Recent content in Welcome ! on mh4ckt3mh4ckt1c4s' blog
Recently, an incident involving malware in the AUR made the headlines . I read a lot of things around this topic, both right and wrong, and sometimes misleading. I was involved in the incident handling I chose to write this blog post, not only for transparency but also for laying down what I learned both during and after the incident. 
 Incident handling timeline 
 First, I will try to…
Context 
 For designing and teaching computer science labs, one need to allow students to be able to start easily, while ensuring that the lab is doable the same way by everyone, and facilitating the troubleshooting by the teacher.
Between the labs I have been taught and the ones I taught myself, I witnessed several ways of distributing lab environments to students, each way with its ups…
This challenge is dealing with a vulnerable Kubernetes node on which is installed Ansible (AWX). 
 Challenge info : 
 We have located Monkey Business operator blog where they are leaking personal informations. We would like you to break into their system and figure out a way to gain full control.
 Recon 
 The challenge info does not really any useful tips, so we start with a scan…
This challenge is shining a light on different AWS solutions working together in order to create a functional website. It is in my opinion very interesting to see how the cloud technologies are replacing the standard websites and servers, and what possible misconfigurations and security risks this shifting create. 
 Challenge info : 
 With increasing breaches there has been equal increased…
This challenge is on AWS and one of its products, Lambda. It allowed me to go deeper into the AWS CLI and how to manipulate it to gain access on cloud infrastructures. 
 Challenge info : 
 One of the local shops in your city is realising new costumes. Go grab them
 before they run out as the available stock is very limited.
 Recon 
 Unlike the first one, we don’t…
This challenge is a very interesting one on Kubernetes. Even if it is not that hard, it made me practice and learn more about the inner workings of Kubernetes, its various components and how to exploit them. 
 Challenge info : 
 We've installed our Kubernetes cluster inside a steam powered computer, however 
 there's a lot of smoke, therefore we think a bolt is missing. Could you…
I tested many OSes before choosing to try Archlinux : my main goal then was to learn the inner workings of an OS and the interactions between the many components by installing and configuring them one by one. After a few months trying (and configuring) it, I really loved it, and now I’m using Arch as my OS. I’m listing here all the components I assembled in order to create myself a…
You’ll find here all the websites I go on to test my skills on dedicated cybersecurity challenges. There is a lot of them, all with specificities, and when you try to begin in cybersecurity you don’t really know which site to use, so I thought it was a good idea to list all that I use and compare them. 
 Root-me.org, french leader and excellent training site 
 root-me is a…