palkeo

LLM Agents Giving a modern LLM root access to a computer allows it to do a lot of things that were previously unthinkable.

This is a writeup from the “supplychain” challenge of the CTF for THCon 2023, made by Dridri.

This article is about the Flashbots project (see that post on ethresear.ch for background).

Logging is important.

This article will examine in details what happened during the two transactions that exploited vulnerabilities to open under-collateralized positions in bZx, causing a loss of equity worth more than a million dollar in total.

This is the counterpart of Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths, looking at suspicious patterns in the history of Ethereum, where contracts would not be killed but simply emptied by attackers.

Four years ago, I wrote an article “How to steal Bitcoins” that was about finding address corresponding to weak brainwallets, and some forensic evidence that it was exploited automatically, for profit.

Pakala is a tool for symbolic execution of EVM bytecode (like Manticore or Mythril).

For my experiments, I set on having an Ethereum archive node (with the full history of all the states), with Parity.

TL;DR: Use a Yubikey 4 with touch-to-sign to store your GPG keys, and use these keys for SSH authentication and storing your secrets with password-store.

Quelques notes sur la configuration d’IPv6 sur un serveur Online.net, sous Debian.

Conversion Pour convertir un BIN, MDF, PDI, CDI, NRG et B5I, en ISO : iat Remplacements dans tous les fichiers sources d’un répertoire : find .

This article is a collection of tips and informations that I found useful to know about neo4j, when learning about it.

Quand on est soucieux de sa vie privé / confidentialité sur le web, on peut facilement tomber dans deux extrêmes : installer AdBlock (ou éventuellement Ghostery), et se dire que ça suffira utiliser une extension comme NoScript, et voire sa navigation rend…

I am fascinated by web crawlers since a long time.

J’ai toujours été assez fasciné par les crawlers web.

J’ai eu l’occasion de travailler avec Céleste Boursier-Mougenot (artiste français) pour sa dernière exposition au musée des abattoirs à Toulouse.

Quelques notes sur l’installation d’un serveur mail, avec gestion en IMAPS et configuration d’un « catch-all » pour pouvoir reçevoir tous les mails envoyés (indiféremment de la partie de l’adresse mail avant l’arobaze).

Every Bitcoin address is based on a secret key, from which the public key (associated to a Bitcoin address) is calculated.

I found it difficult to encounter open-source games with a good quality.