Blog

Alle Einträge von modzero.

• PLAYGROUND

  Exploiting SSTI in a Modern Spring Boot Application (3.3.4)

  8. Januar 2025

  Learn how to exploit Server-Side Template Injection (SSTI) in a Spring Boot application using the Thymeleaf templating engine. Special focus will be set on bypassing defenses in newer versions.

• PLAYGROUND

  Tutorial: How we learned to love the doc(umentation)

  14. Oktober 2024

  Just read documentation to get RCE?! Our colleague Theresa designed a tutorial guiding you through an OpenVPN exploit scenario — for you to try at home!

• DISCLOSURE

  Beyond the @ Symbol: Exploiting the Flexibility of Email Addresses For Offensive Purposes

  7. Juni 2024

  We exploited an unauthenticated command injection within the spam filter appliance MailCleaner that can be triggered through a malicious email address.

• DISCLOSURE

  Multiple Vulnerabilities in Poly VoIP Products

  29. Dezember 2023

  We uncovered several vulnerabilities allowing an attacker in the network to take over a Poly VoIP device and turn it into a bug hidden in plain sight.

• COMPANY

  12th Anniversary

  29. April 2023

  Today we celebrate our 12th anniversary.

• DISCLOSURE

  Better Make Sure Your Password Manager Is Secure

  19. Dezember 2022

  We examined the password management solution Passwordstate of Click Studios and identified multiple high severity vulnerabilities.

1 von 3 Vor ⟶