<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>qyrn://blog</title>
    <link>https://blog.qyrn.dev</link>
    <description>Cybersecurity blog — writeups, tutorials and technical notes</description>
    <language>fr</language>
    <atom:link href="https://blog.qyrn.dev/feed.xml" rel="self" type="application/rss+xml"/>
    
    <item>
      <title><![CDATA[Phase 1 done: 8 weeks of pentesting, what I'd do differently]]></title>
      <link>https://blog.qyrn.dev/blog/phase-1-pentesting-review-en</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/phase-1-pentesting-review-en</guid>
      <pubDate>Sun, 12 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Eight weeks, two GitHub projects, a 69% quiz, and two weeks where I clearly dropped the ball. End of phase 1, unfiltered review.]]></description>
      <category>Progression</category>
    </item>
    <item>
      <title><![CDATA[Phase 1 bouclée : 8 semaines de pentesting, ce que je ferais différemment]]></title>
      <link>https://blog.qyrn.dev/blog/phase-1-pentesting-bilan</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/phase-1-pentesting-bilan</guid>
      <pubDate>Sun, 12 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Huit semaines, deux projets GitHub, un quiz à 69% et deux semaines où j'ai clairement foiré. Fin de phase 1, bilan sans filtre.]]></description>
      <category>Progression</category>
    </item>
    <item>
      <title><![CDATA[6 weeks of pentesting: what I still didn't know]]></title>
      <link>https://blog.qyrn.dev/blog/six-weeks-pentesting-review-en</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/six-weeks-pentesting-review-en</guid>
      <pubDate>Wed, 08 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[31/45 on the quiz. Six weeks of work and I still confused filtered with closed. Here are the gaps I found in my fundamentals, and how I fixed them.]]></description>
      <category>Progression</category>
    </item>
    <item>
      <title><![CDATA[6 semaines de pentesting : ce que je ne savais toujours pas]]></title>
      <link>https://blog.qyrn.dev/blog/six-semaines-pentesting-bilan</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/six-semaines-pentesting-bilan</guid>
      <pubDate>Wed, 08 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[31/45 au quiz. Six semaines de travail et je confondais encore filtered et closed. Voici les trous que j'ai trouvés dans mes bases, et comment je les ai bouchés.]]></description>
      <category>Progression</category>
    </item>
    <item>
      <title><![CDATA[I coded my own nmap (a much simpler one)]]></title>
      <link>https://blog.qyrn.dev/blog/port-scanner-python-en</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/port-scanner-python-en</guid>
      <pubDate>Sun, 22 Mar 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[One socket, one loop, and 1024 ports scanned in seconds. What I understood by building a port scanner from scratch instead of just running nmap.]]></description>
      <category>Scripting</category>
    </item>
    <item>
      <title><![CDATA[J'ai codé mon propre nmap (en beaucoup plus simple)]]></title>
      <link>https://blog.qyrn.dev/blog/port-scanner-python</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/port-scanner-python</guid>
      <pubDate>Sun, 22 Mar 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Un socket, une boucle, et 1024 ports scannés en quelques secondes. Ce que j'ai compris en construisant un port scanner from scratch au lieu de juste lancer nmap.]]></description>
      <category>Scripting</category>
    </item>
    <item>
      <title><![CDATA[Eight ways I learned to get root on a Linux box]]></title>
      <link>https://blog.qyrn.dev/blog/linux-privesc-eight-vectors</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/linux-privesc-eight-vectors</guid>
      <pubDate>Sun, 15 Mar 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[I thought privilege escalation was about finding the right exploit. Turns out it's mostly about reading what was misconfigured and asking: who forgot about this?]]></description>
      <category>Privesc</category>
    </item>
    <item>
      <title><![CDATA[Huit façons que j'ai apprises pour obtenir root sur une machine Linux]]></title>
      <link>https://blog.qyrn.dev/blog/linux-privesc-huit-vecteurs</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/linux-privesc-huit-vecteurs</guid>
      <pubDate>Sun, 15 Mar 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Je pensais que l'escalade de privilèges c'était trouver le bon exploit. En fait c'est surtout lire ce qui a été mal configuré et se demander : qui a oublié ça ?]]></description>
      <category>Privesc</category>
    </item>
    <item>
      <title><![CDATA[The fake `ls` that read a password]]></title>
      <link>https://blog.qyrn.dev/blog/path-hijacking-suid</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/path-hijacking-suid</guid>
      <pubDate>Mon, 02 Mar 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[A SUID binary, a missing absolute path, and a fake `ls`. How I got a password the program wasn't supposed to share.]]></description>
      <category>App-Script</category>
    </item>
    <item>
      <title><![CDATA[Le faux `ls` qui a lu un mot de passe]]></title>
      <link>https://blog.qyrn.dev/blog/path-hijacking-suid-fr</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/path-hijacking-suid-fr</guid>
      <pubDate>Mon, 02 Mar 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Un binaire SUID, un chemin relatif, et un faux `ls`. Comment j'ai obtenu un mot de passe que le programme n'était pas censé partager.]]></description>
      <category>App-Script</category>
    </item>
    <item>
      <title><![CDATA[The file named - that froze my terminal]]></title>
      <link>https://blog.qyrn.dev/blog/bandit-dash</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/bandit-dash</guid>
      <pubDate>Tue, 24 Feb 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[My first real stumble on Bandit. What a file named `-` taught me about how the shell actually works.]]></description>
      <category>Misc</category>
    </item>
    <item>
      <title><![CDATA[Le fichier nommé - qui a figé mon terminal]]></title>
      <link>https://blog.qyrn.dev/blog/bandit-tiret</link>
      <guid isPermaLink="true">https://blog.qyrn.dev/blog/bandit-tiret</guid>
      <pubDate>Tue, 24 Feb 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Mon premier vrai bug de débutant sur Bandit. Ce qu'un fichier nommé `-` m'a appris sur le fonctionnement du shell.]]></description>
      <category>Misc</category>
    </item>
  </channel>
</rss>