111 Followers
11 Following
65 Posts

Open-Source infosec R&D #DFIR #ThreatHunting oriented using #golang, #rustlang and #python

No need to follow the Twitter/X account, sooner or later it will not be updated anymore

GitHubhttps://github.com/0xrawsec
Twitter/Xhttps://twitter.com/0xrawsec
Websitehttps://rawsec.lu

βš™οΈ Technical Spotlight: New Session at BSides Luxembourg 2026

π—žπ—¨π—‘π—”π—œ: π—’π—£π—˜π—‘-𝗦𝗒𝗨π—₯π—–π—˜ 𝗧𝗛π—₯π—˜π—”π—§ π——π—˜π—§π—˜π—–π—§π—œπ—’π—‘ 𝗒𝗑 π—Ÿπ—œπ—‘π—¨π—« – Quentin JEROME

Step into a practical 40-minute talk exploring how modern threat detection is evolving on Linux systems. This session introduces Kunai, an open-source tool built with eBPF to bring deep visibility, real-time monitoring, and Sysmon-like capabilities to Linux environmentsβ€”where traditional security tooling often falls short.

From architecture to real-world use cases, discover how Kunai enables incident responders and defenders to detect threats, investigate events, and enhance forensic analysis across cloud and containerized systems. A must-attend for anyone working with Linux infrastructure and looking to strengthen detection and response capabilities.

Quentin Jerome is a Rust developer at CIRCL, focused on building open-source security tools driven by real-world incident response and threat detection needs. His work centers on improving visibility and empowering the security community.

πŸ“… Conference Dates: 6–8 May 2026 | 09:00–18:00
πŸ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
🎟️ Tickets: https://2026.bsides.lu/tickets/
πŸ“… Schedule: https://hackertracker.app/schedule?conf=BSIDESLUX2026

#BSidesLuxembourg2026 #ThreatDetection #LinuxSecurity #DFIR #CyberSecurity #OpenSource

⚑⚑⚑ Lightning Talk Announcement! ⚑⚑⚑

✨ π— π—”π—šπ—œπ—–-π—₯𝗦: 𝗔 π— π—˜π— π—’π—₯𝗬-π—¦π—”π—™π—˜, π—Ÿπ—œπ—•π— π—”π—šπ—œπ—–-π—–π—’π— π—£π—”π—§π—œπ—•π—Ÿπ—˜ π—™π—œπ—Ÿπ—˜ π—§π—¬π—£π—˜ π——π—˜π—§π—˜π—–π—§π—œπ—’π—‘ π—˜π—–π—’π—¦π—¬π—¦π—§π—˜π—  - Quentin Jerome 🧩 (@qjerome)

File type detection just got a memory-safe upgrade β€” in Rust. In this talk, Quentin Jerome shows how Magic-rs brings libmagic’s power to modern, safe code β€” with Python bindings, a CLI tool called wiza, and real-world compatibility.

Quentin Jerome https://www.linkedin.com/in/quentin-jerome-00a8a074 is a Rust developer at CIRCL. Inspired by his background in incident response and threat detection, he builds open-source security tools to solve practical problems. His main interests include threat detection, bug hunting, and building tools that help the security community.

πŸ“… Conference Dates: 6–8 May 2026 | 09:00–18:00
πŸ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
🎟️ Tickets: https://2026.bsides.lu/tickets/
πŸ“… Schedule: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #Rust #FileDetection #MemorySafety #OpenSource #CyberSecurity

Call for papers is now open for hack.lu 2026 (the 20th edition!)

The purpose of the hack.lu convention is to provide an open and free playground where people can discuss the implications of new technologies in society. hack.lu is a balanced mix convention where technical and non-technical people can meet and share all kinds of information freely. The convention will be held in the Grand-Duchy of Luxembourg in October (20-23.10.2026). The most significant new discoveries about computer network attacks and defenses, open-source security solutions, and pragmatic real-world security experiences will be presented in a four-day series of informative tutorials.

We are waiting for your great proposals!

https://2026.hack.lu/blog/hack.lu-2026-call-for-papers/

#cfp #luxembourg #conference #cybersecurity #callforpapers #hacklu

Call for papers is now open for hack.lu 2026 (the 20th edition!)

Time to submit a talk, training or workshop to hack.lu

hack.lu 2026

A new patched release is out for both the Rust crate and Python package of magic-rsβ€”the memory-safe implementation of libmagic!

This fixes incorrect file identification (e.g., MS Office docs). If you use magic-rs, update now to avoid false positives:

πŸ”— Rust: https://crates.io/crates/pure-magic
πŸ”— Python: https://pypi.org/project/pure-magic-rs/

⚠️ Also, don't forget to update your command line file detection companion wiza (What is Zat?): https://crates.io/crates/wiza

Thanks to the @Rafiot for reporting this!

#Rust #Python #OpenSource

crates.io: Rust Package Registry

crates.io serves as a central registry for sharing crates, which are packages or libraries written in Rust that you can use to enhance your projects

Just before the holidays, I ran a recorded Rust training at Luxembourg House of Cybersecurity β€” designed to help developers with experience in other languages get up to speed faster.

πŸ”— Watch the full session (broken English included!):

https://youtube.com/playlist?list=PLhSWiKucshm5vWvFCqtJePVVYgIXH6_6y&si=ffdPXpY52GPnd8DW

All training materials are open-source and available here: https://github.com/ngsoti/rust-training

Not about mastery, but about cutting through the noise and getting hands-on faster. Feedback welcomeβ€”what worked (or didn’t) for you?

Interested in an internal training? You can get in touchβ€”this can be delivered in French or English.

#Rust #Programming #TechTraining #OpenSource

Rust training

This series of video provide hands-on Rust training material through progressive exercises and examples. It focuses on core Rust concepts such as ownership, ...

YouTube

Save the date! πŸ“…

hack.lu 2026 will take place from Tuesday 20 to Friday 23 October 2026.
Book your agenda β€” you don’t want to miss it!

#hacklu #hacklu2025 #hacklu2026 #cybersecurity #conference s

New secure re-implementation of libmagic by @0xrawsec is presented as a lighting talk at hack.lu.

  https://github.com/qjerome/magic-rs/tree/dev (currently in the dev branch)

#rust #libmagic #opensource #cybersecurity

GitHub - qjerome/magic-rs at dev

Pure Rust implementation of libmagic. Contribute to qjerome/magic-rs development by creating an account on GitHub.

GitHub

I learned an incredible about from this chat I had with @adulau and @cedric about @gcve

I'm still working through all the details, but I'm starting to suspect #GCVE solved many of the problems with vulnerability data I've been complaining about for a very long time

If you do anything with vulnerabilities this one is worth a listen

https://opensourcesecurity.io/2025/2025-08-gcve-cedric-alex/

GCVE with CΓ©dric Bonhomme and Alexandre Dulaunoy

In this episode I discuss GCVE and Vulnerability-Lookup with Alex and Cedric from CIRCL. GCVE offers a decentralized approach, allowing organizations to assign their own IDs and publish vulnerabilities independently. Vulnerability-Lookup is the tool that makes GCVE a reality. The flexibility addresses many of the limitations we see today with a single centralized ID system. The work happening by CIRCL on GCVE is very impressive, with all the current CVE turmoil, this is a project we should all be paying attention to.

Open Source Security
Flowintel, an open-source platform designed to assist analysts in organizing their cases and tasks.

YouTube

We are happy to host our first RUST Lang Workshop in Luxembourg, Saturday 23 Aug 2025 8h00-20h00 physically at

@Level2
87 route de Thionville,
L-2611 Luxembourg

https://blog.syn2cat.lu/2025/07/22/rust-lang-workshop-in-luxembourg/

It will be facilitated by @qjerome from @circl

If you are interested to attend and have experience with another programming language please register here: https://pretix.eu/oslu/rust-lang-lu-wsp-25/

Looking forward to learning RUST with you.

RUST Lang Workshop in Luxembourg - syn2cat

We are happy to host our first RUST Lang Workshop in Luxembourg on Saturday 23 Aug 2025 8h00-20h00 physically at our Hackerspace. It will be facilitated by @qjerome from @circl If you are interested to attend and have experience with another programming language please register here: https://pretix.eu/oslu/rust-lang-lu-wsp-25/ Looking forward to learning RUST with you. ...read more

syn2cat