From AWAE to OSWE: The Preperation Guide
As promised on Twitter this post will document my steps through the OSWE exam preperation. Searching for available […]
Blog
10 posts
Best Practise: Intel Unquoted Service Path
Affected Software Intel Management Interface <= 1815.12.0.2021 Issue In my last assessment i discovered an unquoted service path […]
CVE-2019-12763: Insecure Data Storage Security Camera CZ
CVE CVE-2019-12763 Vulnerable Software Android App: Security Camera CZ <= 1.6.8 Vulnerability Insecure Data Storage (M2, OWASP Mobile […]
SmartScreen Bypass = weirdo?
During my last assessment i discovered a strange behaviour of Microsoft’s SmartScreen feature.In general this security feature should […]
HMV-01: Auto-Generated Screenshots
Description Applications which go to background are screenshoted per default for a better user experience. Unfortunately other apps […]
HanseSecure as one of the Top 21 (twice ;-)
It’s quite funny that two independent companies named the “21” Cybersecurity and Redteaming resources world wide. But i […]
New InfoSec Team spawned: BreachedSec
I decided to set up a new team of infosec professionals, because of a lot of project requests […]
CVE-2018-16231: Remote DoS in Personal FTP-Server <= 8.4f
CVE CVE-2018-16231 Vulnerable Software FTP-Server <= 8.4f Vulnerability Remote Denial of Service Time Line 30.01.2018 Vendor informed (local […]
Backdooring PE-File (with ASLR)
Welcome to my next blog post. Today i want to show you some basic pentesting stuff. We will […]
CVE-2018-7272: AM 5.0.0, 5.1.0
CVE CVE-2018-7272 Vulnerable Software AM 5.0.0, 5.1.0 Vulnerability Unauthorized Access Time Line 15.12.2017 Vendor informed X.01.2018 Vendor patched flaw […]