alt3kx

View on GitHub

alt3kx.github.io

RedTeamer | PentTester | Bug Bounty | 0day guy! | Researcher | Lone Wolf…
https://github.com/alt3kx | @alt3kx@infosec.exchange on Mastodon @alt3kx

AI Security Research

SANS SEC546: Securing Agentic AI 2026 - 🤖 Selected Alpha Program Participant

🆕 Oct 2026 · SANS Institute · 🏅 Alpha Training Certificate

Selected by SANS to participate in the SEC546 Alpha Program. Completed advanced hands-on labs focused on agentic AI security, including prompt injection, MCP security, agent identity, and runtime protection. Provided structured technical feedback on course content and lab exercises to help refine the training experience for future students.
Agentic AI Security MCP Prompt Injection AI Defense Hands-on Labs

SANS Find Evil! AI Hackathon 2026 - 🤖 Judge

Aug 2026 · SANS Institute

First competition evaluating autonomous AI agents on real digital forensic evidence. 49 submissions evaluated across 3 rounds including live SIFT Workstation validation runs.
AI Security DFIR Autonomous Agents MCP Offensive Security

My Exploit-db reference at:

https://www.exploit-db.com/author/?a=1074
https://www.exploit-db.com/author/?a=9576

A handy collection of my public Exploits & CVE’s, all available on

https://www.exploit-db.com and https://cve.mitre.org

CVE’s

MicroFocus Reward + Critical $XX,000 USD (Back) MicroFocus Reward (Front)
swag_back swag_front

[CVE-2019-10685] Prinect Archive System 2015 Release 2.6 - Cross-Site Scripting
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10685

[CVE-2018-12596] Ektron CMS 9.20 SP2 allows remote attackers to call aspx pages via the “activateuser.aspx” page
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12596

[CVE-2018-7690] A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7690

[CVE-2018-7691] A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7691

[CVE-2018-12463] An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12463

[CVE-2018-10732] The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-10732

[CVE-2009-4118] Cisco VPN Client - Integer Overflow Denial of Service
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-4118

[CVE-2008-6827] Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6827

[CVE-2007-6638] March Networks DVR 3204 - Logfile Information Disclosure
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2007-6638

[CVE-2007-5036] Airsensor M520 - HTTPd Unauthenticated Remote Denial of Service / Buffer Overflow (PoC)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2586

[CVE-2007-3831] PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3831

[CVE-2007-3830] IBM Proventia Sensor Appliance - Multiple Input Validation Vulnerabilities
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2007-3830

[CVE-2004-2549] Nortel Wireless LAN Access Point 2200 Series - Denial of Service
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2549

[CVE-2002-0991] Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0991

[CVE-2002-0740] SLRNPull Spool Directory Command Line Parameter Buffer Overflow Vulnerability
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0740

[CVE-2002-0448] Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2002-0448

[CVE-2002-0348] service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0348

[CVE-2002-0347] Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0347

[CVE-2002-0346] Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0346

[CVE-2002-0289] Phusion WebServer 1.0 - ‘URL’ Remote Buffer Overflow
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0289

[CVE-2002-0288] Phusion WebServer 1.0 - Directory Traversal (1)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0288

[CVE-2002-0201] Cyberstop Web Server for Windows 0.1 allows remote attackers to execute arbitrary code
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2002-0201

[CVE-2002-0200] Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0200

[CVE-2001-1442] ISC INN 2.x - Command-Line Buffer Overflow
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1442

[CVE-2001-0934] Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2001-0934

[CVE-2001-0933] Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0933

[CVE-2001-0932] Cooolsoft PowerFTP Server 2.0 3/2.10 - Multiple Denial of Service Vulnerabilities
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0932

[CVE-2001-0931] Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0931

[CVE-2001-0758] Directory traversal vulnerability in Shambala 4.5
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2001-0758

[CVE-2001-0680] Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0680

CTF Games

SANS CTF European Championship 🇪🇺 | SANS CTF Championship 2026 (Exclusive Top 10, Coin achieved) 🏆
sansemea

SANS Tournament of Champions 2025 (Top team) SANS Tournament of Champions 2025 (Top team)
0 2

SANS Holiday Hack Challenge 2025: Revenge of the Gnomes 100% achieved 💯🎄🎉

hhc2025

SANS Skills Quest by NetWars (SSQ) - Core Edition** 🇺🇸: SANS Skills Quest 2025 🏆

ssq2025b

SANS ToC Champion 2024 as solo category SANS ToC Champion 2024 as solo category
0 1
SANS ToC Champion 2023 as solo category SANS ToC Champion 2023 as solo category
0 1
SANS Tournament of Champions 2022 (special invite) KringleCon 2022 Hoodie Winner
1 hoodie
SANS Tournament of Champions 2021 (special invite) SANS Tournament of Champions 2021 (special invite)
1 3
SANS Tournament of Champions 2021 SANS Tournament of Champions 2021
1 3
Offensive & Defensive, DFIR and Cloud l337 SANS Coins KringleCon 2020 Hoodie Winner
SANS_coins hoodie

SANS loot 2026:

🆕 SANS Core NetWars Tournament 12 🇳🇱: SANS Core NetWars Tournament 12 - SANS Amsterdam (in person) | (Coin achieved / 1st place) 🏆🎉
https://ranges.io

nwv12

SANS Core NetWars Tournament 12 🇺🇸: SANS Core NetWars Tournament 12 - SANS San Antonio 2026 (Coin achieved / 2nd place) 🏆
https://ranges.io

nwv12

SANS CTF European Championship 🇪🇺: Qualified SANS CTF Championship Final 2026 (Exclusive Top 10 Coin Coin achieved) 🏆
Top-ranked competitor in France 🇫🇷
https://ranges.io
https://www.sans.org/mlp/ctf-european-championship-2026

💥 Multidisciplinary domains included:

🌐 Web Exploitation & Security
🧩 Digital Forensics & Incident Response
🧠 Malware Analysis
⚙️ Binary Exploitation & Reverse Engineering
📊 Log, Threat & Network Analysis
💣 Penetration Testing

sans_emea

SANS Women’s History Month Celebration 🇺🇸: SANS Women’s History Month BootUp CTF, powered by SANS 🏆
In honor of Women’s History Month
https://ranges.io
https://www.sans.org/webcasts/womens-history-month-ctf-orientation

💥 Multidisciplinary domains included:

🌐 Web Exploitation & Security
🧩 Digital Forensics & Incident Response
🧠 Malware Analysis
⚙️ Binary Exploitation & Reverse Engineering
📊 Log, Threat & Network Analysis
💣 Penetration Testing

sans_wom

SANS Black History Month Celebration 🇺🇸: SANS Black History Month BootUp CTF, powered by SANS 🏆
https://ranges.io
https://www.sans.org/mlp/black-history-month-bootup-ctf

💥 Multidisciplinary domains included:

🌐 Web Exploitation & Security
🧩 Digital Forensics & Incident Response
🧠 Malware Analysis
⚙️ Binary Exploitation & Reverse Engineering
📊 Log, Threat & Network Analysis
💣 Penetration Testing

sans_black

SANS loot 2025:

SANS Holiday Hack Challenge 2025: SANS HHC: Revenge of the Gnomes 2025 100% achieved 💯 https://2025.holidayhackchallenge.com/

SANS HHC: Revenge of the Gnomes 2025 SANS HHC: Revenge of the Gnomes 2025 SANS HHC: Revenge of the Gnomes 2025
1 2 3

SANS Tournament of Champions 2025 🇺🇸: SANS NetWars v11 Tournament of Champions ToC (in person) | (Coin achieved / Top team) 🏆
https://ranges.io
toc2025

AWS Skills to Jobs CTF 🇺🇸: AWS Skills to Jobs CTF, powered by SANS 🏆
https://ranges.io

💥 Multidisciplinary challenges covered:

☁️ Cloud Security
🌐 Web Exploitation & Security
🧩 Digital Forensics & Incident Response
🧠 Malware Analysis
🔎 Reconnaissance
⚙️ Binary Exploitation & Reverse Engineering
🔐 Cryptography, Encryption & Data Analysis
📊 Log, Threat & Network Analysis
🛡️ Cyber Defense & Security Operations
💣 Penetration Testing

aws2025

SANS Skills Quest by NetWars (SSQ) - Core Edition 🇺🇸: SANS Skills Quest 2025 | 277+ challenges achieved 🏆
https://ranges.io
https://www.sans.org/cyber-ranges/skills-quest

Defense, Forensics, Threat Intelligence, Offensive Ops

🫎 SIEM/ELK threat hunting
🧠 Cyber threat intelligence
🐍 Python coding essentials
🧪 Advanced malware analysis
🔐 Cryptographic exploitation
💣 Binary exploitation
🛡️ Network traffic analysis
🔎 Web & app penetration testing
⚙️ Linux & PowerShell fundamentals

ssq2025

SANS loot 2024:

SANS Holiday Hack Challenge 2024: Holiday Hack Challenge VII: Snow-maggedon 2024 100% achieved 💯 https://2024.holidayhackchallenge.com/

Holiday Hack Challenge VII: Snow-maggedon 2024 Holiday Hack Challenge VII: Snow-maggedon 2024 Holiday Hack Challenge VII: Snow-maggedon
1 2 3

SANS Tournament of Champions 2024 🇺🇸: SANS NetWars v10 Tournament of Champions ToC (in person) | (Trophy & commemorative coin achived) 🏆🏆
https://ranges.io
toc2024

SANS loot 2023:

SANS Holiday Hack Challenge 2023: Holiday Hack Challenge VI: A Holiday Odyssey 2023 100% achieved 💯
https://2023.holidayhackchallenge.com/

Holiday Hack Challenge VI: A Holiday Odyssey 2023 Holiday Hack Challenge VI: A Holiday Odyssey 2023 Holiday Hack Challenge VI: A Holiday Odyssey 2023
1 2 3

SANS Tournament of Champions 2023 🇺🇸: SANS NetWars v9 Tournament of Champions ToC (in person) | (Trophy, coin & commemorative coin achieved) 🏆🏆🏆
https://ranges.io
toc2023

SANS Holiday Hack Challenge 2022: KringleCon V: Golden Rings 2022 Write-Up disclosed 💯
https://alt3kx.github.io/CTF_writeup/holidayhack/2022/index.html
https://www.sans.org/mlp/holiday-hack-challenge/ (Submission deadline of January 6, 2023)

alt3kx_KringleCon_2022_Write-Up

SANS loot 2022:

SANS Holiday Hack Challenge 2022: KringleCon V: Golden Rings 2022 100% achieved 💯
https://2022.kringlecon.com/

KringleCon V: Golden Rings 2022 KringleCon V: Golden Rings 2022 KringleCon V: Golden Rings 2022
01 02 03

SANS Tournament of Champions 2022: SANS Tournament of Champions 2022 4th Veteran Individual Top Leader-Board 4th place 🥉
https://ranges.io

SANS Tournament of Champions 2022 SANS Tournament of Champions 2022
1 3

SANS National French CTF 2022 🇫🇷: SANS National French CTF 2022, Top Leader-Board 1st place (Gold Medal achieved) 🏆
https://ranges.io
github_02

SANS loot 2021:

SANS Tournament of Champions 2021: SANS ToC Champions 2021 (special invite) (Coin achieved) 🏆
SANS Tournament of Champions 2021: SANS ToC Champions 2021 (Coin achieved) 🏆
SANS France CTF 🇫🇷: SANS France BootUp 2021, Top Leader-Board 2nd place (Silver Medal achieved) 🥈
SANS SEC542: Web App Penetration Testing and Ethical Hacking (Coin achieved) 🏆
SANS SEC560: Network Penetration Testing and Ethical Hacking (Coin achieved) 🏆

SANS loot 2020:

SANS SEC588: Cloud Penetration Testing (Coin achieved) 🏆
SANS SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking (Coin achieved) 🏆
SANS SEC642: Advanced Web App Penetration Testing, Ethical Hacking, and Exploitation Techniques (Coin achieved) 🏆
SANS SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling (Coin achieved) 🏆
SANS Core NetWars Tournament 1st place (Coin achieved ) 🏆
SANS Cyber Defense NetWars Tournament 1st place (Coin achieved) 🏆
SANS NetWars Tournament of Champions (Top 10 teams/Coin achieved) 🏆
SANS Community CTF Tournament of Champions (Top player achieved) 🏆
SANS Mini-Netwars CTF winners (Hall of fame achieved) 🏆
https://www.counterhackchallenges.com/winners
SANS Holiday Hack Challenge KringleCon 2020 (Winner/Hoodie achieved) 🏆

NCL loot 2026:

National Cyber League (NCL) 🇺🇸: Spring 2026, Team competition, (Top team) 🏆
https://cyberskyline.com/hosted_events/ncl-spring-2026/ ncl_spring_2026

NCL loot 2025:

National Cyber League (NCL) 🇺🇸: Fall 2025, Team competition, (Top team) 🏆
https://cyberskyline.com/hosted_events/ncl-fall-2025/ ncl_fall_2025

National Cyber League (NCL) 🇺🇸: Spring 2025, Team competition, (Top team) 🏆
https://cyberskyline.com/hosted_events/ncl-spring-2025/ ncl_spring_2025

NCL loot 2024:

NCL Spring 2024 champion NCL Spring 2024, champion (t-shirt)
01 02

National Cyber League (NCL) 🇺🇸: Spring 2024, Team competition, (Champions!!, 3rd Place) (Trophy & Plaque) 🏆🥉🎉
https://cyberskyline.com/hosted_events/ncl-spring-2024/ scorebard_github_27 APR 24

National Cyber League (NCL) 🇺🇸: Spring 2024, individual competition, (top player) (Coin achieved) 🏆
https://cyberskyline.com/hosted_events/ncl-spring-2024/ ncl_spring_2024

NCL loot 2023:

National Cyber League (NCL) 🇺🇸: Fall 2023, Team competition, (Top10 team) 🏆
https://cyberskyline.com/hosted_events/ncl-fall-2023/ ncl_fall_2023

leaderboard

National Cyber League (NCL) 🇺🇸: Fall 2023, individual competition, (top player) (Coin achieved) 🏆
https://cyberskyline.com/hosted_events/ncl-fall-2023/ ncl_fall_2023

NCL Spring 2023, individual competition (coin) NCL Spring 2023, individual competition (t-shirt)
1 3

National Cyber League (NCL) 🇺🇸: Spring 2023, Team competition, (Top10 team) 🏆
https://cyberskyline.com/hosted_events/ncl-spring-2023/ ncl_spring_2023

leaderboard

National Cyber League (NCL) 🇺🇸: Spring 2023, individual competition, (top player) (Coin achieved) 🏆
https://cyberskyline.com/hosted_events/ncl-spring-2023/ ncl_spring_2023

CLOUD ☁️

🆕 WIZ, The ultimate Cloud Security, ChampionsShip (12 Months x 12 Challenges) 🇺🇸 ☁️| Monthly CTF challenge! | 2025 / 2026
https://www.cloudsecuritychampionship.com/

🏆🎉 Global Rank #25 | One final challenge: Glass House | 05.JUN.26
scorecard_2026


Challenge #1: Perimeter Leak 💥 Challenge #2: Contain Me If You Can 💥 Challenge #3: Breaking The Barriers 💥 Challenge #4: Needle in a Haystack 💥
out_1 out_2 out_3 out_4
Challenge #5: Game of Pods 💥 Challenge #6: Malware Busters! 💥 Challenge #7: State of Affairs 💥 Challenge #8: Confession Booth 💥
out_5 mystery mystery mystery
Challenge #9: Trust Issues 💥 Challenge #10: Happy Birthday 💥 Challenge #11: Split Horizon 💥 Challenge #12: Glass House 💥
mystery mystery mystery mystery

🆕 Pwnedlabs.io 🇺🇸 ☁️| Cyber Ranges multi-cloud environments| 2025 / 2026
https://pwnedlabs.io/

OSINT

OSINT Tracelabs Search Party CTF, Missing persons loot 2026

🆕 OSINT Tracelabs Search Party CTF: Global OSINT Searchparty CTF 2026.02 (Senior Coach, Badge achieved) 🎖️
Searchparty CTF 2026.02

OSINT Tracelabs Search Party CTF, Missing persons loot 2025

OSINT Tracelabs Search Party CTF: Global OSINT Searchparty CTF 2025.11 (Coach, Badge achieved) 🎖️
Searchparty CTF 2025.11
Honored to support this team, managing all their OSINT evidences during this competition, 1st place well deserved guys!!

SE4L scoreboad_15 NOV 25

OSINT Tracelabs Search Party CTF 🇫🇷: OSINT LeHack!,Paris France CTF 2025.06 (Coach, Badge achieved) 🎖️
Searchparty CTF 2025.06

OSINT Tracelabs Search Party CTF: Global OSINT Searchparty CTF 2025.04 (Coach, Badge achieved) 🎖️
Searchparty CTF 2025.04

OSINT Tracelabs Search Party CTF: Global OSINT Searchparty CTF 2024.11 (Coach, Badge achieved) 🎖️
Searchparty CTF 2024.11

Tracelabs Darknet Workshop Level 1: Darknet Workshop Level 1 2020.09 (Badge achieved) 🎖️
Darknet Workshop Level_1 2020.09

Magnet Forensics loot 2023:

🆕 Magnet Forensics CTF 🇺🇸: Magnet User Summit 2023 CTF, individual competition 🏁
https://www.magnetforensics.com/

Magnet User Summit 2023 CTF Magnet User Summit 2023 CTF (scoreboard)
MUS23_CTF_Logo-4 MUS23_CTF_scoreboard

AWS + HackerOne loot 2021:

HackerOne’s first-ever AWS CTF: AWS + HackerOne, Solved (New private invitation achieved) 💰
Hackeone BugBounty Private invites: 6️⃣ 💰💰💰💰💰💰

BugCrowd loot 2022:
“The Lure Challenge ,don’t be afraid …“ 🇺🇸 BugCrowd Halloween Challange 2022 solved, (Reward achieved) 🏆
https://twitter.com/Bugcrowd

. .

BugCrowd loot 2021:
BugCrowd BugBounty Private Invites: 1️⃣ 💰

Yeswehack! loot 2024:

🆕 Dojo Challenge #35 🇫🇷: Solved!: Write-Up disclosed 💯
https://dojo-yeswehack.com/challenge-of-the-month/dojo-35
https://github.com/alt3kx/CTF_writeups/tree/main/yeswehack/2024/dojo_35/

Dojo Challenge #35 Dojo Challenge #35 Flag
chall35 chall35

Dojo Challenge #34 🇫🇷: Solved!: Write-Up disclosed 💯
https://dojo-yeswehack.com/challenge-of-the-month/dojo-34
https://github.com/alt3kx/CTF_writeups/tree/main/yeswehack/2024/dojo_34/

Dojo Challenge #34 Dojo Challenge #34 Flag
chall34 chall34a

Dojo Challenge #33 🇫🇷: Solved!: Write-Up disclosed 💯
https://dojo-yeswehack.com/challenge-of-the-month/dojo-33
https://github.com/alt3kx/CTF_writeups/tree/main/yeswehack/2024/dojo_33/

Dojo Challenge #33 Dojo Challenge #33 Flag
chall33 chall33a

Dojo Challenge #32 🇫🇷: Solved!: Write-Up disclosed 💯
https://dojo-yeswehack.com/challenge-of-the-month/dojo-32
https://github.com/alt3kx/CTF_writeups/tree/main/yeswehack/2024/dojo_32/

Dojo Challenge #32 Dojo Challenge #32 Flag
chall32 chall32a

Dojo Challenge #31 🇫🇷: Solved!: Write-Up disclosed 💯
https://dojo-yeswehack.com/challenge-of-the-month/Dojo-31
https://github.com/alt3kx/CTF_writeups/tree/main/yeswehack/2024/dojo_31/

Dojo Challenge #31 Dojo Challenge #31 Flag
chall31 chall31a

Dojo Challenge #30 🇫🇷: Solved!: Write-Up disclosed 💯
https://dojo-yeswehack.com/challenge-of-the-month/Dojo-30
https://github.com/alt3kx/CTF_writeups/tree/main/yeswehack/2024/dojo_30/

Dojo Challenge #30 Dojo Challenge #30 Flag
chal30 chal30a

Yeswehack! loot 2023:

Dojo Challenge #29 🇫🇷: Swag pack received, special Dojo XMAS (2023) challenge!!! 🏆
https://dojo-yeswehack.com/practice/ec2ca31dc37d

Yeswehack! swag 1 Yeswehack! swag 2 Yeswehack! swag 3 Yeswehack! swag 4
0 1 2 3

Dojo Challenge #29 🇫🇷: Solved!: Write-Up disclosed 💯
https://dojo-yeswehack.com/practice/ec2ca31dc37d
https://github.com/alt3kx/CTF_writeups/tree/main/yeswehack/2023/dojo_29

Dojo Challenge #29 Dojo Challenge #29 Flag
chal29a chall29c

Dojo Challenge #28 🇫🇷: Solved!: Write-Up disclosed 💯
https://dojo-yeswehack.com/practice/e0626b14ae4f
https://github.com/alt3kx/CTF_writeups/tree/main/yeswehack/2023/dojo_28

Dojo Challenge #28 Dojo Challenge #28 Flag
chall28 14

Yeswehack! loot 2022:
Dojo Challenge #19 🇫🇷: Swag pack, winner!!! 🏆
https://blog.yeswehack.com/dojo/dojo-challenge-19-winners

Yeswehack! swag 1 Yeswehack! swag 2 Yeswehack! swag 3 Yeswehack! swag 4
swagg_01 swagg_02 swagg_03 swagg_4

Dojo Challenge #19 🇫🇷: Solved!: winner!!! 🏆
https://blog.yeswehack.com/dojo/dojo-challenge-19-winners
https://github.com/alt3kx/CTF_writeups/tree/main/yeswehack/2022/dojo_19

Dojo Challenge #19 Winners Dojo Challenge Flag #19
winners flag

Yeswehack! loot 2021:
Yeswehack! BugBounty Private Invites: 1️⃣ 💰

Global CyberPeace Challenge:

Capture The Flag [IT] Global CyberPeace Challenge 2.0 2021 (Finalist achieved) 🏆
https://cyberchallenge.net

CTF Global CypberPeace 2.0 2021 (Medal) CTF Global CypberPeace 2.0 2021 (Swag)
3 1

PoCs (Proof of Concept)

🆕 [CVE-2026-18963] PoC CVE-2026-18963 | Keycloak Reset-Credentials State Bypass (Recon + Exploitation)
https://github.com/alt3kx/CVE-2026-18963

[CVE-2026-23918] Apache mod_http2 Double-Free (My early Detector tool)
https://github.com/alt3kx/CVE-2026-23918

[CVE-2023-24055] PoC CVE-2023-24055 | KeePass 2.5x export trigger injection (My early PoC)
https://github.com/alt3kx/CVE-2023-24055_PoC

[CVE-2022-1388] (PoC) CVE-2022-1388 | F5 BIG-IP RCE exploitation
https://github.com/alt3kx/CVE-2022-1388_PoC

[CVE-2022-22965] (PoC) CVE-2022-22965 | Spring Framework RCE exploitation (Quick pentest notes)
https://github.com/alt3kx/CVE-2022-22965_PoC

[CVE-2021-21985] (PoC) CVE-2021-26084 | Confluence Server Webwork OGNL injection
https://github.com/alt3kx/CVE-2021-26084_PoC

[CVE-2021-21985] (PoC & NSE checker) VMware vCenter Server CVE-2021-21985 RCE Virtual SAN Health Check plug-in
https://github.com/alt3kx/CVE-2021-21985_PoC

[CVE-2021-26855] My early SSRF payloads (CVE-2021-26855) over Exchange Server 2019… (two python exploits added)
https://github.com/alt3kx/CVE-2021-26855_PoC

Tools

🆕 Enhance your malware detection with WAF + YARA (WAFARAY) | WAFARAY Tool
https://github.com/alt3kx/wafaray

[CVE-2022-22965] Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)
https://github.com/alt3kx/CVE-2022-22965

Quick WAF “paranoid” Doctor Evaluation | WAFPARAN01D3 Tool
The Web Application Firewall Paranoia Level Test Tool.

[CVE-2021-21972] (NSE checker) VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability
https://github.com/alt3kx/CVE-2021-21972

[CVE-2019–0708] Build an easy RDP Honeypot with Raspberry PI 3 and observe the infamous attacks as (BlueKeep) CVE-2019–0708 https://medium.com/@alt3kx/build-an-easy-rdp-honeypot-with-raspberry-pi-3-and-observe-the-infamous-attacks-as-bluekeep-29a167f78cc1

Papers

🆕 My AWS “Segmentation Test” Methodology for Pentesters v1.0 ☁️
https://medium.com/@alt3kx/my-aws-segmentation-test-methodology-for-pentesters-v1-0-bc110753c1e9

Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities (13048)
With sirdarckcat (VRP Leader & Web Researcher from Google Company) 🇨🇭
https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf
http://sirdarckcat.blogspot.com/2008/09/symantec-altiris-deployment-solution.html

An Insecurity Overview of the March Networks DVR-CCTV 3204 (13060)
https://www.exploit-db.com/docs/english/13060-an-insecurity-overview-of-the-march-networks-dvr-cctv-3204.pdf

Tactical-Exploitation-and-Response-Over-Solaris-Sparc-5.8-5.9-Systems (13072)
https://www.exploit-db.com/docs/english/13072-tactical-exploitation-and-response-over-solaris-sparc-5.8–5.9-systems.pdf

Having Fun with “Sensor Appliance” Proventia GX5108 & GX5008 Insecurities Part One (13081)
https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf

IoT Pentesting / Security Projects

🆕 “Zovek” , My Offensive IoT Redteam Implant v1.0
https://medium.com/@alt3kx/zovek-my-offensive-iot-redteam-implant-v1-0-f9787217fec0

Zovek (1) Zovek (2)
zovek1 zovek2

Contributor on Security Projects/Research

Metasploit Framework

1667149332665

🆕 Body of research on CVE-2022-1388, (Metasploit Framework / Rapid7) 🇺🇸 new exploit module available
See the linked reference, mention , credits and code here:
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/f5_icontrol_rce.rb

Body of research on CVE-2021-215, (Metasploit Framework / Rapid7) 🇺🇸 new exploit module available
See the linked reference, mention , credits and code here:
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_vcenter_vsan_health_rce.rb

Build your own RDP Honeypot by Chapin Bryce (DFIR professional, Co-author of Learning Python for Forensics & Python Forensics Cookbook) 🇺🇸
See the linked reference, mention , credits and code here:
https://medium.com/pythonic-forensics/build-your-own-rdp-honeypot-24c1687cb7e9
https://github.com/chapinb

My Aircrack-ng contribution with Thomas d’Otreppe (Wireless security researcher and author of Aircrack-ng) 🇧🇪
See the linked reference, mention , credits and code here:
https://www.aircrack-ng.org/doku.php?id=airdecloak-ng
https://github.com/alt3kx/airdecloak-ng

My contribution VUPEN (French Company 🇫🇷 ) IBM Proventia IDS/IPS Exploitation (CVE-2007-3830), (CVE-2007-3831)

VUPEN research (VUPEN ADV-2007-2545)

https://www.vupen.com/english/advisories/2007/2545
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3830
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3831

Books

l337 friends mentions ;-)

Buy it on Amazon: Nmap 6: Network Exploration and Security Auditing Cookbook 💥

_ _ _
Nmap1 Nmap2 Nmap3