RedTeam Pentesting

Wir haben eine Mission: Werde eine*r von uns! 👩‍🚀👨‍🚀

Finde gemeinsam mit uns die Schwachstellen von morgen 🔑 und manchmal auch welche aus längst vergangener Zeit 🗝️

Mehr erfahrt ihr unter jobs.redteam-pentesting.de 🚀

#infosec #cybersecurity #aachen #hiring #ITJobs #Pentesting

🦛🦛🦛Microsoft patched PetitPotam this October: EFSR now only resolves local paths. This means WebDAV to LDAP Coercion is fixed!

Remaining methods for clients are WSP (coercing SMB) and PrinterBug (coercing RPC), but both cannot be relayed to LDAP 💀💀💀

📢Our CEO Patrick Hof joined a panel discussion at the AHK debelux event "Building Resilience in Cybersecurity" on Oct. 13th 2026.

His takeaway: Regulation alone does not ensure security: systems must be tested in practice and vulnerabilities actively sought out.

🚨 Rocket Remote Desktop encrypts users' saved credentials with their Windows SIDs. Every user with access to a Windows client on which the client software is installed has access to the database, where these credentials are saved. No fix available yet.

redteam-pentesting.de/en/advisories/…

🚀Our tool keycred for KeyCredentialLinks and Shadow Credential attacks now works with updated domain controllers again!

It turns out, Microsoft violated their own specs.

Try it out: github.com/RedTeamPentest…