Sven Schlüter

Advanced Attack Simulation Specialist @ysecurityde - running all sorts of adversary emulations & pentests.

[Y-Security @YSecurity]

Our security team at @YSecurity has identified multiple vulnerabilities in TIM BPM Suite/TIM FLOW, allowing authorization bypass, privilege escalation, and SQL/HQL injection.

Advisory + Mitigation: https://t.co/8hQFq0wn2s

[Y-Security @YSecurity]

Our security team at @YSecurity has identified a vulnerability in AXESS Auto Configuration Server (CVE-2024-56316) which allows unauthenticated remote attackers to trigger a permanent DoS.

Advisory + Mitigation: https://t.co/6P23JaVskn

#YSecurity #CVE202456316 #TR069 #ACS

[Microsoft Threat Intelligence @MsftSecIntel]

Between July 2023 and June 2024, Microsoft observed nation-state threat actors conduct operations for financial gain, enlist cybercriminals to collect intelligence, and make use of the same tools and frameworks favored by cybercriminals: https://t.co/sB1inbeUtm

[Phrack Zine @phrack]

The time has come, and with it your reading material for the week.

Phrack #71 is officially released ONLINE! Let us know what you think!

https://t.co/BRnK9lnGjI

[Y-Security @YSecurity]

We have publicly released our internal tool StealthGuardian at Black Hat USA 2024.

It can be combined with adversary simulation tools to verify the resistance, detection level and behaviour detection of defence mechanisms.

https://t.co/QzlnzvmAAS

#bhusa #blackhat #redteam

[Sven Schlüter @secsven]

@vxunderground Gotcha vee-ex-tuah

[Sven Schlüter @secsven]

Based in Germany and looking for a remote role in pentesting and attack simulation? Come join us and let's break things!

[Y-Security @YSecurity]

Are you taking steps towards a career as an Attack Simulation Specialist?

Maybe you already have experience as a Penetration Tester or with platforms like Hack The Box or certifications like OSCP?

If so, we would love to talk to you!

#job #redteam #pentest #germany

[Y-Security @YSecurity]

Our tool StealthGuardian has been accepted for Black Hat ARSENAL USA 2024. The Y-Security team will be in Las Vegas to present on protecting Red Team payloads from Blue Teams.

https://t.co/2yV075y5Pj

#BlackHat #BHUSA #RedTeam #VegasBaby

[Dirk-jan @_dirkjan]

New blog: Lateral movement and on-prem NT hash dumping with Microsoft Entra Temporary Access Passes.
Some tips and tricks on abusing TAPs for Windows Hello persistence and NT hash recovery over Cloud Kerberos Trust. https://t.co/h3XHjBhwtz

[Y-Security @YSecurity]

Our team recently took the challenge of mastering the Red Team Ops I and Red Team Ops II exam offered by @zeropointsecltd . After completion, we received both the Red Team Operator and Red Team Lead certifications.

Read our recent post: https://t.co/fAeTOhkHgv

#RedTeam #RTO

[Y-Security @YSecurity]

Recently we checked the security of a LoRaWAN implementation. In our latest post we share insights about the security of LoRaWAN, common LoRaWAN attacks and how we built a custom methodology and testing environment.

https://t.co/z5vyADDsyf

#pentest #lorawan #ysecurity

[Sven Schlüter @secsven]

Polyglot template injection payloads here are pretty cool.

[Hackmanit @hackmanit]

Template engines are very popular in web applications. A severe threat posing a risk for the application, its data, and its users: Template Injection Vulnerabilities

Detect them – manually and automatically:
Blog 🌐https://t.co/5YDHcJdPWD
Tool 🛠️ https://t.co/JzxS6O9oLq

[Sven Schlüter @secsven]

@ghidraninja @pirrup @Raspberry_Pi Trying to find the latest on this. Has there been any update or is it still scheduled for a release anytime soon? Ta

[Sven Schlüter @secsven]

@ACEResponder Looks amazing and makes such a difference when presented right, thank you!

[Sven Schlüter @secsven]

@tiraniddo @nostarch Awesome, can't wait! 🚀

[Sven Schlüter @secsven]

@ajxchapman @github You will not like it ... graphql can provide you with the attachment link:

query{project(fullPath:"your/project"){issues{nodes{title notes{edges{node{id body}}}}}}}

[Sven Schlüter @secsven]

@PortSwiggerRes @Burp_Suite Is there any benefit over using the python version that is in the BAPP store?

[juraj somorovsky @jurajsomorovsky]

We started to play with censorship circumventions. Of course, we exploit our TLS skills to bypass big firewalls. In our first work, @JonSnowWhite2 shows that TLS record fragmentation is a useful technique to bypass the Great Firewall of China (GFW). https://t.co/RfiQFPvbKf

[Y-Security @YSecurity]

Check out our blog post by Thore on our Mobile Application Testing service utilizing Apple Silicon.

https://t.co/poplBBpfFL

#pentest #mobile #jailbreak #apple #ios #testing #m1 #ysecurity