Advisories
Additionally to penetration tests, RedTeam Pentesting conducts research in the area of IT security. Penetration tests may also yield interesting security flaws for the public. After consulting with the customer, those will be published, too, as long as the security of the customer is not compromised. A list of all published security advisories can be found here.
Read moreTalks
Slides from the talk, held at the event “Recent Topics in Cybersecurity” at the Hasso Plattner Institute.
Slides from the talk “Der Bitwarden-Biometrie-Unfall - Wenn ein Pentest nebenher einen kritischen Fehler im Passwort-Manager aufdeckt”, held at the event “Studierende treffen Alumni und Unternehemensexpert:innen” at the FH Aachen University of Applied Sciences.
Slides from the talk “Gezielter Ausnahmezustand – Penetrationstests” held as introduction for a discussion as part of the event Fachschaftstagung Ingenieurswissenschaften of the Cusanuswer k.
Other Publications
The linked paper contains an in-depth description of a novel vulnerability discovered by RedTeam Pentesting. It grant attackers the ability to execute commands on domain-joined Windows computers with the highest privileges (NT AUTHORITY\SYSTEM).