Secfault Security GmbH @secfaultsec

In-depth IT security consulting secfault-security.com 0.0.0.0/0 Joined September 2019

Tweets

27
Followers

223
Following

39
Likes

12

Secfault Security GmbH @secfaultsec

a year ago

The other day, our colleague Oliver decided to play around with Syzkaller to fuzz the FreeBSD Kernel. He added some support for the Bluetooth stack and indeed found an OOB read. If you're interested, check our blog post here: secfault-security.com/blog/fuzzing_f…

0 2 2 254 0

Secfault Security GmbH @secfaultsec

a year ago

We recently did some internal research and took a look at the JavaScript runtime Deno. We found a couple of interesting bypasses for their permission system. If you'd like to learn more, please feel free to check out our blogpost at secfault-security.com/blog/deno.html.

0 2 5 546 0

Secfault Security GmbH @secfaultsec

2 years ago

We've taken (another) look at the OpenOlat learning management solution and found an XXE issue, which can be turned into an arbitrary file read and an SSRF problem. In case you're interested, make sure to read our blog post at secfault-security.com/blog/openolat-…!

0 1 4 232 0

Secfault Security GmbH @secfaultsec

2 years ago

We recently decided to take a look at LibreOffice, and found an (almost) arbitrary file write issue, which is now public (CVE-2023-1183). If you're interested, check out secfault-security.com/blog/libreoffi… for details :)

0 28 80 14K 21

Secfault Security GmbH @secfaultsec

3 years ago

Last year we did a number of projects for AgileBits, focusing on the 1Password ecosystem. The reports have now been made public, so in case you're interested to get an impression feel free to check secfault-security.com/blog/onepasswo….

0 3 1 349 0

Secfault Security GmbH @secfaultsec

3 years ago

Recently, @OldM4nHunting took a look at the Visual Studio App Center SDK for iOS and macOS and found an insecure object deserialization issue. Here's a write-up on her journey of identifying and exploiting the issue: secfault-security.com/blog/ms-app-ce….

0 5 4 1K 1

Secfault Security GmbH @secfaultsec

3 years ago

As one of our internal research projects, we've recently taken a look at some self-powered wireless 433MHz light switches, particularly on reverse-engineering the used radio protocol and building a custom receiver. If you're interested, make sure to check secfault-security.com/blog/kineticsw….

0 1 2 370 0

Secfault Security GmbH @secfaultsec

3 years ago

We have recently conducted a review of the 1Password developer tools. Our report is now public, so please feel free to check it out: secfault-security.com/blog/onepasswo…

0 8 11 0 1

Secfault Security GmbH @secfaultsec

4 years ago

Some time ago, we've had a look at the F*EX file exchange solution (fex.rus.uni-stuttgart.de), and found a pre-auth RCE. We now published a small write-up on this: secfault-security.com/blog/fex.html

0 2 1 0 0

Karsten @gr4yf0x

5 years ago

I dived into iOS kernel exploitation recently and have written a kernel exploit for chain 3 of @i41nbeer blog post series from last August. Check out the post at the @secfaultsec blog :) secfault-security.com/blog/chain3.ht… Feedback highly appreciated!

6 114 373 0 47

Secfault Security GmbH @secfaultsec

5 years ago

Our colleague @gr4yf0x did a research project on re-creating a custom iOS exploit. You can read about his adventures here secfault-security.com/blog/chain3.ht… :)

0 5 11 0 3

X41 D-SEC GmbH @X41Sec

5 years ago

All applications for the Pro-bono Pentests for COVID-19-related Apps & Software have been reviewed and the committee has chosen the winners. More info to follow soon 🙂

0 3 12 0 0

X41 D-SEC GmbH @X41Sec

5 years ago

Today is the last day to apply for a FREE pentest on your application that helps fight COVID-19! Since the closure of schools requires good tools for educational learning, we would love to see last minute submissions from this field.

X41 D-SEC GmbH @X41Sec

5 years ago

2 18 31 0 1

0 11 15 0 0

Secfault Security GmbH @secfaultsec

5 years ago

We're proud to announce that together with our partners from @SecureLayer7, @cure53berlin and @X41Sec, we are offering pro-bono pentests for COVID-19 related apps/software: secfault-security.com/blog/Probono.h…

0 19 27 0 1

confidenceconf @CONFidenceConf

6 years ago

#TalkAnnouncement Karsten König will be joining #CONFidence2020 with a talk about Exploiting Reference Counter Vulnerabilities Inside The FreeBSD Kernel ⚡️ 👇Check out the details of his talk and get your ticket here 👇 buff.ly/2IIVBOW

0 7 10 0 0

Download Image

Jan Muenther @janmuenther

6 years ago

@teh_gerg @koehntopp Ah indeed, that’s another important point, especially in complex high risk projects. Particularly meaningful with all this microservice salad and abstraction layers.

1 1 3 0 0

greg @teh_gerg

6 years ago

@janmuenther @koehntopp Well, it also provides an end-to-end view of a product at a certain stage, which can help identifying issues emerging from the interplay of its components. But that's another focus than the classical pentest before release idea.

1 1 1 0 0

Jan Muenther @janmuenther

6 years ago

@koehntopp @teh_gerg to be fair though, I still use in pen testing - as a wake up call for teams in denial, and as a verification of assumptions in a very dedicated, targeted fashion as @teh_gerg outlined. Ideally, you consider pen test targets when you conceptualize your mitigations.