by Julien Ahrens | Wednesday, September 16, 2015 | Advisory, CVE
by Julien Ahrens | Thursday, September 3, 2015 | Advisory, CVE
I have published another security advisory about a vulnerability, which I have “recently” reported to Yahoo! via their Bug-Bounty program hosted by HackerOne. So this blog post is about the technical details of the CVE-2014-7216 (which is not very...
by Julien Ahrens | Thursday, August 13, 2015 | Certifications
One very common tool among penetration testers is Metasploit, which includes a lot of nice exploits and payloads. The 5th assignment of the SecurityTube Linux Assembly Expert certification is about Metasploit shellcode analyses for Linux/x86 target systems. The...
by Julien Ahrens | Tuesday, July 21, 2015 | General
The Wassenaar Arrangement. Maybe you have already heard about that. With the implementation of this multilateral export control regime on conventional arms, dual-use goods and technologies, security researchers like me could be called lords of...
by Julien Ahrens | Sunday, January 18, 2015 | Certifications
Anti-Virus and Intrusion Detection Systems could become really nasty during a penetration test. They are often responsible for unstable or ineffective exploit payloads, system lock-downs or even angry penetration testers 😉 . The following article is about a...