DREHSEC IT Security&Research
  • Blog
  • DREHSEC IT Security&Research
  • dreher.in
  • meme.drehsec.tk

RFC3966: Parsing phone numbers is hard :D

  • Christopher Bleckmann-Dreher

Christopher Bleckmann-Dreher

Dec 17, 2022

Did you know you can hide your payloads in phone numbers? ☎️😱
RFC3966 specifies parameters for valid phone numbers that can contain characters. @securinti discovered that popular libraries are vulnerable and that it can lead to XSS and even ATO!🔥#BugBountyTips #NahamCon2022EU pic.twitter.com/tNUVyZu7Oz

— INTIGRITI (@intigriti) December 17, 2022
The Day I Almost Became a Solar Supervillain

The Day I Almost Became a Solar Supervillain

Picture this: It's a scorching summer day, and I'm sitting in my dimly lit home office, cursing at my air conditioner for choosing the hottest day of the year to break down. As I fan myself with an old magazine, I start daydreaming about having unlimited
Sep 6, 2024 3 min read

Exchange 💔 for now and ever

Drei Monate nach der #Cybersicherheitswarnung des @BSI_Bund zu #verwundbaren #Exchange-Servern (https://t.co/dbWKEr4FpR) sind aktuell noch immer mindestens 42% bzw. 18.000 der Exchange-Server mit offenem #OWA in Deutschland für eine oder mehrere #RCE-#Schwachstellen verwundbar. pic.twitter.com/LxDDaKouBX — CERT-Bund (@certbund) June 18, 2024 Exchange on Premise,
Jun 20, 2024
Bye Bye pcTattletale - When your SHIT hits the fan

Bye Bye pcTattletale - When your SHIT hits the fan

Over the last week, I enjoyed seeing how a stupid stalkerware provider was completely knocked out. It all started on the 22nd of May, when TechCrunch reported about "Spyware found on US hotel check-in computers". A week before the security researcher Eric Daigle contacted TechCrunch about the issue.
May 30, 2024 3 min read
DREHSEC IT Security&Research © 2024
  • memegen docs
Powered by Ghost