@ettisan

goodbye Twitter

ettisan.wordpress.com
Joined December 2010
  • Tweets168
  • Following44
  • Followers377
7Media
Wolfgang Ettlinger (inactive) retweeted
Certitude Lab@certitude_lab30 Aug 2023
We identified >1000 organizations susceptible to subdomain hijacking certitude.consulting/blog/en…
1
4
2
4
1,745
Wolfgang Ettlinger (inactive) retweeted
Certitude Lab@certitude_lab17 Aug 2023
A privilege escalation vulnerability could have allowed unprivileged users of the IBM Spectrum Virtualize admin interface to execute code certitude.consulting/blog/en… (by @ettisan)
4
3
406
Wolfgang Ettlinger (inactive) retweeted
Certitude@Cert_it_ude26 Jul 2023
Meet us at @WeAreDevs World Congress in Berlin this week and join our talk about the future role of AI in phishing attacks held by our experts Wolfgang Ettlinger (@ettisan) and Alexander Hurbean.
2
1
4
655
Wolfgang Ettlinger (inactive) retweeted
Certitude Lab@certitude_lab11 May 2023
Sicherheitsforscher von Certitude konnten zwei kritische Schwachstellen bei der SPÖ-Mitgliederbefragung identifizieren. Manipulation von Stimmen wäre mit einfachen Mitteln möglich gewesen. (1/7) certitude.consulting/blog/de…
2
18
9
34
65,577
Wolfgang Ettlinger (inactive) retweeted
Chick3nman 🐔@Chick3nman51222 Dec 2022
PBKDF2-SHA256 with 100100 rounds in @hashcat will run at 90kH/s on a single @NVIDIAGeForce RTX 4090. Not fast by any means, but also not super slower either. You can clear rockyou.txt(14M passwords) in about 2 minutes 45 seconds at that speed. RE: @LastPass
12
95
13
327
121,715
Wolfgang Ettlinger (inactive) retweeted
Elon Musk
@elonmusk18 Nov 2022
How do you make a small fortune in social media? Start out with a large one.
32,492
20,791
11,012
392,396
Wolfgang Ettlinger (inactive) retweeted
Ben Phillips@benphillips7620 Jul 2022
A clip from Don’t Look Up, and then a real TV interview that just happened
5,500
179,041
22,978
741,198
Wolfgang Ettlinger (inactive) retweeted
Marc Nimmerrichter@nimmerrichterm10 Nov 2021
It's possible to hide backdoors in JS by only adding invisible Unicode characters to legitimate-looking code. Research by @certitude_lab/@ettisan certitude.consulting/blog/en…
3
6
Wolfgang Ettlinger (inactive) retweeted
Certitude Lab@certitude_lab9 Nov 2021
A neat approach for invisible backdoors in legitimate JavaScript source code. Can you spot it? Hint: unlike #TrojanSource, it does not use Unicode bidirectional-trickery! certitude.consulting/blog/en…
1
19
15
Wolfgang Ettlinger (inactive) retweeted
Certitude Lab@certitude_lab19 Feb 2021
CSRF with JSF 2.x is impossible? We've taken a closer look at Apache MyFaces and found a way to predict CSRF/ViewState tokens: certitude.consulting/blog/en…
3
1
4
Wolfgang Ettlinger (inactive) retweeted
SEC Consult@sec_consult17 Dec 2020
Replying to @sec_consult @ettisan
Attack vector 2: An attacker with access to the HTTP proxy port could abuse the authentication/authorization bypass vulnerabilities and the command execution vulnerability to take over the appliance as root without user/admin interaction. #infosec #websecurity #IWSVA
2
2
Wolfgang Ettlinger (inactive) retweeted
Greg Linares (Laughing Mantis)
@Laughing_Mantis22 Sep 2020
Ever want to test systems & see if your password is ever stored/sent in plaintext? Make it: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* I am on the phone with a vendor right now because my test account is in an inoperable state. 🧐
120
2,616
293
10,799
Wolfgang Ettlinger (inactive) retweeted
Programming Wisdom
@CodeWisdom18 Aug 2020
We've not posted an XKCD here till now, but this is just too true 🙂 xkcd.com/2347/
19
799
64
2,605
Wolfgang Ettlinger (inactive) retweeted
✨ saleem ✨@saleemrash1d15 Jan 2020
CVE-2020-0601
24
847
105
2,043
My implementation of the #AdventOfCode day 2 puzzle solely written in Excel and without using macros or VB: ettisan.wordpress.com/2019/1…

Advent of Code #2 in Excel (without Macros)

This year I’m trying to solve the Advent of Code puzzles in many creative ways using different languages and frameworks. One of my solutions is particularly unusual: I’ve implemented a …

ettisan.wordpress.com
1
1
2
18
Wolfgang Ettlinger (inactive) retweeted
Instructions@x86instructions12 Nov 2019
Due to the recent bug we are removing all jump instructions in the next microcode update.
12
174
9
744
Vulnerability could have allowed assuming anyone's identity on online government services in the EU #Goethe #eIDAS #eGovernment r.sec-consult.com/eidas xitter.cf/sec_consult/status/118…

Vulnerability In EU Cross-Border Authentication Software (eIDAS Node)

During a short crash test SEC Consult identified a critical vulnerability in the eIDAS-Node software component that could allow an attacker to impersonate any EU citizen.

sec-consult.com
SEC Consult@sec_consult29 Oct 2019
My name is Johann Wolfgang von Goethe – I'm back to prove it (again): r.sec-consult.com/eidas Authentication bypass in European Commission eIDAS-Node #eidas #vulnerability #egovernment
9
12
I'll be back #goethe #eGovernment T-4
1
7
Wolfgang Ettlinger (inactive) retweeted
matt blaze
@mattblaze28 Sep 2019
People who've been ignoring experts with PhDs are earnestly complaining that a 16 year old girl is getting too much attention because she's not an expert with a PhD.
27
959
35
3,698
Load more