The Curious Engineer

All blogs / Security

Insinuator.net

insinuator.net

Recent content on Insinuator.net - Bold Statements

SecurityWindows internalsNetworking

’05’10’15’20’25
Posts
896 from 1 Jan 2001 to 11 Oct 2026
Posting
weekly (36 in the last year)
Kind
company blog
Feed
https://insinuator.net/index.xml

2026 35

  1. Governing AI Across the Whole Portfolio
  2. Token Theft in Microsoft Entra ID (Part 3 of 4): Token Protection
  3. Rückblick auf die heise devSec in Marburg
  4. Part II: Sniffing Bluetooth Auracast
  5. Token Theft in Microsoft Entra ID (Part 2 of 4): Continuous Access Evaluation
  6. Token Theft in Microsoft Entra ID (Part 1 of 4): Threat Landscape and Attack Techniques
  7. ERNW White Paper 80: Token Theft in Microsoft Entra ID - An Analysis of Controls
  8. From Black Hat USA 2026 to ERNW Whitepaper 78: Breaking Kubernetes Multi-Tenancy
  9. Beats Studio Buds: Insecure Pairing Window
  10. ERNW White Paper 79: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detection
  11. TIA Project Parser
  12. #TROOPERS26 AD & Entra ID Security Track
  13. Your Android Bluetooth Traffic Captures Should Be Live
  14. Windows Hello for Business – Full Report Has Been Released
  15. TROOPERS26: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detection
  16. Heads-up: TROOPERS Roundtable – Supply Chain Security
  17. Vulnerability Disclosure: Stealing Emails via Firefox’s AI Features
  18. Insights into Entra ID’s (Un)Conditional Access
  19. CVE-2026-47237 – Overly Permissive Istio Permissions Allow Kubeflow Authorization Token Stealing
  20. ERNW White Paper 77: Unified Security Hardening with Cross-Platform Native Binaries
  21. ERNW Whitepaper 76: Linux Client Hardening Guide
  22. When paradigms are shifting: InfoSec in the age of AI
  23. Disclosure: Command Injection in Geutebrück Cameras
  24. Windows Early Boot Configuration: The CmControlVector and PspSystemMitigationOptions
  25. KubeCon + CloudNativeCon Europe 2026
  26. Methodology for Assessing Kubernetes Namespace-Based Multi-Tenancy Setups
  27. Security Considerations on Istio’s CRDs with Namespace-based Multi-Tenancy
  28. Assessing Endpoint Protection: Our Approach to EDR/XDR and Supplements Evaluation
  29. Vulnerabilities in Broadcom VMware Aria Operations: Privilege Escalation (CVE-2025-41245 / CVE-2026-22721)
  30. Hacking a Bluetooth Printer Server: GATT to UART Adapter?
  31. BlackBoxAI: AI Agent can get your computer fully compromised
  32. Vulnerability Disclosure: JWT Authentication Bypass in OpenID Connect Authenticator for Tomcat
  33. One More Thing: Introducing the New macOS 26 Tahoe Hardening Guide
  34. Capture Bumble Bluetooth Traffic with Wireshark
  35. Incident Response in GCP: Out of Scope – Out of Mind

2025 23

  1. Bluetooth Headphone Jacking: Full Disclosure of Airoha RACE Vulnerabilities
  2. MCTTP 2025 / Keynote
  3. Release of ERNW White Paper 73: Analyzing WinpMem Driver Vulnerabilities
  4. Disclosure: Authentication Bypass in VERTIV Avocent AutoView (Version 2.10.0.0.4736)
  5. Vulnerability Disclosure: Stealing Emails via Prompt Injections
  6. Windows Hello for Business - Faceplant: Planting Biometric Templates
  7. #TROOPERS25 AD & Entra ID Security Track
  8. Setting up Secure Boot on Gentoo Linux
  9. Windows Hello for Business - The Face Swap
  10. Insecure Boot: Injecting initramfs from a debug shell
  11. Security Advisory: Airoha-based Bluetooth Headphones and Earbuds
  12. Windows Hello for Business – Past and Present Attacks
  13. Disclosure: Multiple Vulnerabilities in X.Org X server prior to 21.1.17 and Xwayland prior to 24.1.7
  14. Using the Raspberry Pi Pico W as a Bluetooth Dongle
  15. Disclosure: Input Validation Vulnerabilities in Microsoft Bookings
  16. Full Disclosure: Multiple Rundeck Job Command Injections
  17. Vulnerability Disclosure: Restricted Shell Breakout (CVE-2025-1950) and Privilege Escalation (CVE-2025-1951) in IBM Power Hardware Management Console (HMC)
  18. Cookie Prefixes – The Lesser Known Cookie Security Feature
  19. CVE-2024-11035: Minor Security Issues in VMware Carbon Black Cloud
  20. CVE-2025-20908: Use of insufficiently random values in Samsung's Auracast implementation
  21. When Your Edge Browser Syncs Private Data to Your Employer
  22. Jigsaw RDPuzzle: Piecing Attacker Actions Together
  23. Part I: Bluetooth Auracast from a Security Researcher’s Perspective

2024 17

  1. Vulnerability Disclosure: Command Injection in Kemp LoadMaster Load Balancer (CVE-2024-7591)
  2. Vulnerability Disclosure: Authentication Bypass in Vaultwarden versions < 1.32.5 - CVE-2024-55225
  3. Announcement: Progress Kemp LoadMaster CVE-2024-7591
  4. Disclosure: Potential Limitations of Apple ADE in Corporate Usage Scenarios
  5. CrowdStrike: What is the worldwide BSOD all about?
  6. Disclosure: Apple ADE – Network Based Provisioning Bypass
  7. BMBF UNCOVER – Monitoring von Sicherheitsvorfällen in Fahrzeugen
  8. TROOPERS24 Agenda Preview: Active Directory & Entra ID Security Track
  9. Security Advisory: Achieving PHP Code Execution in ILIAS eLearning LMS before v7.30/v8.11/v9.1
  10. Linux Character Devices: Exploring systemd-run and pkexec
  11. Is Google Play Protect a Reliable Malware Detector?
  12. Vulnerability in Jitsi Meet: Meeting Password Disclosure affecting Meetings with Lobbies
  13. Breaking GLS Parcel Tracking
  14. BSI Publishes Windows 10 SiSyPHuS Reports: Application Compatibility Infrastructure, Microsoft Defender Antivirus ETW Usage and Device Setup Manager Service
  15. Breaking UPS Parcel Tracking
  16. I know what you ordered last summer @ Winterkongress 2024
  17. Considerations on AI-Security – Part I: Introduction and Nondeterminism

2023 12

  1. Student Project - Audit Framework
  2. c0c0n 2023 – A Short Retrospective
  3. Lua-Resty-JWT Authentication Bypass
  4. Breaking DPD Parcel Tracking
  5. Identification of (malicious) modifications in memory-mapped image files
  6. Select * from OpenStack - A Steampipe Plugin for OpenStack
  7. All your parcel are belong to us – Talk at Troopers 2023
  8. The DRACO Stream Cipher
  9. Jasper Reports Library Code Injection
  10. IMF Conference 2023 in Munich
  11. AD /Azure Security Track on Troopers 23
  12. Hack In The Box Security Conference 2023 @ Amsterdam - Summary

2022 7

  1. Hilarious Buffer Overflow Mitigation and TCL Injection in CheckPoint Gaia Portal
  2. Some experiments with Process Hollowing
  3. Spymax: The android RAT and it works like that
  4. Whitepaper Endpoint Management & Monitoring Solutions Released
  5. Security Advisories for Broadcom Automic Automation (UC4)
  6. Solving client-side controls once and for all
  7. A Tale of an OFTP2 Vulnerability

2021 18

  1. Release of PTE Analysis plugins for Volatility 3
  2. Change Your BLE Passkey Like You Change Your Underwear
  3. ManiMed: Ypsomed AG – mylife YpsoPump System Vulnerabilities
  4. Analysis of HSTS Caches of Different Browsers
  5. Attack llvmpipe Graphics Driver from Chromium
  6. DogWhisperer's SharpHound Cheat Sheet
  7. BSI veröffentlicht Hardening Guide, Protokollierungs-Empfehlung und zugehörige GPOs für Windows 10 im Rahmen der SiSyPHuS-Studie
  8. Of Corona, Buggy Audio Drivers and Industrial Espionage
  9. Summary of 'Software-Defined Radio applied to security assessments' at Troopers21
  10. fpicker: Fuzzing with Frida
  11. ManiMed: Hamilton Medical AG – HAMILTON-T1 Ventilator Vulnerabilities
  12. ManiMed: B. Braun Melsungen AG – Space System Vulnerabilities
  13. ManiMed: Innokas Yhtymä Oy - VC150 Patient Monitor Vulnerabilities
  14. ERNW Whitepaper 71: Analysis of Anti-Virus Software Quarantine Files
  15. ManiMed: Philips Medizin Systeme Böblingen GmbH – IntelliVue System Vulnerabilities
  16. Having Fun with Google MDM Solution
  17. ManiMed: Market Analysis
  18. Pentesting the ELK Stack

2020 32

  1. ERNW White Paper 70 – HL7 FHIR: Preserving Distributed Resource Integrity
  2. Root Cause Analysis of a Heap-Based Buffer Overflow in GNU Readline
  3. Security Advisories for SolarWinds N-Central
  4. How Fuzzers Decide if a Crash is Unique
  5. VMware NSX-T MITM Vulnerability (CVE-2020-3993)
  6. XSS Vulnerability in Froala WYSIWYG HTML Editor
  7. Microsoft Office Telemetry: Report Release
  8. Forklift <=3.3.9 and <=3.4 Local Privilege Escalations on macOS (CVE-2020-15349/CVE-2020-27192)
  9. Reversing C++ Without Getting a Heart Attack – DEvirtualize VIrtual Calls With Devi
  10. Apps on Prescription?! – Perspectives on Digital Health Applications (DiGA)
  11. OpenSIS Vulnerabilities
  12. Vulnerabilities in GNU Readline Fixed
  13. Doing it Server-Side with CypherDog 4.0
  14. ERNW White Paper 69 – Safety Impact of Vulnerabilities in Insulin Pumps
  15. How can data from fitness trackers be obtained and analyzed with a forensic approach?
  16. Puppet Assessment Techniques
  17. Java Buffer Overflow with ByteBuffer (CVE-2020-2803) and Mutable MethodType (CVE-2020-2805) Sandbox Escapes
  18. Security Advisories for Nagios XI
  19. ACM WiSec 2020
  20. QEMU, Unicorn, Zelos, and AFL
  21. Security Advisories for Ivanti DSM Suite
  22. Back from the ATT&CK jungle…
  23. Medical Device Security: HL7v2 Injections in Patient Monitors
  24. CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click RCE – BlueFrag
  25. Dog Whisperer Update
  26. VMware NSX-T Distributed Firewall can be bypassed by default
  27. DNS exfiltration case study
  28. TROOPERS20 Training Teaser: Attack And Defence In AWS: Chaining Vulnerabilities To Go Beyond The OWASP Top 10
  29. Critical Bluetooth Vulnerability in Android (CVE-2020-0022) – BlueFrag
  30. TROOPERS20 Training Teaser: Hacking Node.js & Electron apps, shells, injections and fun!
  31. Blackhoodie@Troopers 2020
  32. Windows Insight: The Windows Telemetry ETW Monitor

2019 64

  1. TROOPERS20 Training Teaser: TLS in the Enterprise – Post Quantum Security
  2. TROOPERS20 Training Teaser: Swim with the whales – Docker, DevOps & Security in Enterprise Environments
  3. BASTA! Autumn 2019 – Security in DevOps
  4. TROOPERS20 teaser: Hacking mobile apps
  5. TROOPERS20 Training Teaser: Insight Into Windows Internals
  6. DevSecCon19 London – How to Secure OpenShift Environments and What Happens If You Don´t
  7. TROOPERS20 Training Teaser: Hacking 101
  8. TROOPERS20 Training Teaser: Windows & Linux Binary Exploitation
  9. Dissection of an Incident – Part 2
  10. Windows Insight: Code integrity and WDAC
  11. Blue Hands On Bloodhound
  12. Medical Device Security Summit 2019, 19th of November of 2019
  13. TelcoSecDay 2020 CFP is open
  14. Jenkins – Groovy Sandbox breakout (SECURITY-1538 / CVE-2019-10393, CVE-2019-10394, CVE-2019-10399, CVE-2019-10400)
  15. PSD2 – Mandatory Account Access for Third Party Providers
  16. A Brief History of the IPv4 Address Space
  17. Black Hat US 2019 / Some Talks
  18. A Follow-Up on the Heisec Webinar on Emotet & Some Active Directory Security Sources
  19. How to break out of restricted shells with tcpdump
  20. LibreOffice – A Python Interpreter (code execution vulnerability CVE-2019-9848)
  21. Emotet at Heise, Emotet there, Emotet everywhere – Dissection of an Incident
  22. Troopers 19 – Badge Hardware
  23. Multiple Vulnerabilities in innovaphone VoIP Products Fixed
  24. Security Advisories for Cisco ACI
  25. IPv6 Surveys / Application Space
  26. DirectoryRanger 1.5.0 Is Available
  27. Back from PowerShell Conference Europe…
  28. IPv6 Properties of Windows Server 2019 / Windows 10 (1809)
  29. Windows Insight: Virtual Secure Mode
  30. Emotet im Active Directory: Es kann jeden treffen – aber Jeder kann es dem Angreifer schwer machen!
  31. Windows Insight: The TPM
  32. The Week in Review #RIPE78
  33. Windows Insight: A New ERNW Repository
  34. IPv6 Security for Enterprise Organisations @ #RIPE78
  35. Heise Security Tour: Offensive PowerShell
  36. #TR19 Next Generation Internet (NGI) Summaries
  37. Security Advisory for Cisco Nexus 9000 Series Fabric Switches in ACI mode
  38. #TR19 Active Directory Security Summaries
  39. #TR19 Attack & Research Summaries
  40. DMEA 2019: A reunion with the Medical Informatics Community
  41. Troopers & Chill…
  42. MDMs – The Mobile Device “Magic” Solutions – Expectations and Reality
  43. Troopers 19 – Hack your badge
  44. Upcoming ISH Conference
  45. The “mmm…” in Community
  46. Binaries, shellcoding, bug hunting, ROP gadgets and more at Blackhoodie@TR19
  47. IPv6 Address Management / The “External” Flag
  48. IPv6 Security in an IPv4-only Environment
  49. Offensivecon 2019
  50. Some Notes on the IPv6 Properties of the Wireless Network @ Cisco Live Europe
  51. TelcoSecDay 2019 – First talks preview
  52. 2019 – Year Of The Blue Dog…
  53. #TR19 Active Directory Security Track
  54. TROOPERS19 Training Teaser: Hacking mobile applications
  55. TROOPERS19 Training Teaser: Insight Into Windows Internals
  56. TROOPERS19 Training Teaser: Hacking 101
  57. TROOPERS19 Training Teaser: Windows & Linux Binary Exploitation
  58. TROOPERS19 Training Teaser: Hardening Microsoft Environments
  59. IPv6 Talks & Publications
  60. macOS Mojave Hardening Guide
  61. Secure CI/CD Pipelines @Troopers ’19
  62. 35C3: Refreshing Memories
  63. Blackhoodie at TROOPERS19
  64. Catching fire with Docker, DevOps & Security in Enterprise Environments

2018 62

  1. Motivational Aspects and Privacy Concerns on Wearables in the German Running Community
  2. ERNW Whitepaper 67: Active Directory Trust Considerations
  3. And Five Talks More Were Accepted at TROOPERS19!
  4. DirectoryRanger 1.1.0 Introduces Informational Audit Checks
  5. First Talks of TROOPERS19 Accepted!
  6. On the insecurity of math.random and it’s siblings
  7. Plume Twitter Client URL Spoofing
  8. Pidgin, Word Documents, my Clipboard and I
  9. The Dog Whisperer’s Handbook
  10. Active Directory Security Summit 2018 – Slides Online
  11. Dumping Decrypted Documents from a North Korean PDF Reader
  12. Multiple Vulnerabilities in Nexus Repository Manager
  13. Hack.lu 2018: Back and forth with the ERNW Crew
  14. Hack.lu 2018: Fuzzing Workshop by René Freingruber
  15. H2HC2018 – Attacking VMware NSX
  16. Hack.lu 2018: ARM IoT Firmware Emulation Workshop by Saumil Udayan Shah
  17. Comparison of our tool afro (APFS file recovery) with Blackbag Blacklight and Sleuthkit
  18. Multiple Vulnerabilities in UNIFY OpenScape Desk Phone CP600
  19. Incident Analysis and Digital Forensics Summit 2018, 14th of November of 2018
  20. Vulnerabilities in Sitefinity WCMS – A Success Story of a Responsible Disclosure Process
  21. Spraying arbitrary objects into the non-paged pool
  22. Active Directory Security Summit 2018, 13th. of November of 2018
  23. nmap-parse-output: A tool for analyzing Nmap scans
  24. A few notes on WordPress Security
  25. IPython Support for Binary Ninja
  26. dizzy version 2.0 released
  27. Diversity, Community, Blackhoodie
  28. A little KeePass Mea Culpa…
  29. PoSh_ATTCK – ATT&CK Knowledge at your PowerShell Fingertips…
  30. The building IoT 2018 in Cologne
  31. Modern Application Stacks & Security
  32. New Release of Glibc Heap Analysis Plugins
  33. Security of Busch-Jaeger IP Gateway
  34. GI Sicherheit 2018 Conference
  35. TROOPERS18 Photos online!
  36. printf(“Hello World!”) Part 2
  37. Reversing and Patching .NET Binaries with Embedded References
  38. Industrial IoT Overview & Case Studies
  39. Yet Another Information Disclosure?
  40. Security Advisory for VMware vRealize Automation Center
  41. #TR18 Attack & Research Summaries
  42. #TR18 Defense & Management Summaries
  43. #TR18 Next Generation Internet (NGI) Summaries
  44. #TR18 SAP Security Summaries
  45. #TR18 Active Directory Security Track, Part 1
  46. Squirrelmail Full Disclosure – TROOPERS18
  47. The Hackers‘ Sanctuary City
  48. Auditing AWS Environments
  49. TelcoSecDay 2018 – Talks Part2
  50. Creating Static Binaries for Nmap, Socat and other Tools
  51. printf(“Hello World!”)
  52. TLS in the Enterprise: Is Heartbleed still a Problem?
  53. Extracting data from an EMV (Chip-And-Pin) Card with NFC technology
  54. Get your hands dirty playing with RFID/NFC
  55. White Paper on Incident Analysis and Forensics in Docker Environments
  56. AndroTickler: Tickling Vulnerabilities out of Android Apps
  57. TelcoSecDay 2018 – CFP and First talks
  58. Hacking 101 to mobile data
  59. Blackhoodie at TROOPERS18
  60. Virtualized Training Environment with Ansible
  61. White Paper on Multi-Factor Authentication in Microsoft Windows Environments
  62. #TR18 Active Directory Security Track

2017 59

  1. Yet another edition of BlackHoodie – #BlackHoodie17
  2. Let’s talk about RFC 6980
  3. Announcing the first 5 talks of TROOPERS18!!!!
  4. Why It Might Make Sense to Use IPv6 in Enterprise Infrastructure Projects
  5. My Journey to DockerCon Europe 2017
  6. Interacting with the BlueCoat Filesystem
  7. Extract Non-Exportable Certificates and Evade Anti-Virus with Mimikatz and Powersploit
  8. TROOPERS for Students!
  9. Position Paper on an Enterprise Organization’s IPv6 Address Strategy
  10. Erlang distribution RCE and a cookie bruteforcer
  11. Reading the BlueCoat FileSystem
  12. Daycon X1
  13. RIPE IoT Roundtable Meeting / Balanced Security for IPv6 CPE Revisited
  14. HITCON CMT 2017
  15. An Update of PenTesting Tools that (do not) Support IPv6
  16. FireEye Security Bug: Connection to physical host and adjacent network possible during analysis in Live-Mode
  17. DFRWS USA 2017
  18. 11th USENIX Workshop on Offensive Technologies (WOOT17)
  19. Black Hat 20 & DEFCON 25
  20. A Life Without Vendors Binary Blobs
  21. IPv6 RA Flags, RDNSS and DHCPv6 Conflicting Configurations Revisited
  22. Release of Glibc Heap Analysis Plugins for Rekall
  23. Local Packet Filtering with IPv6
  24. Testing RFC 6980 Implementations of FreeBSD
  25. 17. Gulaschprogrammiernacht
  26. GDPR and Pseudonymisation – Easing the Pain of Regulation
  27. DevOps, Continuous Deployment & Agile Security September 7, 2017
  28. Docker Security & (Sec) DevOps Training July 19-20th
  29. Active Directory Security & Secure Operations July 18, 2017
  30. 6th No-Spy Conference
  31. Looking back on RIPE 74
  32. RIPE74 / Why IPv6 Security Is So Hard
  33. Git Shell Bypass By Abusing Less (CVE-2017-8386)
  34. One Step Closer – RDNSS (RFC 8106) Support in Windows 10 Creators Update
  35. Autonomic Network Part 3: Vulnerabilities
  36. (Mostly) New, Interesting, and Security-focused Open Source Projects
  37. Some Quick Tips for Submitting a Talk to Black Hat or TROOPERS
  38. Autonomic Networking – Part 2: Analysis
  39. This is Why Your Wireless Mouse Should Have a Tail and Your Presenter is a Fail
  40. Autonomic Networking – Part 1: Overview
  41. CSA Summit CEE and BSides Ljubljana 2017
  42. Information About SAP Security Note 2336795
  43. Testing RFC 6980 Implementations with Chiron
  44. 31c0n 2017 in Auckland, New Zealand
  45. Troopers17 GSM Network – How about your own SMPP Service?
  46. Agile Development & Security
  47. Cloudflare Incident #Cloudbleed
  48. Exploitation of IMS in absence of confidentiality and integrity protection
  49. Summary of “Lockpicking in the IoT” at 33C3
  50. 33c3 Talks – What could possibly go wrong with “insert x86 instruction here” ?
  51. White Paper on Incident Handling First Steps, Preparation Plans, and Process Models
  52. IPv6 Properties of Windows Server 2016 / Windows 10
  53. ERNW at 33C3 – Part 1
  54. TR17 Training: Hacking 101
  55. Cisco: Magic WebEx URL Allows Arbitrary Remote Command Execution – Project Zero
  56. Insomni’hack pwn50 write-up
  57. First dedicated Forensic Computing Training at TR17
  58. TelcoSecDay 2017 – 2nd Round of Talks
  59. TR17 Training: Crypto attacks and defenses

2016 163

  1. Woolim – Lifting the Fog on DPRK’s Latest Tablet PC
  2. IPv6 Configuration Approaches for Servers
  3. 3rd Round of TROOPERS17 Talks
  4. PoC Con Seoul 2016
  5. TR17 Training: Fuzzing with American Fuzzy Lop, Address Sanitizer and LibFuzzer
  6. 2nd Rounds of TROOPERS17 Talks!
  7. A short Addendum on the Mirai Botnet Blog Post
  8. TelcoSecDay 2017 – First Talks Published
  9. Research Diary: Bluetooth. Part 2
  10. Analyzing yet another Smart Home device
  11. Research Diary: Blue Coat
  12. Some Notes from the Lab – BlackNurse in the IPv6 Era
  13. Research Diary: IP-Cameras Part 2
  14. Defending Democracy
  15. CCS’16 – Day 2 – 25th October 2016
  16. Research Diary: Bluetooth
  17. Research Diary: IP-Cameras
  18. BlackHoodie 2016
  19. Considerations on DMZ Design in 2016, Part 3: Some Notes on Firewall Rule Management
  20. Introduction & CCS’16 – Day 1 – 24th October 2016
  21. IoT the S is for Secure – Unknown Administration Interface in Wireless Plug
  22. (Securely) Updating Smart Devices / Some Considerations
  23. 15. Cyber-Sicherheits-Tag
  24. ITSeCX 2016: Pulling an all-nighter in Austria
  25. Announcing the first 5 talks of TROOPERS17!!!!
  26. IPv6 Source Address Selection
  27. TelcoSecDay 2017 – CFP Opens
  28. Day-Con X Recap
  29. IoT Insight Summit November 15, 2016
  30. Reverse Engineering With Radare2 – Part 3
  31. A Journey Into the Depths of VoWiFi Security
  32. A Quick Insight Into the Mirai Botnet
  33. Linq Injection – From Attacking Filters to Code Execution
  34. Setting up a Research Environment for IP Cameras
  35. Welcome to Insinuator.net 2.0
  36. Black Hat 2016 Summary Part 2.1
  37. DameWare Vulnerability
  38. How to Become Part of an IoT Botnet
  39. Diving into EMET
  40. Attacking BaseStations @Defcon24
  41. Introducing the Kernel Space Invaders
  42. BSides LV 2016: Recap
  43. Files Your Webserver Shouldn’t Deliver
  44. SIGS DC Day
  45. 25th USENIX Security Symposium & WOOT Workshop
  46. To Control Something
  47. Hardware Hacking Week @ ERNW
  48. Considerations on DMZ Design in 2016, Part 2: A Quick Digression on Reverse Proxies
  49. KNXmap: A KNXnet/IP Scanning and Auditing Tool
  50. MRMCD16 – diagnosis:critical
  51. Reverse Engineering With Radare2 – Part 2
  52. Considerations on DMZ Design in 2016, Part 1
  53. ERNW Hardening Repository
  54. Follow-Up on CVE-2016-1409 – IPv6 NDP DoS Vulnerability
  55. Reverse Engineering With Radare2 – Part 1
  56. Black Hat 2016 Summary
  57. PFX Profiles in Microsoft’s System Management Server
  58. Reverse Engineering With Radare2 – Intro
  59. Pentesting Webservices with Net.TCP Binding
  60. Not Sure Which Talks to Attend at BHUSA?
  61. Remote Code Execution via Server Side Template Injection at OFBiz 13.07.03 (CVE-2016-4462)
  62. Your Mouse Got Sick and You Don’t Know it. aka “Reverse Shell via Mouse”
  63. New Ransomware-Wave Analysis
  64. REcon 2016 – A Quick Recap
  65. Notes on Hijacking GSM/GPRS Connections
  66. Gotta Catch ‘Em All! – WORLDWIDE! (or how to spoof GPS to cheat at Pokémon GO)
  67. Jenkins Remoting RCE II – The return of the ysoserial
  68. SnoopCon Guest Day
  69. Some infos about SAP Security Note 2258786
  70. VoLTE Security Analysis, part 2
  71. Area41 Conference 2016
  72. SAMLReQuest Burpsuite Extention
  73. IPv6 & Threat Intelligence
  74. The ULIN Story
  75. New Methods for Exploiting ORM Injections in Java Applications (HITB16)
  76. Implementing an Obsolete VPN Protocol on Top of HTTP: Because Why Not?
  77. CVE-2016-1409 – IPv6 NDP DoS Vulnerability in Cisco Software
  78. Telescope – Peering Into the Depths of TLS Traffc in Real-Time (HITB16)
  79. The Beauty of IPv6 Link-Local Addressing. Not
  80. Some Notes on Utilizing Telco Networks for Penetration Tests
  81. WPAD Name Collision Vulnerability (TA16-144A)
  82. BMC BladeLogic Vulnerabilities PoCs
  83. Introduction of a new hardware guy
  84. Review about the System and Security Info iOS App from SektionEins GmbH
  85. Because of Cyber – A Recap
  86. How ‘security’ black boxes might corrupt your investment
  87. A Trip to Hannover Messe
  88. SAP Security @ Troopers16
  89. Defense & Management Day 2
  90. Infiltrate and Syscan 360
  91. Discover the Unknown: Analyzing an IoT Device
  92. Summary GI Sicherheit
  93. TSD 2016 – Follow Up
  94. Unpatchable – Living with a vulnerable implanted device
  95. Security Assessment of Microsoft DirectAccess
  96. Anonymization IPv6 in PCAPs – Challenges and Wins
  97. Passive Intelligence Gathering and Analytics – It’s all Just Metadata!
  98. The Kings in your Castle
  99. draft-vyncke-pim-mld-security
  100. Advanced IPv6 Network Reconnaissance
  101. Patch Me If You Can
  102. Tools for Troubleshooting and Monitoring IPv6 Networks
  103. Building a secure and reliable IPv6 Guest Wi-Fi Network by Christopher Werny
  104. Caring for file formats
  105. Imma Chargin Mah Lazer-How to protect against (D)DoS attacks
  106. QNX: 99 Problems but a Microkernel ain’t one!
  107. The road to secure Smart Cars: ENISA approach
  108. unrubby: reversing without reversing
  109. BMC BladeLogic: CVE-2016-1542 and CVE-2016-1543
  110. DFRWS EU 2016 Summary
  111. How easy to grow robust botnet with low hanging fruits (IoT) – for free
  112. I Have the Power(View): Offensive Active Directory with PowerShell
  113. Keynote #1 Troopers 2016
  114. Mind The Gap – Exploit Free Whitelisting Evasion Tactics
  115. Reverse Engineering a Digital Two-Way Radio
  116. Towards a LangSec-aware SDLC
  117. Troopers Netmon
  118. Generic RAID Reassembly using Block-Level Entropy
  119. Medical Device Security: Hack or Hype
  120. IPv6 Security Summit – Track 2
  121. Troopers 16 USB Condom
  122. Troopers 16: Wireshark in IP version 6
  123. Attacking Next-Generation Firewalls
  124. SDR and non-SDR tools for reverse engineering wireless systems
  125. Security Evaluation of Dual-Stack Systems [Troopers 2016 recap] (Part 1)
  126. The Joy of Sandbox Mitigations
  127. Reflections on the IPv6-only WiFi Experience during Troopers
  128. Classic Web Vulns Found in Google Search Appliance 7.4
  129. Troopers 16 – Taking the Badge to yet Another Level!
  130. Troopers16 – GSM Network
  131. Check your SAP landscape for default Solution Manager users
  132. Cloud Security & Trust
  133. Docker, DevOps & Security
  134. TelcoSecDay 2016 – Final Agenda and more
  135. Troopers16 – GSM Network
  136. How to crack a white-box without much effort
  137. Multicast Based IPv6 Neighbor Spoofing / Response Behavior on Cisco Devices
  138. How to test Kerberos authenticated web applications?
  139. Dual Stack vs. IPv6-only in Enterprise Networks
  140. Observations from the Cisco Live Europe 2016 Wifi Infrastructure
  141. ss7MAPer – A SS7 pen testing toolkit
  142. IPv6 Address Planning in 2016 / Observations
  143. #TR16 IPv6 Security Summit Teaser: Basic IPv6 Attacks & Defenses Workshop
  144. Multiple Address Family OSPFv3
  145. #TR16 IPv6 Security Summit Teaser: First-Hop-Security on HP Network Devices
  146. #TR16 IPv6 Security Summit Teaser: Building a Reliable and Secure IPv6 WiFi Network
  147. DHCPv6 Option 52 on Cisco DHCPv6 Server
  148. Denial of Service attacks on VoLTE
  149. TelcoSecDay 2016 – Second Round of Talks
  150. Developing an Enterprise IPv6 Security Strategy / Part 6: Controls on the Host Level
  151. Pentesting with Metasploit #TR16 Training
  152. Damn Vulnerable Safe
  153. Dynamic IDA Enrichment (aka. DIE)
  154. TROOPERS16 Training Teaser: Dos and Don’ts of Secure Active Directory Administration
  155. Web Hacking Special Ops Workshop @ TR16
  156. Hacking 101 Training at TROOPERS16
  157. 32C3 Recap – Part 2
  158. TelcoSecDay – First Round of Talks
  159. 5th Round of TROOPERS16 Talks Accepted
  160. Things to Consider When Starting Your IPv6 Deployment
  161. 32C3 Recap – Part1
  162. Another Perspective in Vulnerability Disclosure
  163. Security Analysis of VoLTE, Part 1

2015 121

  1. Developing an Enterprise IPv6 Security Strategy / Part 5: First Hop Security Features
  2. DPRK’s RedStar OS on 32c3
  3. #TR16 IPv6 Security Summit – New Talks Added
  4. 4th Round of TROOPERS16 Talks Accepted
  5. Developing an Enterprise IPv6 Security Strategy / Part 4: Traffic Filtering in IPv6 Networks (II)
  6. Teaser on the TROOPERS16 Incident Analysis Workshop: Analyzing the current Spam Flood
  7. 3rd Round of TROOPERS16 Talks Accepted
  8. Xen XSA 155: Double fetches in paravirtualized devices
  9. Developing an Enterprise IPv6 Security Strategy / Part 3: Traffic Filtering in IPv6 Networks (I)
  10. Investigating Memory Analysis Tools – SSDT Hooking via Pointer Replacement
  11. 2nd Rounds of TROOPERS16 Talks
  12. First Talks of TROOPERS 2016 Accepted!
  13. Developing an Enterprise IPv6 Security Strategy / Part 2: Network Isolation on the Routing Layer
  14. Developing an Enterprise IPv6 Security Strategy / Part 1: Baseline Analysis of IPv4 Network Security
  15. Welcome to Brazil!
  16. Denog7
  17. 13th escar Europe conference | Embedded Security in Cars
  18. Wireless LAN Pros Conference
  19. A Visual Guide to Day-Con 9
  20. “We have a Code Blue right here!”
  21. Some Notes on the “Drop IPv6 Fragments” vs. “This Will Break DNS[SEC]” Debate
  22. Social Coding – Simple Things to Keep in Mind (updated)
  23. OCSP over HTTP testing with Python
  24. hardwear.io: Applied Physical Attacks on x86 Systems
  25. hardwear.io: Conference Day 1
  26. hardwear.io: Conference Day 2
  27. ERNW speaking @ hardwear.io
  28. The Strange Case of $SOME_SOFTWARE Adding an IPv6 Extension Header, and an Internet Router Dropping Them
  29. Being at VB2015…
  30. VMware did it again: vCenter Remote Code Execution
  31. BlackHoodie: Reversing Workshop for Women
  32. Python For Hackers
  33. New iOS Version – New Lockscreen Bypass
  34. Reminiscing About Black Hat USA 2015
  35. Miner’s Canary Revival in IT Security
  36. IPv6@MRMCD2015
  37. Sending Mixed Signals – What Can Happen in the Course of Vulnerability Disclosure
  38. 24th USENIX Security Symposium & WOOT Workshop
  39. Cisco and the Maintenance Operation Protocol (MOP)
  40. KNX Support for Nmap
  41. HackRF meets PortaPack H1
  42. Black Hat Talks & Papers related to Windows/Active Directory Security
  43. IPv6 Hackers Meeting @ IETF 93 in Prague
  44. RedStar OS Watermarking
  45. Solving sound issues when using WebEx with Linux and Firefox
  46. Reflections on Vulnerability Disclosure
  47. Evasion of Cisco ACLs by (Ab)Using IPv6 – Part 2
  48. The patient’s last words: I am not a target!
  49. BT SnoopCon
  50. CSA.no Nordic Summit
  51. Internet Information Service 7.5 Hardening Guide
  52. NANOG64
  53. IPv6 Adress Planning / Some Notes
  54. An unpacker for Alcatel TiMOS images
  55. TACACS+ module for loki
  56. ERNW @PHDays V in Moscow
  57. Advanced Security Evaluation of Network Protocols
  58. Is IPv6 more Secure than IPv4? Or Less?
  59. ERNW @Mudiator
  60. Blog 5: Beyond the Thunderdome: A Review of TROOPERS15
  61. ERNW@HAXPO/HITB 2015
  62. Blog 4: Beyond the Thunderdome: A Review of TROOPERS15
  63. Blog 3: Beyond the Thunderdome: A Review of TROOPERS15
  64. Blog 2: Beyond the Thunderdome: A Review of TROOPERS15
  65. IPv6 & Complexity
  66. Beyond the Thunderdome: A Review of TROOPERS15
  67. RIPE70 in Amsterdam
  68. ERNW @ HAXPO 2015
  69. How to Get a BaseStation
  70. Analysis of an Alarm System – Part 2/3
  71. Hek.si 2015
  72. OS IPv6 Behavior in Conflicting Environments
  73. SSL Tidbits at the BASTA.NET
  74. Car Hacking Lab – Work in Progress
  75. Troopers PacketWars 2015 – Write Up
  76. Analysis of an Alarm System – Part 1/3
  77. General Pr0ken Filesystem – Hacking IBM’s GPFS
  78. Apple iOS PIN Bruteforce
  79. SI6 Networks’ IPv6 Toolkit v2.0 (Guille) released at the Troopers IPv6 Security Summit
  80. MLD, a tale on Complexity in IPv6
  81. Syscan 2015
  82. Troopers 15 Badge
  83. Troopers15 Videos Online
  84. XML External Entity (XXE) Injection in Apache Batik Library [CVE-2015-0250]
  85. GSM@Troopers
  86. Final Agenda of Troopers15 TelcoSecDay
  87. Revisiting Xen’s x86 Emulation: Xen XSA 123
  88. IPv6 Router Advertisement Flags, RDNSS and DHCPv6 Conflicting Configurations
  89. Practical IPv6 Troubleshooting while Setting up the Troopers Network
  90. An MLD Testing Methodology
  91. A Chiron Workshop at the IPv6 Security Summit of Troopers 15
  92. Bug Hunting for the Man on the Street
  93. What to Do Today if You Want to Deploy IPv6 Tomorrow
  94. The Dangers of x86 Emulation: Xen XSA 110 and 105
  95. Another Talk Added to Troopers15 TelcoSecDay
  96. How to go ahead with future end of life Windows (2003) Servers
  97. Troopers TelcoSecDay – Next Talks (II)
  98. Troopers TelcoSecDay – Next Talks
  99. IPv6-related Requirements for Security Devices
  100. Troopers 15 TelcoSecDay – First Talks
  101. IPv6 Hardening Guide for OS X
  102. Is RFC 6939 Support Finally Here – Checking the Implementation of the “Client Link Layer Address Option” in DHCPv6
  103. Using Android without Google, Part 1
  104. IPv6-related Requirements for the Internet Uplink or MPLS Networks
  105. Evaluation of IPv6 Capabilities of Commercial IPAM Solutions
  106. Evasion of Cisco ACLs by (Ab)Using IPv6 & Discussion of Mitigation Techniques
  107. The Persistent Problem of State in IPv6 (Security)
  108. Observations from the Cisco Live Europe Wifi Infrastructure
  109. Evaluating Behavior-based Malware Detection
  110. Riding the Z-Wave, Part 1
  111. Troopers15 IPv6 Security Summit
  112. Main IPv6 Related Mailing Lists
  113. (In-)secure SD cards on WP8.1
  114. Skeleton Key – a Nasty Piece of Malware. Some Remarks.
  115. How To Configure Snort to Stop IPv6 Evasion Attacks
  116. 31C3 Recap
  117. DHCPv6 Guard: Do It Like RA Guard Evasion
  118. Should IPv6 Packets With Source Address ::1 Be Processed When Received on an External Interface?
  119. Some Design Aspects of Hacking Challenges
  120. Troopers15 – 5th Round of Talks Selected
  121. Telco Research 2015

2014 76

  1. Hardening Against Local PrivEsc: Protecting Your Links
  2. Troopers15 – Fourth Round of Talks Selected
  3. Revisiting an Old Friend: Shell Globbing
  4. IPv6 Hardening Guide for Windows Servers
  5. Troopers15 – Third Round of Talks Selected
  6. Getting 20k Inline-QR-Codes out of Burp
  7. IPv6 Hardening Guide for Linux Servers
  8. Penetration Testing Tools that (do not) Support IPv6
  9. Troopers15 – Second Round of Talks Selected
  10. Security Implications of Using IPv6 GUAs Only
  11. IPv6 in RFIs/Tendering Processes
  12. MLD Considered Harmful?
  13. Scal(e)ing down Privacy
  14. Troopers15 – First Round of Talks Selected
  15. GitHub Enterprise 2.0.0 Fixes Multiple Vulnerabilities
  16. MLD to Be Reconsidered?
  17. Power of Community 2014
  18. Protocol Properties & Attack Vectors
  19. Dynamics of IPv6 Prefixes within the LIR Scope in the RIPE NCC Region
  20. IPv6 for IPv4 Experts
  21. I Don’t Have Any Neighbors – A Deep Dive into DHCPv6, Part 1
  22. Router Advertisement Options to the Rescue – A Deep Dive into DHCPv6, Part 2
  23. LTE vs. Darwin @ Hackers to Hackers Conference 11
  24. A “Please, Don’t Waste my Time” Approach and the Sourcefire/Snort Evasion
  25. Deaggregation by large organizations
  26. North American IPv6 Summit 2014
  27. Chiron – An All-In-One IPv6 Penetration Testing Framework
  28. “Hacking for a B33r” at Ghent
  29. Security Implications of Disruptive Technologies
  30. MLD and Neighbor Discovery. Are They Related?
  31. ERNW’s Top 9 Burp Plugins
  32. Atomic Fragments vs. Fragmentation in the IPv6 “Real World”
  33. HackRF One the story continues…
  34. Packet Too Big Messages and Atomic Fragments
  35. Wrap-Up: A Memorable Week at Black Hat and DEFCON in Las Vegas
  36. ERNW @BlackHat US 2014
  37. Some notes on VMware vCenter Operations Manager
  38. Evading IDPS by Combining IPv6 Extension Headers and Fragmentation “Features” – The Story of My Life…
  39. Some Things to Consider when Using EMET
  40. Cisco Cloud Services Router 1000V and the Virtual Matryoshka
  41. IPv6 for Managers
  42. IPv6 Requirements for Cloud Service Providers
  43. HackInTheBox and Haxpo – 2014
  44. Skype GPO
  45. New Tool: s1ap_enum
  46. m0n0wall as an IPv6 firewall
  47. A Novel Way of Abusing IPv6 Extension Headers to Evade IPv6 Security Devices
  48. Microsoft Windows Update over IPv6 (or not?)
  49. Django Image Validation Vulnerability
  50. IPv6 Address Plan Considerations, Part 3: The Plan ;-)
  51. The Role of VGX.DLL in the Context of the Latest IE 0-Day
  52. ASCII Protocol Scheme Generator
  53. Bruting Android Pins
  54. Hackito Ergo Sum 2014
  55. A TROOPER’s Keyboard, part2
  56. A TROOPER’s Keyboard
  57. How to Own a Router – Fritz!Box AVM Vulnerability Analysis
  58. How to use Intel AMT and have some fun with Mainboards
  59. The Three Billion Dollar App – Some Notes on My Upcoming Troopers Talk
  60. A Short Teaser on My New IPv6 Testing Framework
  61. Fresh Meat From the Coding Front
  62. Analyzing a CVE-2013-3346/CVE-2013-5065 Exploit with peepdf
  63. Preliminary Agenda for Troopers 2014 Telco Sec Day
  64. Configuring IPv6 Snooping and DHCPv6 Guard on Cisco IOS
  65. LTE@ShmooCon, a Summary
  66. ShmooCon 2014
  67. XSS in SAP Netweaver
  68. IPv6 Address Plan Considerations, Part 2: The “PI Space from (Single|Multiple) RIR(s) Debate”
  69. More Troopers Talks Selected
  70. Serial Port Debugging Between two Virtual Machines in VMware Fusion
  71. Exploiting Hyper-V: How We Discovered MS13-092
  72. Tomcat 7 Hardening Guide
  73. IPv6 Address Plan Considerations, Part 1: General Guidelines
  74. Some notes on 30C3
  75. State of Virtualization Security ‘14
  76. Troopers 2014 – Third Round of Talks Selected

2013 76

  1. Troopers 2014 – Second Round of Talks Selected
  2. ERNW Newsletter 42: Dangers of Disabled Pre-Boot Authentication in Corporate Environments
  3. Design & Configuration of IPv6 Segments with High Security Requirements
  4. ACSAC 2013
  5. DeepSec 2013
  6. 3D-Printers in the Cloud
  7. Medical Device Security
  8. t2’13 Infosec Conference
  9. Troopers 2014 – First Round of Talks Selected
  10. IPv6 Scanner
  11. pytacle – alpha2
  12. ISSE 2013 – ERNW Rapid Rating System
  13. IPAM Requirements in IPv6 Networks
  14. The Impact of Pervasive Monitoring on Corporate InfoSec
  15. DayCon VII
  16. HackRF – A Must-Have Gadget
  17. Some Security Impacts of HTML5 CORS or How to use a Browser as a Proxy
  18. Security Team 2.0
  19. SLES 11 Hardening Guide
  20. Vulnerabilities & attack vectors of VPNs (Pt 1)
  21. WOOT’13
  22. LEET’13
  23. MFD Vulnerabilities
  24. Cross-Site Request Forgery with Cross-Origin Resource Sharing
  25. IPv6 Hackers Meeting @ IETF 87 in Berlin / Slides
  26. Basic OS X Hardening & DMA
  27. SNMP Reflected Amplification DDoS Attacks
  28. Responsible Disclosure and Academic Freedom, Again
  29. IPv6 Hackers Meeting @ IETF 87, Berlin
  30. BlackBerry 10 USB Modes
  31. Some Notes on Types of Security Controls & the Way they’re Implemented in Enterprise Environments
  32. Ganz Gallien?
  33. Pre-Weekend Goody: TROOPERS13 Video
  34. Reverse Engineering Tools Part 1: BinDiff
  35. EMET v4.0 with New Certificate Trust Feature Released
  36. TROOPERS14 Registration Open + TROOPERS13 Photos Online
  37. Slides & Scripts from Antonios Atlasis’ “Advanced Attack Techniques against IPv6 Networks” Workshop
  38. Microsoft Doc “Best Practices for Securing Active Directory”
  39. Impressions from the Google I/O Con
  40. Troopers13 Videos Online
  41. Analysis of Hypervisor Breakouts
  42. RA Guard (Evasion) – We Stand Corrected
  43. IPv6 Attacks & Pentesting Workshops
  44. RA Guard Support
  45. Presentations from TR13 TelcoSecDay Online
  46. Microsoft Surface RT, a quick insight
  47. BPDU Guard in Virtualized Environments (2)
  48. Summary of Talks Held at HITB 2013 – Day 1
  49. Summary of Talks Held at HITB 2013 – Day 2
  50. Some more Notes on RA Guard Evasion and “undetermined-transport”
  51. 3 Ways for 3-Letter-Agencies to get your Government Proof, Indecipherable Cloud Text Messages
  52. Thoughts on Cloud Governance, Part 1
  53. BPDU Guard: Bringing Down Infrastructures
  54. A Word on Cisco Jabber
  55. TROOPERS13 – The Badge Code
  56. Troopers13 IPv6 Security Summit – First Presentations Available
  57. IPv6 Neighbor Cache Exhaustion Attacks – Risk Assessment & Mitigation Strategies, Part 1
  58. IPv6 Security Problems Related to Extension Headers & Fragmentation
  59. BASTA! Spring 2013
  60. Latest SAP threats, SAP Forensics & BIZEC @Troopers!
  61. VMDK Has Left the Building — Newsletter
  62. Apt
  63. Bluevoxing
  64. Corporate Espionage via Mobile Compromise: A technical deep dive
  65. Paparazzi over IP – Slides
  66. Apple iOS and the history of a workin’ lockscreen… NOT
  67. IPv6 Extension Headers: New Features, and New Attack Vectors
  68. Paparazzi over IP
  69. Mobile Application Testing
  70. TROOPERS13: TelcoSecDay, IPv6 Security Summit and some more Updates
  71. Fragmentation (overlapping) attacks in IPv6. Have we learned our lesson, yet?
  72. Troopers 2013 – Third Round of Talks Selected
  73. Troopers 2013 – Second Round of Talks Selected
  74. Analysis of Rails XML Parameter Parsing Vulnerability
  75. Insider Threats in the Cloud
  76. All Your Calls Are Still Belong to Us – continued

2012 41

  1. All Your Calls Are Still Belong to Us – aka. Hacking Cisco high secure Enterprise VoIP Solution
  2. Troopers 2013 – First Round of Talks Selected
  3. Loki for Windows released
  4. SQL Injection in Cisco MeetingPlace
  5. VMDK Has Left the Building — Denial of Service
  6. Back from DayCon VI
  7. Pytacle alpha1 released!
  8. Update: Microsoft Advisory 2757760 Windows Internet Explorer Vulnerability
  9. Microsoft Advisory 2757760: Windows Internet Explorer Zero-Day Vulnerability
  10. VMDK Has Left the Building – Write Access
  11. Windows Server 2008 R2 BSI-compliance
  12. A First Glance – RA Guard Support in Hyper-V 3.0
  13. DAY-CON VI
  14. The Web Application Firewall Story continues
  15. VMDK Has Left the Building — FAQ
  16. SQL Injection Testing for Business Purposes Part 3
  17. Fuzzing VMDK files
  18. SQL Injection Testing for Business Purposes Part 2
  19. VMDK Has Left the Building – Slides available
  20. VMDK Has Left the Building — Some Nasty Attacks Against VMware vSphere 5 Based Cloud Infrastructures
  21. Releasing dizzy version 0.6
  22. IPv6 Privacy Extensions
  23. Slides from Troopers Telco Sec Day Online
  24. SQL Injection Testing for Business Purposes Part 1
  25. Untrusted code or why exploit code should only be executed by professionals
  26. The 5 Myths of Web Application Firewalls
  27. The Story Continues – Another IPv6 Update
  28. A Comment on Android PIN bypass
  29. Troopers TelcoSecDay
  30. ERP Platforms Are Vulnerable
  31. Applying the ERNW Seven Sisters Approach to VoIP Networks
  32. Sell Your Own Device – A Field Study on Decommissioning of Mobile Devices
  33. Groundhog Day: Don’t Pay Money for Some Else’s Calls, Still
  34. Assesment of Visual Voicemail on iPhones
  35. A Structured Approach to Handling External Connections, Part 1
  36. Don’t Pay Money for Someone Else’s Calls, Again
  37. Diving Into Real-World Security Threats to SAP Systems
  38. ShmooCon, Again
  39. Troopers 2012 – Final round of talks selected
  40. Troopers 2012 – Second Round of Talks Selected
  41. No Connectivity — No Malware Protection

2011 52

  1. Python Library for De- and Encoding of WCF-Binary streams
  2. Use Python for Burp plugins with pyBurp
  3. How Safe is Smart?
  4. Liferay Portlet Shell
  5. ENISA Smartphone Secure Development Guidelines
  6. pytacle preview
  7. Troopers 2012 – First round of talks selected
  8. On the discussion about the iTunes 10.5.1 update
  9. Carriers Converge Their Internet and MPLS Infrastructure: Time to Redo Your Risk Assessment?
  10. A Wrap-up on MFD Security
  11. Call me Snake
  12. “What’s so special about Troopers?”
  13. A Sneak Peek into TROOPERS12
  14. iOS 5, S/MIME, and Digital Certificate Management
  15. Short iCloud Follow-Up
  16. All Your Clouds are Belong to us
  17. iTrust. Or not?
  18. Packetwars, Sun & Skills
  19. Certificate Based Device Authentication with iOS Devices
  20. Broken Trust, Part 2: Applying the Approach to… Dropbox
  21. Today I feel like Stansfield
  22. Appstore security: 5 lines of defence against malware
  23. tsakwaf 0.9.1 released
  24. (Auditing) Remote Access Security in 2011
  25. OS X Security in Corporate Networks
  26. Smart (and Scary) Supply Chain Attack
  27. The Key to your Datacenter
  28. iOS Hardening Configuration Guide
  29. Week of releases – apnbf
  30. Week of releases – gtp_scan-0.7
  31. Week of releases – dizzy
  32. Week of releases – loki-0.2.7
  33. The 5 Myths of Web Application Firewalls
  34. Broken Trust, Part 1: Definitions & Fundamentals + Some More Reflections on RSA
  35. Extracting Data from Very Large Pcap Files – Part 3: Pcap Filtering in the Cloud
  36. Extracting Data from Very Large Pcap Files – Part 2: Results from the Local Lab
  37. HITB Aftermath
  38. Yet another update on IPv6 security – Some notes from the IPv6-Kongress in Frankfurt
  39. Evaluating Operational Feasibility
  40. update for your fuzzing toolkit
  41. Extracting Data from Very Large Pcap Files – Part 1: Tools and Hardware
  42. Once more: hardening is better than patching
  43. Sisters’ Act of MFD Security
  44. RSA: Anatomy of an Attack
  45. TROOPERS11 – Slides available
  46. Reflections on the RSA Break-in
  47. VMSA-2011-0005: VMware vCenter Orchestrator remote code execution vulnerability
  48. IPv6 Security - The Story Continues
  49. IPv6 Security Part 2, RA Guard – Let’s get practical
  50. GTP_SCAN released
  51. Ross Anderson on Responsible Disclosure and Academic Freedom
  52. IPv6 Security Part 1, RA Guard – The Theory

2010 31

  1. Cloud needn’t be daunting | Guide to legal aspects for non-legals
  2. The OSSTMM 3 – What I like about it
  3. Security Benefit & Operational Impact or “the Illusion of Infinite Resources”
  4. Troopers 2011 – First round of speakers selected
  5. Reflections on the vulnerability factor (notes on RRA, part 3)
  6. ERNW Rapid Risk Assessment (RRA), Some Additional Notes, Part 2
  7. Some More Security Research on The nPA AusweisApp
  8. Trust & Control in the Age of Virtualization and the Cloud
  9. Our contribution to the public discussion about the German new ID card (nPA)
  10. ERNW Rapid Risk Assessment (RRA), Some Additional Notes, Part 1
  11. The Case For/Against Split Tunneling
  12. Back from Day-Con
  13. ERNW to contribute to government sponsored research project on telco security
  14. Some recent presentations
  15. Back to the roots
  16. Intel’s Known Good Approach — Chances for a Paradigm Shift?
  17. MS10-063, Prevention
  18. That “new worm”…
  19. “blackberry api to record phone calls”
  20. Just a Quick Note on the Library Loading / Binary Planting Stuff
  21. Research on “Application Virtualization” – Results online now
  22. Try Loki!
  23. Application Virtualization as Browser Security Control?
  24. Spooky Story about Break-In in Military Contractor Facility
  25. News from the Desktop, Edition 2010/07/21
  26. Software Developers Don’t Use Available Security Features
  27. The Emperor’s New Security Indicators
  28. Our Favorite Subject: [It’s all about] Risk
  29. ERNW at NinjaCon (fka PlumberCon)
  30. TROOPERS10 presentation materials finally online
  31. News from Old Friends, Edition 2010/06/09

2009 5

  1. Some reflections on virtualization security, part 1
  2. New SSL/TLS MiTM Attacks
  3. If they had used DLP…
  4. Series on “Outdated Threat Models” – Part 1
  5. Welcome to insinuator.net

2001 2

  1. Datenschutzerklärung
  2. Privacy Policy