Juergen Schwinghammer

Security Engineer / Pentester @Dynatrace || OSCP || OSWE || THM

[Juergen Schwinghammer @monol0co]

@Sza1ek Congrats 🥳
Highly deserved!

[The Haag™ @M_haggis]

Introducing the Living Off The Land Drivers (LOLDrivers) project, a crucial resource that consolidates vulnerable and malicious drivers in one place to streamline research and analysis.

https://t.co/hORF6hMqEr

LOLDrivers enhances awareness of driver-related security risks and empowers organizations to mitigate these risks, improving their overall cybersecurity posture. By fostering collaboration and knowledge sharing within the cybersecurity community, LOLDrivers, along with sister projects like LOLBAS and GTFOBins, paves the way for a safer and more secure digital landscape.

Read our release blog to learn all about the project and how to contribute
https://t.co/Fl2ywkXNuM

Huge shoutouts to @_josehelps , @bohops , @nas_bench , @cyb3rops and @mattnotmax for their invaluable contributions and unwavering support in bringing the LOLDrivers project to fruition. As we celebrate this milestone, we now invite the broader cybersecurity community to join us in this endeavor. Together, we can continue to enhance the project and share knowledge. Thank you once again to our amazing team, and let's keep the momentum going!

[Juergen Schwinghammer @monol0co]

@ddprrt I created mine with hugo (https://t.co/yEwj3QYktd) and simply hosted it on github pages. Super fast and easy 😉

[Juergen Schwinghammer @monol0co]

@Sza1ek You're a machine. 🔥 keep up the good work 👍

[Juergen Schwinghammer @monol0co]

@Sza1ek @tryhackme Awesome, you're on a roll 🔥💪

[Juergen Schwinghammer @monol0co]

@0xConda What was crucial for me:
*) understand web app routing. for this I suggest you create small web apps in all the technologies covered by the OSWE
*) become familiar with VSCode
*) learn remote debugging

Good luck 🍀🔥

[Juergen Schwinghammer @monol0co]

@0xConda OSWE focuses on white box testing whereas the portswigger web academy mainly teaches a black box approach (both are absolutely great).
However, the deserialization portswigger labs are great as an additional preparation for the OSWE.

[shubs @infosec_au]

Last month, at @assetnote, we discovered a logic flaw in Dynamicweb (enterprise ecommerce solution) - CVE-2022-25369. The vulnerability existed in the codebase since 2018! This logic flaw leads to RCE. You can read about our discovery here:
https://t.co/eK8kIf3knC

[Juergen Schwinghammer @monol0co]

Awesome explanation of .NET Reflection in PowerShell https://t.co/tSSFCf9ISm by @IronmanSoftware #powershell

[Clint Gibler @clintgibler]

🔎 OAUTHScan

A @Burp_Suite extension useful when testing applications implementing OAUTHv2 and OpenID standards

Contains 10+ security checks for vulnerabilities and common misconfigurations

#bugbountytips #websecurity

https://t.co/T5LVtozqcc

[Juergen Schwinghammer @monol0co]

@WebSecAcademy @PortSwigger that's awesome 😍
thanks for that!

[Juergen Schwinghammer @monol0co]

@Sza1ek looks like you're still full of motivation. 💪I'm already looking forward to our next hacking night 🔥

[Juergen Schwinghammer @monol0co]

@0xConda thank you. All the best to you for the exam. 🍀
keep us posted 😉

[Juergen Schwinghammer @monol0co]

@MarcusChachuls1 @Nouureldin_Ehab You're welcome! 😊

[James Kettle @albinowax]

The ActiveScan++ #Log4Shell check has now been superseded by dedicated tools like burp-log4shell, which can detect asynchronous and deferred variations. I hope you found it useful! Go switch :)
https://t.co/LyD98LL1wF

[Juergen Schwinghammer @monol0co]

I just completed "Hydrothermal Venture" - Day 5 - Advent of Code 2021 https://t.co/bGpHwtxIUP #AdventOfCode

I really like those challenges🔥☺️

[Juergen Schwinghammer @monol0co]

I just completed "Giant Squid" - Day 4 - Advent of Code 2021 https://t.co/5MXyVmxEiB #AdventOfCode 🤓

Note to myself: start using NumPy (it saves soo much time)

[Juergen Schwinghammer @monol0co]

@ylmig 🔥