Jan 3, 2022 | CVE, exploit, Vulnerability
While doing my preperation for the OSCE i found an exploit for the coolpalyer+ version 2.19.1 from 2009. I decided to check this vulnerability in the recent software version (2.19.6) on my Windows 10 machine. The following post descripes the exploit development. 1....
Jan 3, 2022 | CVE, Vulnerability
Vulnerable Software FTP server 8.0f(g) Vulnerability Local Buffer Overflow (SEH protected)-> Code Execution time line 01/24/2018 Vendor informed 30.01.2018 Vendor reminded 12.02.2018 Software patched 20.02.2018 Vulnerability Disclose Description The free...
Jan 3, 2022 | Certifications
As promised on Twitter here is my OSCE review. You can read my time line from before course enrolling until the end of the exam here. So, let’s go. Stage_0: Preparation just before enrolling! First, I read a ton of other reviews to get an idea about the course...
Jun 6, 2021 | Security Advices & Tipps, Security QuickFails
#1 Standard Office Macros Settings The attack Our employee of the month Peter Lustig receives an e-mail from his supplier SuperSchnell GmbH, who has attached a corrected order in an Excel sheet. Of course, the Excel sheet was protected with a password, because the...
