vegan btw. appsec @ mandiant/google cloud. opinions my own etchttps://bsky.app/profile/ldionmarcil.bsky.socialhttps://bsky.app/profile/ldionmarcil.bsky.social/post/3lsbu6gku3s2hwrote some words about vulnerabilities i found in Aviatrix during a red team https://cloud.google.com/blog/topics/threat-intelligence/remote-code-execution-aviatrix-controller23 Jun 2025 15:04 +0000at://did:plc:k6crsvcpvft4sdcsaei4ejsm/app.bsky.feed.post/3lsbu6gku3s2hhttps://bsky.app/profile/ldionmarcil.bsky.social/post/3lcnyltemic2oI wrote a thing with my colleague Ilyass El Hadi (0xc0ffee_) & Charles Prevost, about how we've been leveraging offensive webapp testing during Red Teams. 4 use cases of external breaches using webapps inside, enjoy! #appsec https://cloud.google.com/blog/topics/threat-intelligence/red-team-application-security-testing06 Dec 2024 20:12 +0000at://did:plc:k6crsvcpvft4sdcsaei4ejsm/app.bsky.feed.post/3lcnyltemic2ohttps://bsky.app/profile/ldionmarcil.bsky.social/post/3lbi23x7s522zBeen having a ton of fun solving these, only 2/3 done and i'm quite humbled so far challenge-xss.quiz.flatt.training https://challenge-xss.quiz.flatt.training/?beatme21 Nov 2024 17:58 +0000at://did:plc:k6crsvcpvft4sdcsaei4ejsm/app.bsky.feed.post/3lbi23x7s522z