By the power of truth, I, while living, have conquered the universe - /OS(C(P|E)|EE)/ - Tweets are my own! - Red teamer @codewhitesec | @dhn@infosec.exchange
0x41424344
Joined April 2009
- Tweets282
- Following336
- Followers735
- Likes1.4K
dhn retweeted
Happy announcement: My colleague and me will present a talk at hardwear.io NL 2026, "Vulnerabilities That Get Under Your Skin: Targeting the World’s Best-Selling Infusion Pumps". 100% human-brain VR 😛
dhn retweeted
You like technical deep dives into binary exploitation and crazy heap wizardry? Then you'll like our blog post by @0xor_solo about unauth'ed RCE in NetSupport Manager aka CVE-2025-34164 & CVE-2025-34165 code-white.com/blog/2026-01-…
dhn retweeted
Our 2024 applicants challenge is officially #roasted: the full BeanBeat × Maultaschenfabrikle walkthrough is now online. Unwrap the write-up at apply-if-you-can.com/walkthr… and revisit the hacks that escalated from cold brew to full breach.
dhn retweeted
Latest ≠ Greatest? A Retrospective Analysis of CVE-2025-59287 in Microsoft WSUS from our very own @mwulftange who loves converting n-days to 0-days code-white.com/blog/wsus-cve…
dhn retweeted
CODE WHITE proudly presents #ULMageddon which is our newest applicants challenge at apply-if-you-can.com/ packaged as a metal festival. Have fun 🤘 and #applyIfYouCan
dhn retweeted
Ten days left. The warm-up fades. Maultaschen were soft. Bean Beats were dark and burnt. But the beats of #ULMageddon will be brutal! #applyIfYouCan
dhn retweeted
Yes, we're beating a dead horse. But that horse still runs in corporate networks - and quietly gives attackers the keys to the kingdom. We're publishing what’s long been exploitable. Time to talk about it. #DSM #Ivanti code-white.com/blog/ivanti-d…
dhn retweeted
My blog post on some vulns in GFI MailEssentials
frycos.github.io/vulns4free/…
dhn retweeted
Ever wondered how Kurts Maultaschenfabrikle got hacked in 2023? The full story, all technical details, out now ;-) apply-if-you-can.com/walkthr…
dhn retweeted
BeanBeat has been aquired by Kurts Maultaschenfabrikle! You don't know what that means? Head over to apply-if-you-can.com to find out in challenges that, without exception, stem from real-world vulns #uncompromisingRealism #finestHacking
dhn retweeted
Finally, the second part of the blog post where we go from Windows Paged Pool Overflow to SYSTEM shell starting from Low Integrity 3sjay.github.io/2024/09/20/W… have a great weekend everyone ;)
First part which covers the bug and finishes off with code allowing us for a controlled overflow in the Paged Pool is up:
3sjay.github.io/2024/09/08/W…
dhn retweeted
First part which covers the bug and finishes off with code allowing us for a controlled overflow in the Paged Pool is up:
3sjay.github.io/2024/09/08/W…
dhn retweeted
We've received insider information from a reliable source that Kurts Maultaschenfabrikle will be expanding and securing their IT in the coming weeks. So either act fast and get ahead on apply-if-you-can.com or wait for the new challenges. Or better yet, do both 🤓
dhn retweeted
Today, CODE WHITE turns 10 🥳 Over the past decade, we've hacked our way through 120+ large corporations' defenses, caused headaches for Blue Teams and disclosed numerous 0days to vendors. Proudly grown from a few motivated hackers in 2014 to an established team of 50+ today 💪
Sometimes, the Certsrv endpoint of a CA is configured to run on TCP port 443. Worth checking for ESC8 even though the most common reason for binding the endpoint to 443 is EPA. Certipy's check was only on TCP port 80; the PR will include both ports. github.com/ly4k/Certipy/pull…
dhn retweeted
Participated in @codewhitesec's challenge "Kurts Maultaschenfabrikle" for the first time, thanks for this amazing CTF and the swag box!
And yes, the logo on the bottle light's up :p
#maultaschenfabrikle #ctf
dhn retweeted
Thank you @codewhitesec for the interesting challenges and the great swag pack 😎 #Maultaschenfabrikle
