TC @tcs3c

father of three - h4ck3r of stuff - lover of life - singer of songs | pwning at @codewhitesec Stuttgart, Germany Joined December 2013

Tweets

126
Followers

150
Following

212
Likes

129

CODE WHITE GmbH @codewhitesec

5 months ago

Yes, we're beating a dead horse. But that horse still runs in corporate networks - and quietly gives attackers the keys to the kingdom. We're publishing what’s long been exploitable. Time to talk about it. #DSM #Ivanti code-white.com/blog/ivanti-de…

0 50 108 16K 29

CODE WHITE GmbH @codewhitesec

a year ago

Better patch your Veeam Backup & Replication servers! Full system takeover via CVE-2024-40711, discovered by our very own @frycos - no technical details from us this time because this might instantly be abused by ransomware gangs code-white.com/public-vulnera…

5 100 275 37K 76

Download Gif

CODE WHITE GmbH @codewhitesec

2 years ago

We're pleased to announce that we donated a total of $29,500 from vulnerability disclosure rewards to charities this year. Thanks to all colleagues who made this possible and hacky christmas everybody!

2 10 64 5K 1

TC @tcs3c

2 years ago

l33t h4x0r??? Prove it! 😎

CODE WHITE GmbH @codewhitesec

2 years ago

l33t h4x0r??? Prove it! 😎

0 18 31 7K 9

0 0 4 188 0

CODE WHITE GmbH @codewhitesec

2 years ago

Wanna meet some of our team mates like @frycos @dhn_ @tcs3c @datenschrott in real life? Spot us at #OffensiveCon in Berlin over the next few days 🙋

0 3 20 3K 0

CODE WHITE GmbH @codewhitesec

3 years ago

Even though JMX exploitation is well understood, @mwulftange and @qtc_de found new universal exploitation techniques & one of them allows to gain instant Remote Code Execution using TemplatesImpl (which is now implemented in #beanshooter) codewhitesec.blogspot.com/2023/03/jmx-ex…

0 75 169 39K 38

CODE WHITE GmbH @codewhitesec

3 years ago

If you're into client virtualization with #QubesOS, use #KeePassXC and #rofi, our very own @qtc_de has you covered with a nice frontend which makes your credential usage a little bit easier 😎 github.com/codewhitesec/q…

0 11 26 5K 6

frycos @frycos

3 years ago

I call it "Golden Token": Skype for Business Server 2019 Built-in RCE, anytime after certificate leak (similar to Golden SAML) #persistence

2 29 146 0 35

Download Gif

CODE WHITE GmbH @codewhitesec

3 years ago

Our powerintern @testert01 strikes again, teamed up with @thefLinkk and developed SysmonEnte: a hard to detect attack on Sysmon. Check out our new blogpost: codewhitesec.blogspot.com/2022/09/attack…

3 86 195 0 47

CODE WHITE GmbH @codewhitesec

3 years ago

As part of our #x33fcon talk, @invist and @thefLinkk release a socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level 😎 Check it out: github.com/codewhitesec/L…

0 48 78 0 22

CSCG @C_S_C_G

3 years ago

Congratulations to all participants and a major thanks to all our supporters! @FraunhoferAISEC @tngtech @codewhitesec @heiseonline and @LixLab

0 2 16 0 0

CODE WHITE GmbH @codewhitesec

3 years ago

Proud to be sponsoring the celebration dinner today for the finalists of the Cyber Security Challenge Germany 2022. Great to support the hacking community and get in touch with so many talented minds. Cheers to all winners! #CSCG #finestHacking #finestDining

1 5 21 0 0

CODE WHITE GmbH @codewhitesec

3 years ago

We could waffle on about our distinctive service portfolios. We could brag about the perks we provide. We could present you with our outstanding team. But you know what? Apply if you can! apply-if-you-can.com

5 10 21 0 3

CODE WHITE GmbH @codewhitesec

3 years ago

Bypassing .NET Serialization Binders: case studies for DevExpress (CVE-2022-28684) and Microsoft Exchange (CVE-2022-23277) by @mwulftange codewhitesec.blogspot.com/2022/06/bypass…

2 172 362 0 76

CODE WHITE GmbH @codewhitesec

3 years ago

If you have #Citrix #ADM exposed, better patch than sorry. @frycos and @CaptnBanana found a hard to exploit but nonetheless nasty bug that could lead to an unauth'ed device brick/takeover: support.citrix.com/article/CTX460…

1 10 18 0 0

TC @tcs3c

3 years ago

At @codewhitesec the interns write their own C2 frameworks.. What‘s next?! 😎

CODE WHITE GmbH @codewhitesec

3 years ago

At @codewhitesec the interns write their own C2 frameworks.. What‘s next?! 😎

3 28 84 0 13

0 0 6 0 0

CODE WHITE GmbH @codewhitesec

4 years ago

Getting RCE with a Razor! Our walk-through of CVE-2021-22941 affecting Citrix ShareFile Storage Zones Controller by @mwulftange is now live codewhitesec.blogspot.com/2021/09/citrix…

0 115 250 0 37

TC @tcs3c

4 years ago

Read about what @kaidentity does „on a rainy sunday afternoon when the kids are busy with someone else“. 😎 Finest #SAP exploitation - enjoy!

CODE WHITE GmbH @codewhitesec

4 years ago

Read about what @kaidentity does „on a rainy sunday afternoon when the kids are busy with someone else“. 😎 Finest #SAP exploitation - enjoy!

1 71 111 0 13

0 0 1 0 0

CODE WHITE GmbH @codewhitesec

4 years ago

Happy to announce that our talk 'PIC Your Malware' was accepted @brucon! @thefLinkk and @b00n10 will share their experiences on leveraging fully position independent code to avoid suspicious memory artifacts & other useful techniques to stay under the radar of EDRs & BlueTeams 😎

1 17 17 0 1

CODE WHITE GmbH @codewhitesec

5 years ago

Unauth'd admin access to #SAP #Netweaver? Our very own @kaidentity has you covered, see #CVE-2021-21481 and SAP Security Note 3022422. Better patch than sorry. Our customers got their heads-up already and we'll publish a detailed blog post when appropriate.