11 Photos and videos
Elweth retweeted
CVE drops at 6 PM.
Twitter starts screaming.
Hunters with BugRecon type one query:
nginx:1.14.0
Boom. Every asset running that version. Ready for a Nuclei spray in one click.
The first PoC wins the bounty. Be first.
app.bugrecon.me
#bugbounty #cve
2
11
1,168
You may know that one guy in high school who showed up at every party without being invited? Well, that was me. I always wondered whether there was an internet version of the same thing
internethandout.com/post/fea…
6
19
100
5,899
Elweth retweeted
23 Dec 2025
🚨 RCE in #Livewire (CVE-2025-54068)!
Our specialists uncovered a critical flaw allowing remote code execution without the APP_KEY, exploiting Livewire’s hydration mechanism PHP’s loose typing.
🔗 Patch now! (v3.6.4 )
synacktiv.com/en/publication…
2
62
166
48,882
Elweth retweeted
10 Dec 2025
Last month at #codeblue 2025, our expert Valentino discussed the internals of Kindle devices and unveiled an audiobook vulnerability he discovered.
Missed it? It's not too late! Join us tomorrow at #BHEU 2025 for a very novel briefing📚
blackhat.com/eu-25/briefings…
4
8
839
Elweth retweeted
24 Oct 2025
Rendez-vous lundi 27/10 pour le meetup d’octobre ! 🎃
Programme : @Elweth_ @_Ali4s_
* Création d’un scanner de sous-domaines sous stéroïdes uniquement pour flatter mon égo ?
* Automatisation de la recon web pour gagner du temps et de💰
📍Boulangerie Bar - 19H (Salle du bas)
3
4
726
Elweth retweeted
17 Oct 2025
New Research by @siunam321! - lab.ctbb.show/research/crlf-…
CRLF Injection → Nested Response Splitting (CSP gadget). Inject \r\n\r\n in headers to push HTML into the body and bypass script-src 'self'.
2
30
141
14,230
Elweth retweeted
28 Jul 2025
Big update: Subdomain enumeration now uses separate quotas for each plan!
This means MORE data for the same price. Plus, our free tier still lets you discover hundreds of subdomains monthly - no payment required.
Check out the documentation docs.profundis.io/api/subdom…
#bugbounty
2
7
27
2,188
Elweth retweeted
1 Jun 2025
Le prochain meetup aura lieu ce lundi 02/06👾
Au programme :
- L’ADCS post-certifried, la fin de la easy win ? @Prepouce_
- Targeting postMessage vulnerabilities by @Elweth_
📍Boulangerie Bar - 02/06 à partir de 19h
(Salle du bas)
#Cyber #infosec
3
8
497
Elweth retweeted
21 Apr 2025
Enjoyed CTF10K? We’re back.
🎯 #CTF20K – After the success of CTF10K, we're doing it again: the ultimate solo challenge, open to all skill levels, to celebrate Root-Me hitting 20K Discord members!
📅 May 10, 10:00 CEST – May 11, 23:59 CEST
💻 Pwn, Crypto, Web, Reverse, Misc…
🏆 Lots of prizes, lots of glory
🔗 ctf20k.root-me.org
ALT Illustration image of the CTF20k with dates and explicit categories : Intro, Crypto, Reverse, Web, Pwn, Misc, Blockchain.
1
11
27
6,580
Elweth retweeted
28 Apr 2025
The #FCSC2025 ended yesterday, and my write-ups are now available here 👇
mizu.re/post/fcsc-2025-write…
Btw, like every year, all the challenges have also been added to hackropole.fr! 🚩
1/2
18 Apr 2025
This year again, with @BitK_, we've made the Web challenges 🚩
The CTF is solo and lasts 10 days, if you have some time, please give it a look 😁
Btw, even if you're not doing Web challenges, there are 100 challenges in various categories, you should find something you like!
2
20
90
5,107
Elweth retweeted
23 Apr 2025
Slides of my BSides Seattle presentation about how to bypass the Content Security Policy
nzt-48.org/slides/how-to-byp…
@bsidesseattle @SecurityBSides #BSidesSeattle #BSidesSeattle2005
1
12
66
4,078
Hey hunters,
I'm sharing a little tool I created to gather all the #YWH program info you have and sort it by relevance in one place.
Choose the best program & Let's go for bounties 💰!
Link : github.com/jdouliez/ywh_prog…
@yeswehack #sharingiscaring bugbountyTips #😂
4
31
108
6,099
A crazy year with @yeswehack ! With Louis Vuitton LHE, Romhack and the various collabs, 2024 has been productive, I managed to place 10th in this year's ranking!
What are the plans for 2025? 🫣
2
15
273
Here are the writeups for the challenges I developed for the CTF @rootme_org Xmas!
I've also included the sources if you need them!
github.com/elweth-sec/Root-M…
5
30
1,445
Elweth retweeted
22 Dec 2024
🎄 Root-Xmas Challenge 🎄
✨ Today, discover the challenge The date is near in the Misc category!
📌 Submitted by :
@Elweth_
🔗 Details & participation here: xmas.root-me.org
2
4
979
My talk at Ekoparty is out now in case you missed it! 👀
18 Dec 2024
Curious about advanced techniques to exploit SSTIs? 💉 At @ekoparty, @Brumens2 proved that "limitations are just an illusion", showcasing how to achieve RCE from SSTIs using payloads that bypass traditional constraints 👇 @BugBountyArg #BugBountyTips
youtube.com/watch?v=FVm6wYc1…
2
2
27
3,248
Elweth retweeted
18 Dec 2024
🎄 Root-Xmas Challenge
💎 Today, discover the challenge Santa's sweet words in the Web category!
📌Submitted by : @Elweth_
🔗 Details & participation here: xmas.root-me.org
1
7
812