TC

father of three - h4ck3r of stuff - lover of life - singer of songs | pwning at @codewhitesec

[CODE WHITE GmbH @codewhitesec]

Yes, we're beating a dead horse. But that horse still runs in corporate networks - and quietly gives attackers the keys to the kingdom. We're publishing what’s long been exploitable. Time to talk about it. #DSM #Ivanti https://t.co/weWtiB72Dv

[CODE WHITE GmbH @codewhitesec]

Better patch your Veeam Backup & Replication servers! Full system takeover via CVE-2024-40711, discovered by our very own @frycos - no technical details from us this time because this might instantly be abused by ransomware gangs https://t.co/pGLq1RQi3n

[CODE WHITE GmbH @codewhitesec]

We're pleased to announce that we donated a total of $29,500 from vulnerability disclosure rewards to charities this year. Thanks to all colleagues who made this possible and hacky christmas everybody!

[TC @tcs3c]

l33t h4x0r??? Prove it! 😎

[CODE WHITE GmbH @codewhitesec]

The return of Kurts Maultaschenfabrikle: have fun with our all new applicants challenge at https://t.co/9P6SMfmPxU #CTF

[CODE WHITE GmbH @codewhitesec]

Wanna meet some of our team mates like @frycos @dhn_ @tcs3c @datenschrott in real life? Spot us at #OffensiveCon in Berlin over the next few days 🙋

[CODE WHITE GmbH @codewhitesec]

Even though JMX exploitation is well understood, @mwulftange and @qtc_de found new universal exploitation techniques & one of them allows to gain instant Remote Code Execution using TemplatesImpl (which is now implemented in #beanshooter) https://t.co/KPyyxQDsGI

[CODE WHITE GmbH @codewhitesec]

If you're into client virtualization with #QubesOS, use #KeePassXC and #rofi, our very own @qtc_de has you covered with a nice frontend which makes your credential usage a little bit easier 😎 https://t.co/MHJmasSwxf

[frycos @frycos]

I call it "Golden Token": Skype for Business Server 2019 Built-in RCE, anytime after certificate leak (similar to Golden SAML) #persistence

[CODE WHITE GmbH @codewhitesec]

Our powerintern @testert01 strikes again, teamed up with @thefLinkk and developed SysmonEnte: a hard to detect attack on Sysmon. Check out our new blogpost: https://t.co/ol4jrl1Ewa

[CODE WHITE GmbH @codewhitesec]

As part of our #x33fcon talk, @invist and @theflinkk release a socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level 😎 Check it out: https://t.co/uqHNa6j3jQ

[CSCG @C_S_C_G]

Congratulations to all participants and a major thanks to all our supporters! @FraunhoferAISEC @tngtech @codewhitesec @heiseonline and @LixLab

[CODE WHITE GmbH @codewhitesec]

Proud to be sponsoring the celebration dinner today for the finalists of the Cyber Security Challenge Germany 2022. Great to support the hacking community and get in touch with so many talented minds. Cheers to all winners! #CSCG #finestHacking #finestDining

[CODE WHITE GmbH @codewhitesec]

We could waffle on about our distinctive service portfolios. We could brag about the perks we provide. We could present you with our outstanding team. But you know what? Apply if you can! https://t.co/9P6SMfmPxU

[CODE WHITE GmbH @codewhitesec]

Bypassing .NET Serialization Binders: case studies for DevExpress (CVE-2022-28684) and Microsoft Exchange (CVE-2022-23277) by @mwulftange https://t.co/G90Qg7gQ9m

[CODE WHITE GmbH @codewhitesec]

If you have #Citrix #ADM exposed, better patch than sorry. @frycos and @CaptnBanana found a hard to exploit but nonetheless nasty bug that could lead to an unauth'ed device brick/takeover: https://t.co/UFP2KKk0fc

[TC @tcs3c]

At @codewhitesec the interns write their own C2 frameworks.. What‘s next?! 😎

[CODE WHITE GmbH @codewhitesec]

@snyksec Tnx for your excellent analysis at https://t.co/UoshhgaDgx and don't worry, the "malicious actor" is one of our interns 😎 who was tasked to research dependency confusion as part of our continuous attack simulations for clients. (1/2)

[CODE WHITE GmbH @codewhitesec]

Getting RCE with a Razor! Our walk-through of CVE-2021-22941 affecting Citrix ShareFile Storage Zones Controller by @mwulftange is now live https://t.co/pS9KcLnkjF

[TC @tcs3c]

Read about what @kaidentity does „on a rainy sunday afternoon when the kids are busy with someone else“. 😎
Finest #SAP exploitation - enjoy!

[CODE WHITE GmbH @codewhitesec]

How the search for deser bugs in #SAP sent @kaidentity down a rabbit hole where he winded up stumbling upon a completely unrelated unauth'ed admin access #CVE-2021-21481 https://t.co/Pk6F4lnpcA

[CODE WHITE GmbH @codewhitesec]

Happy to announce that our talk 'PIC Your Malware' was accepted @BruCON! @thefLinkk and @b00n10 will share their experiences on leveraging fully position independent code to avoid suspicious memory artifacts & other useful techniques to stay under the radar of EDRs & BlueTeams 😎

[CODE WHITE GmbH @codewhitesec]

Unauth'd admin access to #SAP #Netweaver? Our very own @kaidentity has you covered, see #CVE-2021-21481 and SAP Security Note 3022422. Better patch than sorry. Our customers got their heads-up already and we'll publish a detailed blog post when appropriate.