Stefan

affiliated with IT security / My tweets are carefully handcrafted.

[Stefan @IPv4v6]

When discussing about the scope of a #pentest, keep in mind: real attackers have no scope. #infosec #security

[Stefan @IPv4v6]

Attending the workshop "Extracting Keys and Owning Encrypted Laptops" at #hacklu. #hardware #hacking #bitlocker

[hack_lu @hack_lu]

🎉 Ready for four days of inspiring talks, hacking, and great community moments at #hacklu!

💬 You can also share your thoughts and comment on the talks over on our Discourse platform: https://t.co/8u6Qm2MC1C

or https://t.co/CmYeCmPbse
#cybersecurity #conference #Luxembourg

[Kali Linux @kalilinux]

We are kicking off 2025 with Kali Linux 2025.1a! This update builds on existing features, bringing enhancements and improvements to streamline your experience. New themes, major desktop updates NetHunter car hacking and more!

Available for download now!
https://t.co/dm8EcCfxtb

[Stefan @IPv4v6]

@albinowax bug bounty money = hush money
companies don't want bad publicity.
agreeing with @LiveOverflow:
do not accept their conditions. just report and publish after two months.

[Kali Linux @kalilinux]

Kali 2024.1 release is now live! Check out all the details at:

https://t.co/wtXfcJFUlT

Including:
Micro Mirror Free Software CDN
2024 Theme Refresh
Other Desktop Environment Changes
NetHunter Updates
New Tools!

[Stefan @IPv4v6]

Back from @hack_lu 2023. It was a great conference. Thanks to @Ministraitor everybody who missed can watch the presentations on YouTube.
#hacklu #infosec

[Trovent Security @TroventSecurity]

We published a #security #advisory about a serious vulnerability in the #Eramba web application.
https://t.co/mprcAxoqsG
#vulnerability #ResponsibleDisclosure #Trovent #RCE

[Stefan @IPv4v6]

🤣

[Trovent Security @TroventSecurity]

We published a #security #advisory about a vulnerability in the @MicroFocus #GroupWise application.
https://t.co/OrjvX8mz4z
#vulnerability #ResponsibleDisclosure #Trovent

[Stefan @IPv4v6]

#OpenSSH 9.2 fixes a double free #vulnerability.
Details: https://t.co/T9CHEcNXdE
See the OpenSSH release notes: https://t.co/HhDzEbthGf
#opensource #security

[Humble Bundle @humble]

Explore the ever-evolving world of hacking and creative computer problem solving with our new bundle of ebooks from @nostarch Press!

Pay what you want & support @ncacensorship

https://t.co/uO81EwnJjZ

[Stefan @IPv4v6]

Multiple #security vulnerabilities in the #Linux #kernel:
https://t.co/uqFYckerLN
#Wireless #RCE #DoS #CVE

[Dirk-jan @_dirkjan]

Fox-IT just open sourced their enterprise forensics tooling dissect. This is a big project that some of the smartest people I know have worked on. It supports many filesystems and file formats, all as Python libraries. Docs: https://t.co/M6YAygmW3E / code: https://t.co/HKT4eYIm1a

[Oliver Lyak @ly4k_]

The first blog post is here. This one covers the technical details of CVE-2022-26923 (Active Directory Domain Services Elevation of Privilege Vulnerability).

The vulnerability was patched as part of the May 2022 Security Updates from Microsoft.

https://t.co/MJKEoZTuo2

[RuhrSec – IT Security Conference @ruhrsec]

📣 Only 10 DAYS until #RuhrSec Day 2022! 📣

Can you believe it?!
The team is so excited to see you all again ❤️

Are you late?! Don’t worry! Get a ticket here ⬇️
🎫 https://t.co/j9BlugF5HO

#itsecurity #CyberSecurity #ITSicherheit #conference

[Stefan @IPv4v6]

@PolarGlobal Dear Polar team, I did not receive any reply from [email protected] to my email of December 20th. Can you send me the contact address of a human being so that I can submit the information about the vulnerability in your Android application?

[Stefan @IPv4v6]

Dear @PolarGlobal, we want to report a security vulnerability in the Polar Flow Android app. I already contacted your support without success.
[email protected] didn't answer and mail to [email protected] is rejected. How can we contact your security team?
#ResponsibleDisclosure

[Stefan @IPv4v6]

@PolarGlobal Did that already on December 15th. Look for the subject "Security vulnerability in Polar Flow Android application".

[Trovent Security @TroventSecurity]

We published a #security #advisory about an SQL injection vulnerability (CVE-2021-41843) in the web application #OpenEMR.
https://t.co/OApkP3dHJC
#vulnerability #ResponsibleDisclosure #Trovent

[Trovent Security @TroventSecurity]

We published two #security #advisories about vulnerabilities (XSS, RCE) in the web application #Dolibarr ERP & CRM.
https://t.co/vstVBzEn0B
https://t.co/8dkHHt219S
#vulnerability #ResponsibleDisclosure #Trovent #advisory