@cryptax.bsky.social
Android malware analysis. Ph0wn CTF founder. IoT hacking. Frequent speaker at Virus Bulletin, Insomnihack etc. Based in France. Currently testing Bluesky. Otherwise on Mastodon.social.
Blogged on Labuba RAT: cryptax.github.io/posts/labuba... My blog post is focused on reversing some anti-analysis features of the malware. For a general (technical) overview of the malware, read this blackpointcyber.com/blog/labub
LabubaRAT anti-analysis features
LabubaRAT is a Remote Access Tool (RAT) implemented in Rust. It was discovered and analyzed by two researchers at Blackpoint Cyber’s Adversary Pursuit Group. Usually, when there’s one technical analys...
cryptax.github.io
Join Axelle Apvrille from Fortinet at VB2026 in Seville for a walkthrough of a real cyber incident that targeted an 89-year-old man in February 2026, revealing the full process used by the cybercriminals. 📅 Oct 15 | 09:30-10:00 | Red Room 👉 tinyurl.com/mrxpt752
How 100 hospitals switched to pen and paper to defeat a national cyber-attack. Here is our in-depth 10 minute YouTube documentary which we produced about the incredible response of Romanian cyber security teams and the unseen heroics of doctors and nurses in 2024. www.youtube.com/watch?v=WxY6...
How 100 hospitals switched to pen and paper to defeat a cyber attack - BBC World Service
YouTube video by BBC World Service
youtube.com
Back from Capture The Evidence v2 organized by @eternalblue-off.bsky.social . It's an investigation-oriented CTF. All challenges and scenario are in French, but my blog is in English to motivate you to learn French and participate to the next edition ;P cryptax.github.io/posts/cte-v2/
Capture The Evidence v2 (2026)
Capture The Evidence v2 - June 2026 French gendarmerie 🇫🇷 organized a special CTF called “Capture The Evidence” from June 5 to June 15, 2026. I participated for the first time, with a team of 4 called...
cryptax.github.io
Last Friday, I was at Auvergn'hack, a small single-tracked conference in the middle of France. A very friendly atmosphere, beautiful weather, great venue, and several very interesting talks. cryptax.github.io/posts/auverg... #landlock #opencode #auvergne #quantum #crypto #conference #CTF
Ce vendredi, atelier "reverse avec IA" à Auvergn'hack : www.auvergnhack.fr - Configurer OpenCode - Installer Ghidra + son serveur MCP - Créer un agent et des skills pour le reverse - Résoudre divers challenges CTF et CrackMe avec IA - Visual Studio Code + Cline - Rétro-ingénierie de Saint Nectaire
Can't make it to NorthSec conferences this year? We got you covered! Talks will be livestreamed on Youtube on starting Thursday morning at 9:00, Eastern Time. ⏯️ Youtube playlist: www.youtube.com/playlist?lis...
NorthSec 2026 - YouTube
youtube.com
If you want to learn to use #AI #agents and #skills, my new blog post might interest you. It's about the setup I used to play @1ns0mn1h4ck.bsky.social CTF. Obviously, this is *not* the way to go to learn #CTF skills... cryptax.medium.com/agent-skills...
Agent & skills setup for Insomni’hack CTF
“Artificial Intelligence ruins CTFs and easily solves challenges”. Have you tried? I wanted to try and see for myself (1) how difficult the…
cryptax.medium.com
Inscription au CTE L’enfer numérique de la RGPACA 🚓 Inscrivez vous en suivant le lien suivant : 🔗 grist.numerique.gouv.fr/o/docs/forms... 🚨 Chaque équipier doit s’inscrire : vous recevrez un e-mail au plus tard 7 jours après votre inscription, pour vous signifier sa bonne prise en compte.
Ph0wn Mag #3 eZine is out! With writeups of FrangiPh0wn (teaser of Ph0wn) and Ph0wn CTF 2026 github.com/ph0wn/writeu...
What's particularly cool about Ph0wn CTF? 1. It's onsite. If you haven't ever been to an onsite CTF, you absolutely must. 2. It's dedicated to connected devices, so you get to interact with tons of equipment! 3. The challenges are really awesome, yes, yes. Register at ph0wn.org - March 13/14
Ph0wn CTF
ph0wn.org
Oh? Rust based keylogger?!
Virus Bulletin@virusbtn.bsky.social · 5mo agoArctic Wolf Labs tracks SloppyLemming, an India-nexus espionage actor targeting Pakistan and Bangladesh. The report details two attack chains: PDF-driven sideloading that deploys BurrowShell and an Excel macro chain that delivers a Rust-based keylogger. arcticwolf.com/resources/bl...
Ce mardi 3 mars 2026, une éclipse totale de Lune se produit. Une partie de la planète aura l’occasion de voir le satellite prendre une teinte rougeâtre, ce qui amène parfois à l’appeler « Lune de sang ». #PosterCarto de la #Lune ! :) 👇 le-cartographe.net/publications...
Can AI Agents detect some hidden Backdoors in Binaries? Experiments with Code injected in C/Rust Projects, then analyze of resulting Binary with AI Coding Agents + access to reverse engineering Tools (Ghidra, Radare2, and binutils) #ReverseEngineering #AI quesma.com/blog/introdu...
We hid backdoors in ~40MB binaries and asked AI + Ghidra to find them - Quesma Blog
BinaryAudit benchmarks AI agents using Ghidra to find backdoors in compiled binaries of real open-source servers, proxies, and network infrastructure.
quesma.com
👁️🌌 La nébuleuse de l’Œil du Chat comme vous ne l’avez jamais vue ! Grâce à Hubble Space Telescope et Euclid, une nouvelle image spectaculaire révèle les derniers instants d’une étoile à 4 300 années-lumière. 👉 À lire ici : cnes.fr/actualites/i... #Cnes @esa.int @ec-euclid.bsky.social
En images : la nébuleuse de l’Œil du Chat vue par Hubble et Euclid | CNES
Une nouvelle image a été dévoilée aujourd’hui par l’ESA : une observation conjointe des satellites Hubble et Euclid, qui se sont intéressés de très près à la nébuleuse de l’Œil du Chat, ou NGC 6543.
cnes.fr
⏰Time to register to ph0wn CTF now! There are also a few remaining seats to the Embedded Rust workshop, where you'll implement the 🐍Snake game on Micro:Bit. Don't forget your pirate costume 🧙♀️for the Creative Contest, and your xploits for ph0wn2own! ph0wn.org
Ph0wn CTF
ph0wn.org
This piece of code (Arduino) is vulnerable. What's the best fix? Comment. Don't know, or want to discuss about it? Come to ph0wn in Sophia Antipolis on March 13-14: ph0wn.org (free, registration required).
For ph0wn registration, we see that many of you are struggling to put several items in your cart and consequently create x different registrations. It's simple. In pretix, you need to click on "Add tickets for a different date". Then select an other "event" : CTF, social event, workshop. #ph0wn
Hoy ⚔️ Next Stream : FrangiPh0wn CTF - What, How, Who, WriteUps! 💣 👉 Mardi 17 Fevrier à 21h Ft. @Cryptax , Miaou, YoyoChaud 👉 Join Live www.twitch.tv/thelaluka 👉 Discord Events discord.com/events/11337...
Are you stuck on one of the first 2 challenges of #FrangiPh0wn? As the teaser ends in 2 days, we've released a few hints, and hope they will help you reach the next level ;) ctf.ph0wn.org #RF #OSINT #AI #retrogaming #ph0wn #CTF
📅 March 13-14, 2026 - Sophia Antipolis, France 🤠 Prepare your best outfit for Ph0wn CTF's side event: the "Creative Contest". Come dressed up as a pirate, and get a chance to win a Hydrabus 😃 👉️ Details: ph0wn.org/contest/ #CTF #ph0wn2026 #pirate #flagship #hydrabus #hacker Re-posts appreciated
All hands on keyboard, pen to paper - Elbsides 2026 Call for Paper is open!!! Make good on your New Year resolution to contribute to the infosec community and present on June 5th in Hamburg. www.elbsides.eu/2026/cfp/ #elbsides2026 #CFPisopen #startwriting #infosec
FrangiPh0wn, the Ultimate Galette for Hackers and ph0wn CTF teaser, is up until Feb 9. Head to ctf.ph0wn.org, and find the trinkets! Are you up to it? Only 15 participants flagged something up to now. Go for it! #CTF #teaser #RF #OSINT #ph0wn #frangiph0wn
Ph0wn #CTF Teaser Announced for January! We hope you get the right tools and skills for Xmas :D Get ready! We will announce #FrangiPh0wn in January. Keep an eye on ph0wn.org
Best talks, papers, CTF challenges, tools I encountered in the second half of 2025: cryptax.github.io/nomination-2... Congratulations to those who are listed, and kudos to others :) cc: @trufae.bsky.social @uybhys.bsky.social @nst021.bsky.social @synacktiv.com
Cryptax Nomination Awards 2025 H2
Cryptax Nomination Awards. Lol. In other words, I’m listing my favorite talks, papers, challenges (etc) for the second half of 2025. Nothing more than that. Okay? H2 2025 Category Nominated Best secur...
cryptax.github.io
Variants of 2025 of Symbiote and BPFDoor support IPv6, UDP communication with C2. Reverse engineering the samples with r2ai and r2mcp. www.fortinet.com/blog/threat-... #malware #Linux #BPF #r2ai #r2mcp
New eBPF Filters for Symbiote and BPFdoor Malware | FortiGuard Lab
FortiGuard Labs discovered new Symbiote and BPFDoor variants exploiting eBPF filters to enhance stealth through IPv6 support, UDP traffic, and dynamic port hopping for covert C2 communication.…
fortinet.com
