-
Postmaniac: a new OSINT tool for Postman
At Sthack 2023, I discovered a new OSINT tool presented during the rump sessions: Postmaniac. Created by Pierre Ceberio, an OSINT & Security Analyst, it caught my attention with its…
-
Sthack 2023: cybersecurity talks and CTF
The new edition of one of the major cybersecurity events in Nouvelle-Aquitaine took place on Friday 12 May: Sthack 2023! As last year, the talks were held at the Cité…
-
How to carry out an information system security audit
Every company is going digital and must comply with a growing number of standards. An information system (IS) security audit has become a must. What is an information system (IS)…
-
ARP: understanding the protocol and its security flaws
Whenever you use your computer, or even your smartphone, it constantly communicates using many protocols, including ARP. In this article, we take a closer look at how ARP works and…
-
Digital hygiene rules to follow for optimal security
Hygiene has always been part of everyday life, helping you make sensible decisions about your body and much more. The same principle applies to computing, where we talk about digital…
-
DevOps: improve the security and quality of your projects
When running a project, you probably run into plenty of problems: technical debt, rocky releases and so on. Learning DevOps, hiring a DevOps engineer or simply sharing the philosophy can…
-
Protect your email, phone number and personal data
In an increasingly connected world, it’s common to have to hand over personal data to use a service. We tend to be careful when asked for sensitive data such as…
-
Building a USB sanitization station to protect against removable media
We’ve all come across a USB stick (or something that looks like one) in the street, at school or at work. Without a USB sanitization station (known in French as…
-
E-corp OSINT challenge: a misconfigured API
A short write-up of an E-corp OSINT challenge I really enjoyed during a CTF on 20 January 2021. The challenge hint was: Log in to the API. OSINT E-corp The…
Decoding email scams, data breaches and security flaws: practical guides to protect your accounts and devices.
