News

• 04/01/2021
  RedTeam Pentesting has a new member: Peter Ott reinforces the team as a new penetration tester.
• 04/01/2021
  Our third blog post deals with the exploitation of a PHP deserialization vulnerability, using the Yii PHP framework as an example.
• 02/12/2020
  Our new blog post covers an introduction and common use cases for the tool monsoon which we developed.
• 02/11/2020
  Today we released our new blog. The first post describes analysis and exploitation of a vulnerability in Apache Tomcat.
• 21/10/2020
  New advisory released: Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton.

Publications

• 05.07.2019
  „Pentesting”, Freitagsseminar, III. Physikalisches Institut B, Slides (English)
• 24.06.2019
  „Pentesting in der Praxis”, Bonn-Rhein-Sieg University of Applied Sciences, Slides (German)
• 04.12.2018
  „Sicherer Umgang mit Daten auf SSDs”, IT-Sicherheitstag NRW, Slides (German)
• 23/05/2018
  „Sicheres Löschen von Daten auf SSDs”, 8. IT-Forensik Workshop, FH Aachen, Slides (German)
• 26/10/2017
  “Physical Security – Wenn Türen zu Firewalls werden”, Chair for IT Security Infrastructures, Slides (German)