iiinova — where your digital self keeps evolving

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 08/08/2026

@adamshostack I'm still confused by this attack, as cloud is not my forte :D Looking at the PoC video, the author copied the whole WebAuth assertion part (credentialId, clientDataJSON, authenticatorData, signature etc.) from event log, pasted it to Passkey […] [Original post on infosec.exchange]

000 0

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 18/07/2026

My team placed second on Rogue Labs CTF! It was a huge lab with 29 hops, a fun mix of initial access, privilege escalation, lateral movement and pivoting techniques. ctf.roguelabs.io

000 0

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 10/07/2026

White Knight Labs has released a free AI for Offensive Security course training.whiteknightlabs.com/academ…

000 0

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 02/07/2026

TV Time is shutting down on 15.7.2026. Are there any good alternatives?

000 0

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 14/05/2026

I just solved PingPong on Hack The Box! Probably the most interesting (and hardest) Active Directory box I've ever solved! #HTB

000 0

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 26/04/2026

I just solved Logging on Hack The Box! Very realistic and fun Active Directory box, definitely learned something new. #HTB

000 0

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 18/04/2026

Looks like Opus 4.6 can solve most of the machines (from easy to insane) on Hack The Box. Impressive work. BoxPwnr benchmark: x.com/francisco_oca/status/20424538…

000 0

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 07/04/2026

Haven't played #HTB in a while, but this box intrigued me because of realistic scenario and novel techniques. Also found an alternative way for root :) labs.hackthebox.com/achievement/mac…

000 0

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 01/02/2026

Jellyfin is finally available on Tizen, no more sideloading! Although there is nothing about it on the official blog yet jellyfin.org/posts/state-of-the-fin…

000 0

Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 05/05/2025

New DomainPasswordSpray fork, which relies on LDAP codes to help identify expired passwords. It goes hand in hand with a new NetExec module for password reset. github.com/LazyTitan33/DomainPasswo…

000 0