@[email protected] retweeted
Lovely to see the Email RFCs abused to embed a command injection payload in the local-part of the address! Nice work Michael Imfeld & @parzel2
modzero.com/en/blog/beyond_t…
@[email protected] retweeted
Joining us for a second year as sponsor is @mod0. Thanks for your continued support!
Register at bsides.berlin for one of the last remaining in-person tickets.
#BSidesBerlin #appsec #infosec #BSides
@[email protected] retweeted
We are excited to welcome onboard @mod0 as our Gold Sponsors this year!
Register at bsides.berlin for one of the last remaining in-person tickets.
#BSidesBerlin #appsec #infosec #BSides"
@[email protected] retweeted
Meeting Owl videoconference device used by govs is a security disaster arstechnica.com/information-… by @dangoodin001
@[email protected] retweeted
Well as some questions start coming up regarding the #MeetingOwl insecurities. Here are some short and clear infos. Details in our report. modzero.com/modlog/archives/…
@[email protected] retweeted
Meeting Owl Pro: Konferenzeule hat viele Sicherheitslücken #MeetingOwl #Sicherheitslücke glm.io/165766?s
@[email protected] retweeted
My colleagues @joelgun and @mezdanak wrote an interesting article about a basic web vulnerability found in one of these covid web apps. modzero.com/modlog/archives/…
Seems like a lot of then are quickly built without much security consideration.
@[email protected] retweeted
Datenleck: Corona-Kontaktliste ungeschützt im Internet abrufbar #Lunchgate glm.io/149492?t
@[email protected] retweeted
Some more of my .Net research is out now on the @mod0 blog. Whoop whoop.
modzero.com/modlog/archives/…
#disclosure #hacking #DeSeriousLization
@[email protected] retweeted
Blogpost: Ergebnis einer Sicherheitsüberprüfung der „COVID-19 Symptom Tracker“ App.
mezdanak.de/2020/05/04/unter…
@[email protected] retweeted
Unsichere Deserialisierung gefährdet Steam-Spiele heise.de/security/meldung/Un… #Sicherheitslücken #Spiele
@[email protected] retweeted
Just wrote a blog about deserialization vulnerabilities in games.
modzero.com/modlog/archives/…
@[email protected] retweeted
Analyse: Windows-Client der VIdeokonferenz-Plattform Zoom mit Angriffspotenzial heise.de/security/meldung/An… #Sicherheitslücken #Windows
@[email protected] retweeted
Just wrote a small blog post about steghide and why sanitizing output may be a good idea.
firzen.de/git-rekt-2-steghid…
#StegoIsNoFun #Hacking
@[email protected] retweeted
Heute um 16:10h: @__ths__ und @vieuxrenard über FinSpy
fahrplan.events.ccc.de/congr…
auch im #36C3 Livestream auf media.ccc.de
@[email protected] retweeted
Just published my writeup of an exploit I wrote for a small ftp server.
firzen.de/git-rekt-1-siim-ft…
Feedback is very welcome.
#Exploit #CTf #Hacking
@[email protected] retweeted
Vivy: Gravierende Sicherheitsmängel in Krankenkassen-App aufgedeckt heise.de/security/meldung/Vi… #Sicherheitslücken
@[email protected] retweeted
Krankenkassen: Vivy-App gibt Daten preis #vivy glm.io/137376?t
@[email protected] retweeted
Prestigeprojekt mit Macken: Forscher fanden schwere Sicherheitslücken in Gesundheits-App Vivy netzpolitik.org/2018/prestig…
@[email protected] retweeted
Wie sicher ist die Gesundheits-App #Vivy, die Krankenkassen wie die DAK, Barmenia, Gothaer und Allianz ihren Versicherten anbieten? Das hat sich die IT-Security-Firma #modzero gefragt und deren Sicherheitsarchitektur getestet. Mit beunruhigendem Ergebnis bit.ly/2Q60OSK