Hey Folks ! 🏔️ Here is writeups for all my challenges of @GrehackConf CTF - nishacid.guru/tags/grehack24… It was great fun to create them all, thanks to all the participants and we hope you enjoy them. I'm looking for feedback and don't hesitate to DM me if you have any questions 💚

CFP IS STILL OPEN FOR TALKS ! GreHack 2026 is coming soon... 🫣We invite you to share your talk about a cybersecurity topic of your choice ! 😁 Go now at GreHack.fr to send your talk before it's too late !👀Ending at the 13th.⌚ Thanks to everyone ! Cheers ! 🍻

Reminder: Grehack CfP is live! 📜 While we have the excuse of the summer heat to stay fresh in front of our computer, take the opportunity to refine your talk or workshop for #GreHack26. If you want to show your fresh new research or chill findings November 13-14 in Grenoble:

Grehack CFP open! 📜 #GreHack is coming back November 13-14 in Grenoble, now's your time to propose a talk or workshop about your new research, the cool tool you created, surprising vulns findings and your insightful cybersec experience! Call for Paper is open starting... Now!

Nouvelle vidéo sur le leak ANTS. Une faille IDOR a été évoquée. On voit ensemble ce que c'est concrètement, pourquoi c'est une faille basique, et ce qu'on peut en tirer. piped.video/rmjXDhc8Nas

Hello dear Root-Me community, We're aware of claims circulating on a hacking forum about a Root-Me data leak. We've obtained and analysed the files in question, and here's what we found. No user data is affected. The files contain only challenge source code, no passwords, no emails, no personal information. This is an old leak. Several years ago (prior to 2018, so nearly a decade old), a vulnerability allowed challenge sources from a specific server of ours to be extracted, and someone did exactly that at the time. The material surfacing today appears to originate from that incident. We've since fixed the underlying issue by hardening challenges and ensuring they were all properly sandboxed. There's nothing for our community to action, but if you have questions, we're here to answer them. We thank you all for the responsible reports that brought this to our attention. The Root-Me Team

I started playing CTFs in 2022, and LLMs definitely changed the **competitive** CTF scene a lot, especially since mid-2025. I also started using LLMs in late 2025. Yes, those models did one-shot many challenges, but what's the fun of slopping them? I learned absolutely nothing 🥲

LE WEB A CASSÉ en DÉCEMBRE 2025. React2Shell, MongoBleed, Livewire... les piliers d'Internet se sont effondrés. 💥 J'ai invité les chercheurs de chez @Synacktiv, @_Worty et @_remsio_, pour décortiquer la RCE sur Livewire (CVE-2025-54068)🛠️ piped.video/SZw5B-IJvHo

Combien on gagne VRAIMENT en Cybersécurité en 2026 ? 💸 J'analyse toutes les grilles de salaires (CDI vs Freelance) et ce qu'il reste vraiment dans ta poche. ⤵️ piped.video/bVb6I2P4CYQ

😤 "Punaise encore une fuite... Cette année, c'est décidé, je me lance dans la cyber !" Ok, mais par où commencer en 2026 ? Le marché a changé et le diplôme ne suffit plus. Dans cette nouvelle vidéo, je vous donne la roadmap exacte 👇👇 piped.video/y8-cqYXRfvk #CyberSécurité

Nominations for the Top 10 (new) Web Hacking Techniques of 2025 are now live! Review the submissions & make your own nominations here: portswigger.net/research/top…

The community have the burden of exposing the frauds in our industry - so let's go! @theXSSrat content is a non sense, he doesn't have the proper skillset nor any credibility in the field to be in a position to either create courses, mentor, or teach anything. #bugbounty

🇹🇼 J'ai organisé la finale des "JO du Hacking" à Taipei ! Le défi fou des WorldSkills Asia ? 🤯 avec @rootme_org 6 jours de config, de stress et de passion à découvrir dans mon nouveau Vlog 👇 piped.video/U7dGmOaiRmw

𝙿𝙰𝙶𝙴𝙳 𝙾𝚄𝚃! #𝟾 𝙳𝙴𝙰𝙳𝙻𝙸𝙽𝙴: 𝟺 𝙹𝚊𝚗𝚞𝚊𝚛𝚢 𝟸𝟶𝟸𝟼 𝙴𝚘𝙳 𝙴𝚘𝙰 Save the date if you're planning to write an article or showcase your digital art in the next issue of our magazine. pagedout.institute/ P.S. We're looking for sponsors for issue #8 as well.

GreHack is this Friday & Saturday! Friday: Talks all day + workshops 6–9pm. At the same time, join our Evening Social & Apéro . Everyone’s welcome, drop by anytime or come after your workshop to meet attendees, chat, and relax. Saturday: CTF , 8-hour competition for all levels

🔥 Docker n’est PAS sécurisé : la vérité que personne ne vous dit Dans ma vidéo : • docker.sock exposé • --privileged • capabilities dangereuses • root dans les conteneurs • images non durcies 👉 Comment sécuriser Docker (et éviter la catastrophe) : piped.video/PL-h_mqcJzY

Hey folks, welcome to the traditional "sponsor week" 🎉 We will be posting daily to thank each and every one of our sponsors for their support during this year's edition #GreHack25, but you can find them at any time on grehack.fr/sponsors/ 🤝

🚨 Une journée dans la peau d’un hacker éthique 💻 Entre audit, tests d’intrusion et vie de consultant en remote, je t’emmène dans les coulisses du pentest 🔍 🎥La vidéo est dispo ici piped.video/kSsjjy7UQmg

Hier, le cloud AWS tombait Mais il y a peu, le cloud Microsoft a frôlé bien pire : une faille (CVE-2025-55241) qui permettait d’usurper n’importe quel compte Entra ID - jusqu’au Global Admin Explication & démo piped.video/ZiqFYyBjUYY #EntraID #AzureAD #CVE2025 #CloudSecurity

Next IRL-Time - Save The Date ! 🤯 - Quoi : Pré-Event GreHack : @rootme_org x @OffenSkillCorp 💣️ - Pourquoi : Plus de potes, Plus de binouzes, Plus de rumps WTF 😏 - Quand : Jeudi 27 Novembre à 19h 📅 - Où : Tonneau de Diogène à Grenoble 🗺️ Orga : - 🌱 Soumettez vos rump à @Nishacid ou @TheLaluka en DM 🌱 - 🍻 RM x OSK régalent les premières planches et tournées 🍻 - ⚠️ Framadate RSVP, 50 places MAX ⚠️ framadate.org/WTlxsSxBjQsotG…

💣 We caught @ycombinator–backed @gecko_sec stealing two of our CVEs, one on @ollama , one on @Gradio. They copied our PoCs, claimed CVE IDs, and even back-dated their blog posts. Here’s the full story 👇