servers were breached, saying that cybercriminals obtained "dummy data" from a trial account on a third-party automated testing plat...
www.bleepingcomputer.com
January 5, 2026 at 7:03 PM
NordVPN denies breach claims, says attackers have "dummy data" www.bleepingcomputer.com/news/securit... #NordVPN
Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks thehackernews.com/2025/12/unpa... #Gogs #0day
Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks
Unpatched Gogs flaw CVE-2025-8110 enables file overwrite and code execution, driving over 700 confirmed compromises.
thehackernews.com
December 11, 2025 at 12:22 PM
Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks thehackernews.com/2025/12/unpa... #Gogs #0day
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001) thehackernews.com/2025/11/hack...
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001)
Active exploitation targets 7-Zip CVE-2025-11001; patch 25.00 fixes symbolic link RCE flaws.
thehackernews.com
November 19, 2025 at 11:52 PM
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001) thehackernews.com/2025/11/hack...
TEACHER 🟢 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
November 15, 2025 at 1:08 PM
IRKED 🟢 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
October 26, 2025 at 12:20 PM
Catching Credential Guard Off Guard specterops.io/blog/2025/10...
Catching Credential Guard Off Guard - SpecterOps
Uncovering the protection mechanisms provided by modern Windows security features and identifying new methods for credential dumping.
specterops.io
October 23, 2025 at 7:56 PM
Catching Credential Guard Off Guard specterops.io/blog/2025/10...
Bypass AMSI in 2025 #AMSI www.r-tec.net/r-tec-blog-b...
r-tec Blog | Bypass AMSI in 2025
This blog post will shed some light on what's behind AMSI (roughly, but hopefully easy to understand) and how you can still effectively bypass it - more than four years later.
www.r-tec.net
October 23, 2025 at 7:40 PM
Bypass AMSI in 2025 #AMSI www.r-tec.net/r-tec-blog-b...
TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution thehackernews.com/2025/10/tarm...
TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution
High-severity TARmageddon flaw (CVE-2025-62518) in Rust’s async-tar libraries enables RCE via header parsing bug.
thehackernews.com
October 22, 2025 at 11:12 AM
TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution thehackernews.com/2025/10/tarm...
CURLING 🟢 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
October 18, 2025 at 11:07 AM
FROLIC 🟢 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
October 11, 2025 at 11:15 AM
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely #Redis #RCE thehackernews.com/2025/10/13-y...
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely
Redis fixes 13-year CVSS 10 flaw allowing Lua script-based remote code execution in all versions.
thehackernews.com
October 7, 2025 at 9:07 PM
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely #Redis #RCE thehackernews.com/2025/10/13-y...
ACCESS 🟢 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
October 4, 2025 at 12:53 PM
CARRIER 🟠 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
September 27, 2025 at 10:23 AM
YPUFFY 🟠 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
September 20, 2025 at 12:00 PM
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens #Microsoft #EntraID dirkjanm.io/obtaining-gl...
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise ...
dirkjanm.io
September 18, 2025 at 2:33 PM
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens #Microsoft #EntraID dirkjanm.io/obtaining-gl...
GIDDY 🟠 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
September 13, 2025 at 10:38 AM
SECNOTES 🟠 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
September 6, 2025 at 10:53 AM
ksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3) #Fuzzing blog.doyensec.com/2025/09/02/k...
ksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3) · Doyensec's Blog
ksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3)
blog.doyensec.com
September 4, 2025 at 7:47 PM
ksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3) #Fuzzing blog.doyensec.com/2025/09/02/k...
Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel #Linux #Kernel a13xp0p0v.github.io/2025/09/02/k...
Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel
Some memory corruption bugs are much harder to exploit than others. They can involve race conditions, crash the system, and impose limitations that make a researcher's life difficult. Working with suc...
a13xp0p0v.github.io
September 3, 2025 at 11:18 PM
Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel #Linux #Kernel a13xp0p0v.github.io/2025/09/02/k...
Marshal madness: A brief history of Ruby deserialization exploits #Ruby blog.trailofbits.com/2025/08/20/m...
Marshal madness: A brief history of Ruby deserialization exploits
This post traces the decade-long evolution of Ruby Marshal deserialization exploits, demonstrating how security researchers have repeatedly bypassed patches and why fundamental changes to the Ruby eco...
blog.trailofbits.com
September 3, 2025 at 11:17 PM
Marshal madness: A brief history of Ruby deserialization exploits #Ruby blog.trailofbits.com/2025/08/20/m...
Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack thehackernews.com/2025/09/clou...
Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack
Cloudflare mitigated a record 11.5 Tbps DDoS attack in 35 seconds, highlighting rising hyper-volumetric threats.
thehackernews.com
September 3, 2025 at 11:16 PM
Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack thehackernews.com/2025/09/clou...
WALDO 🟠 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
August 23, 2025 at 12:34 PM
ACTIVE 🟢 | HackTheBox - Solution
YouTube video by Jurassique Hack
youtu.be
August 16, 2025 at 10:49 AM