Markus Wulftange
@mwulftange.bsky.social
📤 71
📥 33
📝 1
Principal Security Researcher and Pâtissier at
@codewhitesec.bsky.social
reposted by
Markus Wulftange
codewhitesec.bsky.social
13 days ago
Latest ≠ Greatest? A Retrospective Analysis of CVE-2025-59287 in Microsoft WSUS from our very own
@mwulftange.bsky.social
who loves converting n-days to 0-days
code-white.com/blog/wsus-cv...
loading . . .
CODE WHITE | A Retrospective Analysis of CVE-2025-59287 in Microsoft WSUS
How the n-day research for a suspected vulnerability in Microsoft WSUS (CVE-2025-59287) led to the surprising discovery of a new `SoapFormatter` vulnerability added by the Patch Tuesday updates of Oct...
https://code-white.com/blog/wsus-cve-2025-59287-analysis/
0
7
6
reposted by
Markus Wulftange
codewhitesec.bsky.social
about 2 months ago
CODE WHITE proudly presents
#ULMageddon
which is our newest applicants challenge at
apply-if-you-can.com
packaged as a metal festival. Have fun 🤘 and
#applyIfYouCan
0
5
7
reposted by
Markus Wulftange
codewhitesec.bsky.social
2 months ago
We always love a good challenge. That’s why we’re sponsoring the 10th FAUST CTF. Game on at
2025.faustctf.net
loading . . .
FAUST CTF 2025 | FAUST CTF 2025
FAUST CTF 2025 is an online attack-defense CTF competition run by FAUST, the CTF team of Friedrich-Alexander University Erlangen-Nürnberg
https://2025.faustctf.net/
0
7
6
reposted by
Markus Wulftange
codewhitesec.bsky.social
3 months ago
We've added a new demo to NewRemotingTricks that makes deploying a MarshalByRefObject (e.g., WebClient) even easier: System.Lazy<T> creates an instance of T on serialization, which is probably more likely to be allowed than a XAML gadget getting through.
github.com/codewhitesec...
loading . . .
GitHub - codewhitesec/NewRemotingTricks: New exploitation tricks for hardened .NET Remoting servers
New exploitation tricks for hardened .NET Remoting servers - codewhitesec/NewRemotingTricks
https://github.com/codewhitesec/NewRemotingTricks
0
4
5
reposted by
Markus Wulftange
codewhitesec.bsky.social
4 months ago
We have reproduced "ToolShell", the unauthenticated exploit chain for CVE-2025-49706 + CVE-2025-49704 used by @_l0gg (on X) to pop SharePoint at
#Pwn2Own
Berlin 2025, it's really just one request! Kudos to
@mwulftange.bsky.social
1
4
7
I'm getting confused keeping count of them, but we're almost at the double-digit mark! 😅
add a skeleton here at some point
8 months ago
0
1
0
reposted by
Markus Wulftange
codewhitesec.bsky.social
8 months ago
Our crew members
@mwulftange.bsky.social
&
@frycos.bsky.social
discovered & responsibly disclosed several new RCE gadgets that bypass
#Veeam
's blacklist for CVE-2024-40711 & CVE-2025-23120 + further entry points after
@sinsinology.bsky.social
&
@chudypb.bsky.social
's blog. Replace BinaryFormatter!
0
9
8
reposted by
Markus Wulftange
codewhitesec.bsky.social
9 months ago
Ever wondered how Kurts Maultaschenfabrikle got hacked in 2023? The full story, all technical details, out now ;-)
apply-if-you-can.com/walkthrough/...
loading . . .
Walkthrough 2023
https://apply-if-you-can.com/walkthrough/2023/
0
7
10
you reached the end!!
feeds!
log in