Sign in

Nicolas Grégoire

@agarri.fr
4.5K followers 619 following 1K posts

Web hacker 😈 Burp Suite Pro trainer 👨‍🏫 Maintainer of @mastering-burp.agarri.fr 🛠️

PostsRepliesMedia
Nicolas Grégoire @agarri.fr · 21/07/2026
My on-site training in Roma doesn't have many registrations yet and *may* be cancelled. So, if you are interesting in attending this session, do book your seat NOW! romhack.io/training/202...
romhack.io
Burp Suite Pro, 100% hands-on - RomHack Security Conference
001
Reposted by Nicolas Grégoire
Entrypoint @entrypoint-fr.bsky.social · 29/06/2026
🚨 The #Entrypoint2027 Call For Papers is now open! Have original offensive security research to share? New techniques, tools, or attack stories ? We want to hear from you. 📅 CFP closes: Sept 20, 2026. Our review board will be revealed soon. 👉 cfp.entrypoint.fr/entrypoint-2...
0109
Reposted by Nicolas Grégoire
Richard Johnson @richinseattle.bsky.social · 28/05/2026
Please tell your friends, four weeks before @phrack.org submission deadline! We also are seeking both interior and cover art. We are working with our friends at @pagedout.bsky.social again to create a fancy interior design for our main annual release!! Be a part of hacker history!
065
Reposted by Nicolas Grégoire
Hash Miser ✊🇺🇦 @hash-miser.bsky.social · 03/06/2026
À 42 balais je trouve toujours absolument fantastique de pouvoir prendre un verre assis dans une boîte en métal qui roule à 300km/h tout en regardant le paysage. Petit plaisir coupable personnel !
171
Reposted by Nicolas Grégoire
0xacb @0xacb.com · 15/06/2026
Every time I see a feature that's supposed to happen once (applying coupon codes, making withdrawals, vote counts, redeeming invites, etc.), I try Turbo Intruder. These bugs are everywhere.
011
Nicolas Grégoire @agarri.fr · 22/06/2026
En cette chaude semaine qui commence, vous vous dites : 1️⃣ Je vais à Le Hack 2️⃣ Je vais au Hack
010
Nicolas Grégoire @agarri.fr · 22/06/2026
I'm not here to brag, but I really think that most people have no idea of the gap between their usage of Burp Suite Pro and what is actually possible...
100
Nicolas Grégoire @agarri.fr · 02/06/2026
Once again, WarConPL was a blast 👨‍💻🍽️🍺🍸🪩🕺 I hope it wasn't the last edition, despite all the rumors 🤞 And if it was, too bad & thanks antisnatchor and h0wlu for all the fish 🥰
030
Nicolas Grégoire @agarri.fr · 27/05/2026
I'll give a single public on-site Burp Suite Pro training session this year, and it will be in RomHack 🇮🇹 (registration link in replies) And if you're not sure this course would fit you, just give a look at this recent feedback
Screenshot from X: "I dont post that much, but I do when I feel like its worth it - I have to say having taken the Burp suite Pro training by @Agarri_FR I was totally blown away. I have used burp for over 20 years and have learnt so much that will immediately help me, totally recommend the course!"
134
Nicolas Grégoire @agarri.fr · 27/04/2026
A very interesting read 💎 www.sentinelone.com/labs/fast16-...
sentinelone.com
fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet
A previously unknown 2005 cyber sabotage framework patches high-precision calculation software in memory to silently corrupt results.
131
Nicolas Grégoire @agarri.fr · 19/03/2026
Feeling lazy but dreaming of posting like your favorite influencer? Here's a solution ✨🤖✨ www.cringebot3000.com
cringebot3000.com
LinkedIn CringeBot 3000
Transform any topic into peak LinkedIn thought leadership guaranteed to make your followers shudder.
100
Nicolas Grégoire @agarri.fr · 04/03/2026
Come to Roma 🇮🇹 in September and attend the only in-person public training session I'll give in 2026! 👨‍🏫 And if you like camping with other hackers (as I do), stay over the weekend for the 3-day long RomHack Camp 🏕️ romhack.io/training/
romhack.io
RomHack Training
032
Nicolas Grégoire @agarri.fr · 10/02/2026
Another highly satisfied trainee 😎 👨‍🏫 If you want to take the online version of my Burp Suite course, there are two opportunities really soon (March in French, April in English) hackademy.agarri.fr/sessions And if you want to indulge your company a private session (like this company did), ping me!
Last week, I had the opportunity to attend the 4-day Mastering Burp Suite Pro training by 🛠️ Nicolas Gregoire, and it exceeded my expectations by far.

This wasn’t just another slide-driven course. Nicolas took the time to answer every question in depth and provided plenty of hands-on labs, allowing us to immediately apply what had just been explained.

Even though I’ve been working with Burp for nearly five years, I still picked up a surprising number of new techniques and practical tricks, including ways to streamline otherwise time-consuming workflows such as managing CSRF tokens both with and without session handling rules.

What I especially appreciated were the little side explorations (driven by our requests) into methodologies for leveraging features and extensions to remain stealthy or bypass WAFs. This is something that’s particularly relevant (and often underestimated) when exploiting external or internal web applications during advanced Red Team engagements.

I’m genuinely looking forward to applying this newly gained knowledge in upcoming projects, and I can wholeheartedly recommend this training to any (web) pentester who wants to level up their Burp skills.

Big thanks to Nicolas for an excellent and highly practical course!
041
Reposted by Nicolas Grégoire
Nicolas Grégoire @agarri.fr · 31/01/2026
Spring is just around the corner, and that's when I offer online training courses on Burp Suite Pro 👨‍🏫 Two sessions are planned (in English and French), and there are still a few spots left in each. Contact me to get an early-bird discount code! 💰
hackademy.agarri.fr
Agarri
Training
065
Nicolas Grégoire @agarri.fr · 31/01/2026
Spring is just around the corner, and that's when I offer online training courses on Burp Suite Pro 👨‍🏫 Two sessions are planned (in English and French), and there are still a few spots left in each. Contact me to get an early-bird discount code! 💰
hackademy.agarri.fr
Agarri
Training
065
Reposted by Nicolas Grégoire
James Kettle @jameskettle.com · 29/01/2026
Thanks to everyone who nominated & voted in the top ten! The panel of @irsdl.bsky.social , @agarri.fr , @liveoverflow.bsky.social and myself are hard at work reviewing the 15 finalists... we're hoping to announce the winners next week!
081
Nicolas Grégoire @agarri.fr · 20/01/2026
In case you didn't vote yet (2 days left!), let me tell you that your participation is critical 🗳️ Indeed, the panel (that I'm part of) will only process the top X results and it may contain some sh*tty entries (because of ballot stuffing 🥴) So please do your part! 🙏
040
Nicolas Grégoire @agarri.fr · 16/01/2026
It's time to vote for your favorite Web Hacking Techniques of 2025 🗳️ portswigger.net/polls/top-10...
portswigger.net
Top 10 web hacking techniques of 2025
Welcome to the community vote for the Top 10 Web Hacking Techniques of 2025.
061
Reposted by Nicolas Grégoire
Nicolas Grégoire @agarri.fr · 24/11/2025
The 2026 online public sessions of my "Mastering Burp Suite Pro" course have been published 📅 - March 24th to 27th, in French 🇫🇷 - April 14th to 17th, in English 🇬🇧 hackademy.agarri.fr/2026 PS: feel free to ping me if you'd like to temporarily block a seat or are looking for a 10% coupon 🎁
hackademy.agarri.fr
Agarri
Training
086
Nicolas Grégoire @agarri.fr · 13/01/2026
I'm slowly going though the talks from the CCC congress. Here's my favorites so far... ⤵️
111
Reposted by Nicolas Grégoire
Nicolas Grégoire @agarri.fr · 31/12/2025
Anna’s Archive is an incredible project aimed at preserving humanity’s knowledge and culture Their latest exploit is a near-full backup of Spotify. It includes 86 million songs, representing around 99.6% of listens 🎶 annas-archive.org/blog/backing...
annas-archive.org
Backing up Spotify
We backed up Spotify (metadata and music files). It’s distributed in bulk torrents (~300TB). It’s the world’s first “preservation archive” for music which is fully open (meaning it can easily be mirro...
0136
Nicolas Grégoire @agarri.fr · 31/12/2025
Anna’s Archive is an incredible project aimed at preserving humanity’s knowledge and culture Their latest exploit is a near-full backup of Spotify. It includes 86 million songs, representing around 99.6% of listens 🎶 annas-archive.org/blog/backing...
annas-archive.org
Backing up Spotify
We backed up Spotify (metadata and music files). It’s distributed in bulk torrents (~300TB). It’s the world’s first “preservation archive” for music which is fully open (meaning it can easily be mirro...
0136
Reposted by Nicolas Grégoire
SeanWrightSec @seanwrightsec.com · 29/12/2025
Looks like the final OWASP Top 10 (2025) has been published: owasp.org/Top10/2025/. Based on commits, looks like this happened 5 days ago.
owasp.org
OWASP Top 10:2025
OWASP Top 10:2025
071
Reposted by Nicolas Grégoire
fyoorer.bsky.social @fyoorer.bsky.social · 27/12/2025
Good read github.com/readme/guide...
github.com
Publishing your work increases your luck
In 12 months, @aarondfrancis changed his life by bypassing fear and embracing risk. Now, he’s working his dream job @tuple. Get his full story on The ReadME Project:
023
Reposted by Nicolas Grégoire
The Hacker's Choice (1995) @hackerschoice.bsky.social · 17/12/2025
THC Release 💥: The world’s largest IP<>Domain database: ip.thc.org All forward and reverse IPs, all CNAMES and all subdomains of every domain. For free. Updated monthly. Try: curl ip.thc.org/1.1.1.1 Raw data (187GB): ip.thc.org/docs/bulk-da... (The fine work of messede 👌)
14620
Nicolas Grégoire @agarri.fr · 20/12/2025
#Protip Need to go really fast and HEAD is disabled? Use GET and the Range header...
050
Reposted by Nicolas Grégoire
Phrack Zine @phrack.org · 13/12/2025
The wait is over! Phrack 72 40th Anniversary Edition is available now. Order straight to your doorstep — the perfect gift for your fellow hacker, just in time for the holidays 🎄 No need to go to rely on the warez scene with scans anymore 😅 Order here: www.lulu.com/shop/phrack-...
13418
Reposted by Nicolas Grégoire
The Hacker's Choice (1995) @hackerschoice.bsky.social · 14/12/2025
THC Release: 🎄Smallest SSHD backdoor🎄 - Does not add any new file - Survives apt-update - Does not use PAM or authorized_keys Just SSHD trickery....adds one line only. More at thc.org/tips 👌
1184
Nicolas Grégoire @agarri.fr · 13/12/2025
Looking for a Christmas gift for yourself? #burp #training #2026 There’s 9 seats left for the English-speaking session, and 5 for the French-speaking one
043
Nicolas Grégoire @agarri.fr · 13/12/2025
Great article 💎
060
Nicolas Grégoire @agarri.fr · 06/12/2025
Printed version of Paged Out #7, collected during GreHack 2025 🤩
Printed version of Paged Out #7, collected during GreHack 2025
061
Nicolas Grégoire @agarri.fr · 03/12/2025
This vulnerability was the inspiration for the first step of the Panel challenge we played during last week’s Grehack CTF But we found a dumb bypass 😎
041
Reposted by Nicolas Grégoire
Molly White @molly.wiki · 25/11/2025
www.citationneeded.news/issue-91/#tr...
citationneeded.news
Issue 91 – GDP on the blockchain
The regulator set to take on primary crypto oversight is down to a single Commissioner, and new pro-crypto PACs focus on installing more Republicans in the midterms
0473
Reposted by Nicolas Grégoire
ANSSI @anssi-fr.bsky.social · 03/12/2025
📜 L’4N551 4 un3 m1551on 9our vou5. S1 vou5 l’4cc3973z, vou5 s3r3z 4m3n3 4 : *53rv1r l’1nt3r37 g3n3r4l 37 9ro73g3r l4 N471on f4c3 4 l4 m3n4c3 cy83r ; *1nc4rn3r l’3xc3ll3nc3 fr4nç4153 3n m4713r3 d3 cy83rd3f3n53. 9our 7rouv3r vo7r3 m1551on : 🔗 www.welcometothejungle.com/fr/companies...
L’4N551 4 un3 m1551on 9our vou5 :
085
Nicolas Grégoire @agarri.fr · 03/12/2025
Stealth (from Team-Teso, Phrack staff and other groups) passed away earlier this year 😢 I didn't know him personally, but his groundbreaking research has been a constant influence on my career www.thc.org/404/
thc.org
050
Nicolas Grégoire @agarri.fr · 27/11/2025
Here's the recording of the stream we made earlier this week with @laluka.bsky.social, @thesytten.bsky.social and @rhynorater.bsky.social If you speak French, you may appreciate its title: "Caido de Noël" 😄 🎁 🎅 www.youtube.com/watch?v=JvUm...
youtube.com
EP 208 EN | Caido de Noel ? Ft. @Agarri_FR @Rhynorater @TheSytten
YouTube video by Laluka
040
Reposted by Nicolas Grégoire
Matt Blaze @mattblaze.org · 22/11/2025
I really want to know the full story behind this epic hack, and yet I also hope it is never solved.
1433177
Reposted by Nicolas Grégoire
Samuel Groß @saelo.bsky.social · 24/11/2025
I've uploaded the slides of my recent talk "JS Engine Security in 2025": saelo.github.io/presentation.... I think there'll also be a recording available at some point (otherwise I can make one as not everything's in the slides). Fantastic conference as usual, big thanks to the PoC Crew!
saelo.github.io
02111
Nicolas Grégoire @agarri.fr · 24/11/2025
The 2026 online public sessions of my "Mastering Burp Suite Pro" course have been published 📅 - March 24th to 27th, in French 🇫🇷 - April 14th to 17th, in English 🇬🇧 hackademy.agarri.fr/2026 PS: feel free to ping me if you'd like to temporarily block a seat or are looking for a 10% coupon 🎁
hackademy.agarri.fr
Agarri
Training
086
Nicolas Grégoire @agarri.fr · 23/11/2025
A little command-line trick... 🛠️ 🤓 You can use `rev` twice in order to process something from right to left. For example, in order to sort /etc/passwd by shell: cat /etc/passwd | rev | sort | rev
100
Nicolas Grégoire @agarri.fr · 21/11/2025
La Quadrature du Net n'est pas contente des récents articles sur GrapheneOS, et elle a bien raison ! 👿 🇫🇷
020
Reposted by Nicolas Grégoire
Evariste @evaristegal0is.eurosky.social · 10/11/2025
This year, I have gone back to talk at cybersecurity conferences, presenting the talk "app.alert(1) is the new alert(1)", at BSides Sofia and BSides Krakow. I have analyzed 4 CVEs: now you can find 3 PoCs in my GitHub :) because slides are cool, but code is better: github.com/luigigubello...
github.com
GitHub - luigigubello/bsides-2025: My talk "app.alert(1) is the new alert(1): PDF files as a vector to inject JavaScript code in web applications", presented at BSides Sofia 2025 and BSides Krakow 202...
My talk &quot;app.alert(1) is the new alert(1): PDF files as a vector to inject JavaScript code in web applications&quot;, presented at BSides Sofia 2025 and BSides Krakow 2025. - luigigubello/bsid...
054
Reposted by Nicolas Grégoire
Juliet Turner @juliet-turner.bsky.social · 17/11/2025
POV: you are a young woman celebrating a recent academic success
3112201973201
Reposted by Nicolas Grégoire
Nicolas Grégoire @agarri.fr · 19/11/2025
A nice sunset
0101
Nicolas Grégoire @agarri.fr · 19/11/2025
A nice sunset
0101
Reposted by Nicolas Grégoire
Laluka @laluka.bsky.social · 18/11/2025
Hoy, c'est CE SOIR à 21H ! Dernier heads-up, mettez votre meilleur rappel / mémo / réveil, ou demandez à votre chat de vous ping ! Au programme : Hack Web / Hack IoT / Devops / Troll / Stories / CLI Tools / AI / Red-Team & Le QUIZZ ! Ah, et des goodies à gagner aussi, bc why not ! 🙃
022
Reposted by Nicolas Grégoire
NorthSec @nsec.io · 16/11/2025
🔗 Conférence complète/Full Talk: youtu.be/pq0NMN9HHOY 🎟️ Billets/Tickets NorthSec 2026: nsec.io #NorthSec #cybersecurity #infosec
youtu.be
NorthSec 2025 - Wendy Nather - Keynote: A Tabletop As Big As the World
YouTube video by NorthSec
032
Nicolas Grégoire @agarri.fr · 16/11/2025
Argument injection (and RCE) in three distinct AI agents blog.trailofbits.com/2025/10/22/p...
blog.trailofbits.com
Prompt injection to RCE in AI agents
We bypassed human approval protections for system command execution in AI agents, achieving RCE in three agent platforms.
085
Nicolas Grégoire @agarri.fr · 16/11/2025
How the hack of a card shuffler presented at Blackhat 2023 by IOActive was used IRL by the mafia and some NBA members archive.is/7Pm1E
archive.is
011
Reposted by Nicolas Grégoire
Laluka @laluka.bsky.social · 13/11/2025
LA soirée du 200ème épisode est annoncée ! 👀 RDV ce Mardi 18 à 21h sur (oui comme d'hab en fait..) : 💌 www.twitch.tv/thelaluka 💌
094