David Elze

CEO @codewhitesec & @[email protected]

[CODE WHITE GmbH @codewhitesec]

Highly recommend the writeup from our @flomb_ and congrats on this well-deserved achievement!

[CODE WHITE GmbH @codewhitesec]

You like technical deep dives into binary exploitation and crazy heap wizardry? Then you'll like our blog post by @0xor_solo about unauth'ed RCE in NetSupport Manager aka CVE-2025-34164 & CVE-2025-34165 https://t.co/qTobSqOjrY

[CODE WHITE GmbH @codewhitesec]

Our 2024 applicants challenge is officially #roasted: the full BeanBeat × Maultaschenfabrikle walkthrough is now online. Unwrap the write-up at https://t.co/FOspfgRmRc and revisit the hacks that escalated from cold brew to full breach.

[frycos @frycos]

Just sayin‘ 🤷

[CODE WHITE GmbH @codewhitesec]

Latest ≠ Greatest? A Retrospective Analysis of CVE-2025-59287 in Microsoft WSUS from our very own @mwulftange who loves converting n-days to 0-days https://t.co/2ev64hf2Ng

[frycos @frycos]

Tired of dull, standard interviews? Talk to Kurt. Also, a few of my colleagues and I will be attending BruCON next week. Feel free to come and talk to us.

[CODE WHITE GmbH @codewhitesec]

CODE WHITE proudly presents #ULMageddon which is our newest applicants challenge at https://t.co/25hlvHXiGW packaged as a metal festival. Have fun 🤘 and #applyIfYouCan

[CODE WHITE GmbH @codewhitesec]

Ten days left. The warm-up fades. Maultaschen were soft. Bean Beats were dark and burnt. But the beats of #ULMageddon will be brutal! #applyIfYouCan

[CODE WHITE GmbH @codewhitesec]

We always love a good challenge. That’s why we’re sponsoring the 10th FAUST CTF. Game on at https://t.co/heDvFES75A

[David Elze @datenschrott]

A completely NewRemotingTrick by @mwulftange

[CODE WHITE GmbH @codewhitesec]

We've added a new demo to NewRemotingTricks that makes deploying a MarshalByRefObject (e.g., WebClient) even easier: System.Lazy<T> creates an instance of T on serialization, which is probably more likely to be allowed than a XAML gadget getting through. https://t.co/JhxnpXPDa5

[CODE WHITE GmbH @codewhitesec]

We have reproduced "ToolShell", the unauthenticated exploit chain for CVE-2025-49706 + CVE-2025-49704 used by @_l0gg to pop SharePoint at #Pwn2Own Berlin 2025, it's really just one request! Kudos to @mwulftange

[David Elze @datenschrott]

Highly relevant writeup if you're still using #Ivanti #DSM in your corporate environment!

[CODE WHITE GmbH @codewhitesec]

Yes, we're beating a dead horse. But that horse still runs in corporate networks - and quietly gives attackers the keys to the kingdom. We're publishing what’s long been exploitable. Time to talk about it. #DSM #Ivanti https://t.co/weWtiB72Dv

[flomb - @fl0mb.bsky.social @flomb_]

https://t.co/9ZqLF7fGxI

[CODE WHITE GmbH @codewhitesec]

Our crew members @mwulftange & @frycos discovered & responsibly disclosed several new RCE gadgets that bypass #Veeam's blacklist for CVE-2024-40711 & CVE-2025-23120 as well as further entry points following @SinSinology & @chudyPB's blog. Don’t blacklist, replace BinaryFormatter.

[CODE WHITE GmbH @codewhitesec]

Ever wondered how Kurts Maultaschenfabrikle got hacked in 2023? The full story, all technical details, out now ;-) https://t.co/8mO1EzGhUp

[David Elze @datenschrott]

Congrats, well deserved 💪

[CSCG @C_S_C_G]

We did it! 🏆🇩🇪 So excited to have won this incredible competition! The competition was fierce, and every team brought their A-game. Huge thanks to @ECSC2024 for an unforgettable experience! 🎉💻🔥 #ECSC2024 @BSI_Bund

[CODE WHITE GmbH @codewhitesec]

Using Telerik Reporting or Report Server? Patch now to fix 3 RCEs @mwulftange found (CVE-2024-8015, CVE-2024-8014, CVE-2024-8048). Telerik vulns have a history of being exploited by threat actors according to @CISACyber Details at https://t.co/IHGGvNZduH

[David Elze @datenschrott]

If you liked our previous challenges, you'll love this one. Or dispair of it. Maybe both 😜

[CODE WHITE GmbH @codewhitesec]

BeanBeat has been aquired by Kurts Maultaschenfabrikle! You don't know what that means? Head over to https://t.co/9P6SMfnnns to find out in challenges that, without exception, stem from real-world vulns #uncompromisingRealism #finestHacking

[CODE WHITE GmbH @codewhitesec]

Think your #kubernetes or #kubelet API is secured with auth? Think again if you expose #tekton for which our crewmember @flomb_ has some nice writeup regarding RCE & proxy risks.

[CODE WHITE GmbH @codewhitesec]

Better patch your Veeam Backup & Replication servers! Full system takeover via CVE-2024-40711, discovered by our very own @frycos - no technical details from us this time because this might instantly be abused by ransomware gangs https://t.co/pGLq1RQi3n