CODE WHITE GmbH @codewhitesec
Red Teaming. Security Research. Continuous Penetration Testing. Threat Intelligence. code-white.com Ulm & Mannheim Joined July 2014-
Tweets168
-
Followers7K
-
Following41
-
Likes168
Ten days left. The warm-up fades. Maultaschen were soft. Bean Beats were dark and burnt. But the beats of #ULMageddon will be brutal! #applyIfYouCan
We always love a good challenge. That’s why we’re sponsoring the 10th FAUST CTF. Game on at 2025.faustctf.net
We've added a new demo to NewRemotingTricks that makes deploying a MarshalByRefObject (e.g., WebClient) even easier: System.Lazy<T> creates an instance of T on serialization, which is probably more likely to be allowed than a XAML gadget getting through. github.com/codewhitesec/N…
Yes, we're beating a dead horse. But that horse still runs in corporate networks - and quietly gives attackers the keys to the kingdom. We're publishing what’s long been exploitable. Time to talk about it. #DSM #Ivanti code-white.com/blog/ivanti-de…
At @codewhitesec we have a red team style hacking challenge each year which is also a great way to practice/test/improve your skills ;)
Our crew members @mwulftange & @frycos discovered & responsibly disclosed several new RCE gadgets that bypass #Veeam's blacklist for CVE-2024-40711 & CVE-2025-23120 as well as further entry points following @SinSinology & @chudyPB's blog. Don’t blacklist, replace BinaryFormatter.
Ever wondered how Kurts Maultaschenfabrikle got hacked in 2023? The full story, all technical details, out now ;-) apply-if-you-can.com/walkthrough/20…
Using Telerik Reporting or Report Server? Patch now to fix 3 RCEs @mwulftange found (CVE-2024-8015, CVE-2024-8014, CVE-2024-8048). Telerik vulns have a history of being exploited by threat actors according to @CISACyber Details at code-white.com/public-vulnera…
BeanBeat has been aquired by Kurts Maultaschenfabrikle! You don't know what that means? Head over to apply-if-you-can.com to find out in challenges that, without exception, stem from real-world vulns #uncompromisingRealism #finestHacking
Think your #kubernetes or #kubelet API is secured with auth? Think again if you expose #tekton for which our crewmember @flomb_ has some nice writeup regarding RCE & proxy risks.
Think your #kubernetes or #kubelet API is secured with auth? Think again if you expose #tekton for which our crewmember @flomb_ has some nice writeup regarding RCE & proxy risks.
Better patch your Veeam Backup & Replication servers! Full system takeover via CVE-2024-40711, discovered by our very own @frycos - no technical details from us this time because this might instantly be abused by ransomware gangs code-white.com/public-vulnera…
We've received insider information from a reliable source that Kurts Maultaschenfabrikle will be expanding and securing their IT in the coming weeks. So either act fast and get ahead on apply-if-you-can.com or wait for the new challenges. Or better yet, do both 🤓
Teaching the Old .NET Remoting New Exploitation Tricks – read how @mwulftange developed novel techniques to exploit Apache log4net's hardened .NET Remoting service: code-white.com/blog/teaching-…
Another product, another deserialization vulnerability, another RCE from @mwulftange: Patch your Telerik Report Server (CVE-2024-6327 & CVE-2024-6096) code-white.com/public-vulnera…
Our CODE WHITE crew can see every day how frycos finds what he finds. Now you can too: an instructive insight into his thought process based on his RCE in MS Dynamics - well worth the read if you're into .NET exploitation
Our CODE WHITE crew can see every day how frycos finds what he finds. Now you can too: an instructive insight into his thought process based on his RCE in MS Dynamics - well worth the read if you're into .NET exploitation
Today, CODE WHITE turns 10 🥳 Over the past decade, we've hacked our way through 120+ large corporations' defenses, caused headaches for Blue Teams and disclosed numerous 0days to vendors. Proudly grown from a few motivated hackers in 2014 to an established team of 50+ today 💪
If you are struggling to crack AES based TGS hashes, it might be that you are using the wrong salt. This impacket PR will ensure that you get the right salt value by sending an additional AS_REQ packet. github.com/fortra/impacke…
Nicolas Krassas @Dinosn
146K Followers 735 Following Head of Threat & Vulnerability Mgmt @ Henkel AG & Co. KGaA https://t.co/NC1orlKrW3
Florian Roth ⚡️ @cyb3rops
206K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Sam Curry @samwcyo
97K Followers 1K Following Hacker, bug bounty hunter. Run a blog to better explain web application security.
Justin Elze @HackingLZ
65K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
frycos @frycos
4K Followers 518 Following Private account! Red teamer @codewhitesec. @[email protected] @frycos.bsky.social
an0n @an0n_r0
13K Followers 725 Following CRT(E|O|L) | OSCP | @RingZer0_CTF 1st (for 2yrs) | HackTheBox Top10 | RPISEC MBE | Flare-On completer | GoogleCTF writeup winner | SSD research | Math MSc |🇭🇺
pyn3rd @pyn3rd
13K Followers 605 Following Security Researcher&Red Team&Cloud Security. BlackHat&HITB&CanSecWest Speaker.
LiveOverflow 🔴 @LiveOverflow
155K Followers 1K Following wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
Vincent Yiu @vysecurity
29K Followers 308 Following Director, Red Team, Offensive Security. Help organizations safeguard their businesses from the bad guys.
Tuan Anh Nguyen⚡️... @haxor31337
15K Followers 2K Following 29 y/o Bug Bounty Hunter and Red Teamer at Viettel Cyber Security. Brand Ambassador @Hacker0x01 - Researcher Spotlight @Bugcrowd
张惠倩 @momika233
18K Followers 222 Following Anda boleh melakukan segala-galanya dari syurga ke bumi, wanita kecil!! If you have any questions, please contact me https://t.co/MkzsavUU9V
Pham Khanh @rskvp93
2K Followers 339 Following Security Engineer at @calif_io. Winner of Pwn2own Vancouver 2021, Torento 2022, Vancouver 2023. MSRC top 100 2019, 2020, 2021.
shubs @infosec_au
56K Followers 2K Following Co-founder, security researcher. Building an attack surface management platform, @assetnote
kmkz @kmkz_security
19K Followers 2K Following Offensive Security, pom-pom girl... Who cares ?? Bourbon Offensive Security Services | BOSS
klez @KlezVirus
8K Followers 705 Following Independent Cyber Security Researcher - Opinions are my own
Soroush Dalili @irsdl
20K Followers 909 Following Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker, @SecProjectLtd founder 🕸️https://t.co/YipuTcYnWc🥷 🍏A dad-joke maker🍐
kalilord1 @kalilord788
9 Followers 437 Following
bixbouton @bixbouton
46 Followers 756 Following
Petrus Vasenius | MVP... @PetrusVasenius
398 Followers 940 Following Microsoft Security #MVP | Lead Cloud Security Advisor @ZureLtd🛡️☁️ | Retweets/Likes ≠ Endorsements | #AISecurity and #DataSecurity
Ojaswi Kumar Mishra�... @0xojaxwi
74 Followers 2K Following Old-school Malware & Offensive Security REsearcher | ⚡Kernel Pwner⚡
Caitlin Condon @catc0n
3K Followers 3K Following Adventurer. Takes a lot of photos, calls many places home. VP of research @VulnCheck. Former research director at @Rapid7 / @metasploit. Opinions mine. She/her.
Armando L.Davis @davis_arma79011
2 Followers 27 Following
themisp @themisp265371
0 Followers 17 Following
歪比歪比 @dasiwoyebushuo1
0 Followers 352 Following
MRreC00N @Mr_reC00N
3 Followers 107 Following
CloudMalwareStudioOSX @CMSOSXAI
8 Followers 799 Following https://t.co/qgFp0ACgjW [email protected] $cybersecurity $cyberprotections $cybersafeguards $cyberdefenses
Mrudul Patel @__mrudul
208 Followers 588 Following Red Teaming, Penetration Tester, Security Researcher, SDRs, OSINT, Social Engineering, AV evasion, Digital Forensics
Doawri @Doawri221
55 Followers 2K Following
Peter @et3rnal_blu3
12 Followers 437 Following
A Iv @booleanbased
0 Followers 26 Following
Xandrinho @Freedus2
67 Followers 2K Following
Ahmet Yaşar @Ahmet_Yasar23
41 Followers 140 Following
Henderson Kuo @HendersonKuo
0 Followers 54 Following
CHA Minseok(Jacky) @mstoned7
3K Followers 5K Following CHA is my family name. Senior Principal Threat Intelligence Researcher at AhnLab / Keybase : mstoned7 , Signal : mstoned7.21 / Tweets are my own.
Spotted @ispottedanenemy
57 Followers 2K Following
richi @zuh4zana
4 Followers 345 Following
G Asi.boh @gnasiboh
4 Followers 176 Following
john lili @JohnJohnlili9
0 Followers 30 Following
helloworld/ @hellodebug8
255 Followers 6K Following
affane @affaane
56 Followers 551 Following
Quan Nguyen @zer01010001
0 Followers 65 Following
Nguyễn Thanh Tùng @DT31YT
1 Followers 17 Following
אייל בביאן @eyalbabian
0 Followers 27 Following
chính trần @chinh31503
0 Followers 17 Following
Dang Anh @D4ng4nh99
1 Followers 36 Following
John Fewer @johnfewer
175 Followers 144 Following Newfoundlander. This is a personal account and not employer related, therefore opinions are my own.
Aloyz000 @Aloyz000158378
1 Followers 8 Following
Tripa Graciano @tripa98232
0 Followers 64 Following
Scarlett Rose @DucatiGirl242
65 Followers 1K Following
aqas @Aqas__
5 Followers 286 Following
Hoang Tien Thanh @htthanh02
2 Followers 172 Following
nt!RajKit @NtRajkit
8 Followers 149 Following
q @q0439083356750
0 Followers 52 Following
frycos @frycos
4K Followers 518 Following Private account! Red teamer @codewhitesec. @[email protected] @frycos.bsky.social
Raphael @raphajohnsec
293 Followers 437 Following Security Enthusiast | Bitschubser | Pentesting | Python | OSCP | RTO
pfiatde @pfiatde
2K Followers 1K Following "Every machine is a smoke Machine if you operate it wrong enough" RedTeamer by day, sleeping at night! https://t.co/ZcTfWHeGZO
r1cksec @r1cksec
976 Followers 221 Following Data breach revealed, Malware lurks, silent, stealthy - OSINT tracks the thread.
m1tz @_m1tZ
226 Followers 888 Following Web Security Expert | Bug Hunter | Käferjäger | https://t.co/DT86afEp4J https://t.co/WzdEqXoJv9
flomb - @fl0mb.bsky.s... @flomb_
100 Followers 2K Following
0xor_solo @0xorS
7 Followers 56 Following
dkx @dkx02668274
46 Followers 268 Following
Carsten @0xcsandker
2K Followers 174 Following Security enthusiast, Likes Windows Internals, AD & Entra — https://t.co/mVVbfkO7IO
lion @li0nsec
11 Followers 69 Following
Rene Loskan @druvora
42 Followers 401 Following
c1sc0 @C1sc01
343 Followers 190 Following OSCP, OSEP, OSWE, OSED, OSCE3, OffSec, Pentesting, Hacking Enthusiast, #kaeferjaeger
Astidan @Astidan
139 Followers 289 Following IT-Security Consultant, Ethical Hacker OSCP|OSCE|OSWE|OSWP|OSED Certified Red-Team Operator Penetration Tester/Red Teamer. Private Account.
TheVamp @TheHaloVamp
503 Followers 1K Following Reversing, hacking, cracking, coding, caffeine junkie, OSCP, ALLES! - CTF Member | [email protected] | thevamp@bsky
Fabian @testert01
118 Followers 115 Following
banana_bunny @bananabunny6
114 Followers 218 Following security, music, math, bananas, and anarchist rants! @[email protected]
Tjark Rasche @TjarkRasche
202 Followers 902 Following Cloud. Music. Politics. Memes. #lifeIsATradeOff Building Clouds for @MercedesBenz
dhn @dhn_
744 Followers 326 Following By the power of truth, I, while living, have conquered the universe - /OS(C(P|E)|EE)/ - Tweets are my own! - Red teamer @codewhitesec | @[email protected]
esjay @esj4y
745 Followers 796 Following Shell horticulturist @codewhitesec - blog @ https://t.co/TAuhn27aSX
thefLink @thefLinkk
1K Followers 149 Following
Daniel @DanShaqFu
80 Followers 81 Following
Ramoliks @ramoliks
130 Followers 8 Following
niph @niph_
477 Followers 592 Following red / purple teaming at @codewhitesec - my tweets, my opinions - https://t.co/YcrfmTTwqg
Kai Ullrich @kaidentity
80 Followers 25 Following
George Pranschke @cheorchie
238 Followers 154 Following
_____ @H_ng_an
187 Followers 2K Following
Markus Piéton @markus_pieton
412 Followers 930 Following Head of Security Intelligence Service @ CODE WHITE / Go, Rust, Reversing and not enough time to enjoy nature ;-)
Alex @akuntsc
41 Followers 240 Following
TC @tcs3c
149 Followers 213 Following father of three - h4ck3r of stuff - lover of life - singer of songs | pwning at @codewhitesec
Markus Wulftange @mwulftange
3K Followers 195 Following Principal Security Researcher and Pâtissier at @codewhitesecTrends for United States
You might like
