Euz | Matthieu 🐙 (@_Euzebius) header
Euz | Matthieu 🐙 (@_Euzebius) profile picture

Euz | Matthieu 🐙

@_Euzebius

Gamer, hacker. Purple teamer at 💜. Infosec swiss army knife. Don't panic, hack the planet. HTB 🇫🇷 ambassador : euz. I didn't choose InfoSec, it chose me.

 127.0.0.42
Joined February 2011
  • Tweets8.7K
  • Following2.6K
  • Followers3K
1.5KMedia
Photo by Euz | Matthieu 🐙 (@_Euzebius)Photo by Euz | Matthieu 🐙 (@_Euzebius)Photo by Euz | Matthieu 🐙 (@_Euzebius)Photo by Euz | Matthieu 🐙 (@_Euzebius)Photo by Euz | Matthieu 🐙 (@_Euzebius)Photo by Euz | Matthieu 🐙 (@_Euzebius)Photo by Euz | Matthieu 🐙 (@_Euzebius)Photo by Euz | Matthieu 🐙 (@_Euzebius)Photo by Euz | Matthieu 🐙 (@_Euzebius)Photo by Euz | Matthieu 🐙 (@_Euzebius)
Euz | Matthieu 🐙 retweeted
Raphaël Lacroix (@Chepycou) profile picture
Raphaël Lacroix@ChepycouOct 26
I even ended up writing a tool to audit MCP servers as the topic was interesting to me (see fenrisk.com/research/mcpwned…)
MCPwned: a Burp Suite extension for auditing MCP servers

MCPwned: a Burp Suite extension for auditing MCP servers

This blog post quickly outlines the MCP protocol before presenting a Burp Suite extension developed by Fenrisk that enables pentesters to effectively test MCP servers.

fenrisk.com
1
1
1
64
Euz | Matthieu 🐙 retweeted
Quentin Texier 🦀 (@g0h4n_0) profile picture
Quentin Texier 🦀
@g0h4n_0Oct 28
Tiny change, massive impact. Absolutely love this 🤩🔥
Martin Sohn Christensen (@martinsohndk) profile pictureMartin Sohn Christensen@martinsohndkOct 28
BloodHound now diferentiates traversable and non-traversable edges with ━ and --- 🤩
Image from Martin Sohn Christensen (@martinsohndk)
4
17
516
Euz | Matthieu 🐙 retweeted
Rektzy (@RektzyQQ) profile picture
Rektzy
@RektzyQQOct 25
WORLD PvP PLAYERS, WE NEED TO TALK! WoW Forever has the potential to deliver some of the BIGGEST Horde vs Alliance battles we’ve ever seen. But there’s ONE problem that could ruin it all… LAYERING. Imagine gathering 100+ players for an EPIC battle, only to watch half your army DISAPPEAR when crossing a zone boundary. We’ve already seen how incredible large-scale World PvP can be during beta. We NEED these battles to work at launch! HORDE or ALLIANCE, this affects EVERYONE. SHOULD RAID GROUPS ALWAYS STAY ON THE SAME LAYER? YES OR NO? 💬 Have you experienced layering issues? 🗣️ What’s the WORST layering bug you’ve encountered? 🔁 REPOST so more World PvP players can join the discussion! Let’s show Blizzard how much massive World PvP matters to this community! #WoWForever #WorldPvP #Warcraft
Image from Rektzy (@RektzyQQ)
27
16
154
17,126
Euz | Matthieu 🐙 retweeted
🔴 Tonton Artheon 🔴 (@TontonArtheon) profile picture
🔴 Tonton Artheon 🔴
@TontonArtheonOct 23
And now... We wait. #WowForever
Image from 🔴 Tonton Artheon 🔴 (@TontonArtheon)
5
15
140
3,152
Euz | Matthieu 🐙 retweeted
Bolter Ops - cybercrise.eu (@Bolter_OPS) profile picture
Bolter Ops - cybercrise.eu@Bolter_OPSOct 16
Replying to @hackthebox_eu
@hackthebox_eu Looks like you got me email, so can answer me about the gift for 365d streak no ? ;)
Image from Bolter Ops - cybercrise.eu (@Bolter_OPS)
1
1
53
Euz | Matthieu 🐙 retweeted
Spawn Wave (@SpawnWaveMedia) profile picture
Spawn Wave
@SpawnWaveMediaOct 16
"Rocket League is just a video game" Tesla engineers:
Image from Spawn Wave (@SpawnWaveMedia)
51
3,130
48
47,590
357,687
Euz | Matthieu 🐙 retweeted
Jonzzy (@jonzzy) profile picture
Jonzzy
@jonzzyOct 15
like clockwork
Image from Jonzzy (@jonzzy)
3
46
2
826
8,316
Euz | Matthieu 🐙 retweeted
abraxas (@abraxas_null) profile picture
abraxas
@abraxas_nullOct 13
🔥🚒 pfSense Firewall 0day - 5 RCEs! 🚒 🔥 Exploits - github.com/abraxas/pfsense-q… - github.com/abraxas/pfsense-o… - github.com/abraxas/pfsense-c… - github.com/abraxas/pfsense-l… - github.com/abraxas/pfsense-i… Writeups - abraxaslabs.tech/research/pf… - abraxaslabs.tech/research/pf… - abraxaslabs.tech/research/pf… - abraxaslabs.tech/research/pf… - abraxaslabs.tech/research/pf…
🤖 Made with AI
Image from abraxas (@abraxas_null)
15
200
16
801
73,800
Euz | Matthieu 🐙 retweeted
paige “grug” grugcel (@GRUGCEL) profile picture
paige “grug” grugcel@GRUGCELOct 7
dude this game is awesome
Image from paige “grug” grugcel (@GRUGCEL)
41
132
8
2,613
181,686
Euz | Matthieu 🐙 retweeted
Kris Puckett (@krispuckett) profile picture
Kris Puckett
@krispuckettOct 5
I'm deeply annoyed that this is my favorite version of this meme now.
108
865
66
9,545
846,318
Euz | Matthieu 🐙 retweeted
Lord of the Rings Memes (@TheLOTRMemes) profile picture
Lord of the Rings Memes
@TheLOTRMemesOct 4
Ranger things
Image from Lord of the Rings Memes (@TheLOTRMemes)
4
41
2
640
7,199
Euz | Matthieu 🐙 retweeted
Quentin Texier 🦀 (@g0h4n_0) profile picture
Quentin Texier 🦀
@g0h4n_0Oct 5
Did you know you can spot which servers and workstations have the WebClient (WebDAV) service running, straight from BloodHound-CE?🔥 A machine with WebClient running can be forced to authenticate over HTTP (PetitPotam/PrinterBug via WebDAV), then NTLM-relayed to LDAP for RBCD / Shadow Credentials, or to AD CS Web Enrollment (ESC8) to compromise the target. This Cypher query surfaces them all at once, so you can prioritize targets:👇 MATCH (c:Computer) WHERE c.webclientrunning = true RETURN c LIMIT 1000 RustHound-CE v2.5.22 adds the WebClient collection method, run automatically with -c All github.com/g0h4n/RustHound-C… #RedTeam #ActiveDirectory #BloodHound
Image from Quentin Texier 🦀 (@g0h4n_0)
1
27
1
97
7,469
Euz | Matthieu 🐙 retweeted
Quentin Texier 🦀 (@g0h4n_0) profile picture
Quentin Texier 🦀
@g0h4n_0Oct 3
Did you know you can request a certificate via NTLM relay through these 2 AD CS endpoints? 🔥 /<CAName>_CES_Kerberos/service.svc/CES /<CAName>_CES_NTLM/service.svc/CES This article explains it really well 👇 adhdmurky.github.io/posts/po… RustHound-CE v2.5.21 now also checks whether these endpoints exist (on top of /certsrv/certfnsh.asp) so #BloodHound can graph the path! #ADCS #ESC_CES

Even more privileged ADCS ESC_CES

For a long time, when people talked about NTLM relay to AD CS, the conversation usually focused on classic Web Enrollment on the following endpoints: /certsrv/ /certsrv/certfnsh.asp But AD CS has one...

adhdmurky.github.io
1
43
149
7,001
Euz | Matthieu 🐙 retweeted
DEFCON GROUP Paris (@dcgparis) profile picture
DEFCON GROUP Paris@dcgparisSep 30
DEFCON Paris - Rump Sessions 📅 05-OCT-2026 (next Monday) 📍 Oculto, 27 rue Quincampoix, 75004 PARIS 🕖 19:00 CEST Registration not required. Bring your slides and have fun on stage!
6
16
1,081
Euz | Matthieu 🐙 retweeted
Troma (@TromaFR) profile picture
Troma
@TromaFRSep 30
Overlord Forever 1.2: fewer messages, fresher maps, faster alerts! Here's why I changed the network and some gameplay systems :)
Overlord Forever 1.2: what changed, and why

Overlord Forever 1.2: what changed, and why

Article · @TromaFR
4
3
1
52
3,181
AI won't replace people. People that master AI will replace people that don't.
Exegol (@exegolHQ) profile pictureExegol@exegolHQSep 30
With Exegol Studio, use AI for ethical hacking the right way 👇 - many providers: cloud auth, API, self-hosted - out-of-the-box & custom harness (skills, agents, ...) & MCPs - multiple layouts, modes, personas, speed - fine approvals system - and much more
2
3
12
2,386
Euz | Matthieu 🐙 retweeted
Quentin Texier 🦀 (@g0h4n_0) profile picture
Quentin Texier 🦀
@g0h4n_0Sep 30
Enfin!! Big update for RustHound-CE version 2.5.20 🦀 🔥 LocalGroups collection over SAMR RPC (AdminTo, CanRDP, ExecuteDCOM, CanPSRemote edges) Four edges your graph was missing when collecting with RustHound-CE. Not anymore! New collection method --collection-method LocalGroup, also wired into All 🚀 Link: github.com/g0h4n/RustHound-C…
Image from Quentin Texier 🦀 (@g0h4n_0)
1
21
73
2,669
In no particular order (except Zelda being number 1 😇)
Image from Euz | Matthieu 🐙 (@_Euzebius)
1
2
182
Euz | Matthieu 🐙 retweeted
Quentin Texier 🦀 (@g0h4n_0) profile picture
Quentin Texier 🦀
@g0h4n_0Sep 28
Releasing new tool named localgroups-rs v1.0.0 🦀 🔥 Local group enumeration over RPC, SAMR and SID resolution over RPC, LSAT! The initial goal is to bring the AdminTo / CanRDP / ExecuteDCOM / CanPSRemote edges to RustHound-CE for the collection phase. It then grew into a standalone BUILTIN alias enumeration tool. Good to know: no local admin needed on domain controllers and on hosts older than Win10 1607 / Server 2016. From 1607 / 2016 onward, RestrictRemoteSam reserves the BUILTIN aliases for local admins only.
2
15
1
63
3,297
Euz | Matthieu 🐙 retweeted
HuGe (@realDumbleDork) profile picture
HuGe@realDumbleDorkSep 27
Lancement de mon SoundCloud pour la promotion du style French NerdCore ! Une forme de troll rap cyber que je vous laisse découvrir :soundcloud.com/hugenerdcore
🤖 Made with AI
Image from HuGe (@realDumbleDork)
3
5
11
841
Load more