CODE WHITE provides cyber security services with a focus on realism, simulating real-world attacker tactics to help clients understand vulnerabilities and improve their defense strategies.

CODE WHITE

CODE WHITE provides cyber security services with a focus on offensive security methods. The company offers initial assessment and continuous security intelligence services to help organizations understand their vulnerabilities and improve their security posture.

CODE WHITE GmbH | 993 followers on LinkedIn. Finest Hacking | CODE WHITE delivers continuous red teaming, penetration testing and threat intelligence to enterprises.

Principal Security Expert @ CODE WHITE GmbH

Markus Piéton

Principal Security Researcher

Markus Wulftange

CEO @ CODE WHITE GmbH

David Elze

Direktor und Kommanditär bei E. Gutzwiller & Cie, Banquiers

Christoph Gloor

CODE WHITE GmbH

Using Telerik Reporting or Report Server? Patch now to fix 3 RCEs Markus Wulftange found (CVE-2024-8015, CVE-2024-8014, CVE-2024-8048). Details over at https://lnkd.in/dF-hWJ8W Telerik vulnerabilities have a history of being exploited by threat actors according to https://lnkd.in/e5TXiiGg

BeanBeat has been aquired by Kurts Maultaschenfabrikle! You don't know what that means? Head over to https://lnkd.in/e36DJT5p to find out in challenges that, without exception, stem from real-world vulns #uncompromisingRealism #finestHacking

Better patch your Veeam Backup & Replication servers! Full system takeover via CVE-2024-40711, discovered by our very own Dr. Florian Hauser - no technical details from us this time because this might instantly be abused by ransomware gangs https://lnkd.in/dSJKFuu7

We've received insider information from a reliable source that Kurts Maultaschenfabrikle will be expanding and securing their IT in the coming weeks. So either act fast and get ahead on https://lnkd.in/e36DJT5p or wait for the new challenges. Or better yet, do both 🤓 #apply -if-you-can

Teaching the Old .NET Remoting New Exploitation Tricks – read how Markus Wulftange developed novel techniques to exploit Apache log4net's hardened .NET Remoting service: https://lnkd.in/dHuhQ4Qj

Today, CODE WHITE turns 10 🥳 Over the past decade, we've hacked our way through 120+ large corporations' defenses, caused headaches for Blue Teams, and disclosed numerous 0days to vendors. From a few motivated hackers in 2014 to an established team of 50+ today, we continuously safeguard enterprise clients with our Security Intelligence Service and are proud to make a difference 💪 #FinestHacking #PWNage

The specter of .NET Remoting haunts unsuspecting ASP. NET applications even today, whispering valid ObjRefs to those who dare listen. Dive into our latest post to see how these apparitions can lead to remote code execution: https://lnkd.in/dMEWDcZv

We are nominated again for @PortSwigger's "Top 10 Web Hacking Techniques" and we're even in with two entries for 2023: ➡️ Java Exploitation Restrictions in Modern JDK Times ➡️ JMX Exploitation Revisited ✍ Vote now: https://lnkd.in/gzPs_E2M

We're pleased to announce that we donated a total of $29,500 from vulnerability disclosure rewards to charities this year. Thanks to all colleagues who made this possible and hacky christmas everybody!

CODE

COM:CODE-WHITE

CODE WHITE