iiinova — where your digital self keeps evolving

Reposted by Markus Wulftange

Atredis Partners @atredispartners.bsky.social · 12/03/2026

We decided to revisit an old research problem with some new LLM powered tooling. Check out our latest blog post to see how we approached this research, and the new Java deserialization gadget chains it discovered in just two days! www.atredis.com/blog/2026/3/12/findings-gadgets-like-its-2026

atredis.com

Findings Gadgets Like it’s 2026 — Atredis Partners

Java deserialization vulnerabilities have been of interest to me for nearly a decade. In 2016, my team published a blog post titled "What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your…

045

Reposted by Markus Wulftange

codewhitesec.bsky.social @codewhitesec.bsky.social · 23/01/2026

You like technical deep dives into binary exploitation and crazy heap wizardry? Then you'll like our blog post about unauth'ed RCE in NetSupport Manager aka CVE-2025-34164 & CVE-2025-34165 code-white.com/blog/2026-01...

code-white.com

CODE WHITE | Unauthenticated RCE in NetSupport Manager - A Technical Deep Dive

NetSupport Manager is a remote control and support software that we find surprisingly often utilized in sensitive *Operational Technology (OT)* environments, such as production plant networks. Besides...

068

Reposted by Markus Wulftange

Frycos @frycos.bsky.social · 15/11/2025

Just sayin‘ 🤷

042

Reposted by Markus Wulftange

codewhitesec.bsky.social @codewhitesec.bsky.social · 15/09/2025

CODE WHITE proudly presents #ULMageddon which is our newest applicants challenge at apply-if-you-can.com packaged as a metal festival. Have fun 🤘 and #applyIfYouCan

067

Reposted by Markus Wulftange

codewhitesec.bsky.social @codewhitesec.bsky.social · 05/08/2025

We've added a new demo to NewRemotingTricks that makes deploying a MarshalByRefObject (e.g., WebClient) even easier: System.Lazy<T> creates an instance of T on serialization, which is probably more likely to be allowed than a XAML gadget getting through. github.com/codewhitesec...

github.com

GitHub - codewhitesec/NewRemotingTricks: New exploitation tricks for hardened .NET Remoting servers

New exploitation tricks for hardened .NET Remoting servers - codewhitesec/NewRemotingTricks

044

Reposted by Markus Wulftange

codewhitesec.bsky.social @codewhitesec.bsky.social · 14/07/2025

We have reproduced "ToolShell", the unauthenticated exploit chain for CVE-2025-49706 + CVE-2025-49704 used by @_l0gg (on X) to pop SharePoint at #Pwn2Own Berlin 2025, it's really just one request! Kudos to @mwulftange.bsky.social

145

Markus Wulftange @mwulftange.bsky.social · 28/03/2025

I'm getting confused keeping count of them, but we're almost at the double-digit mark! 😅

010

Reposted by Markus Wulftange

codewhitesec.bsky.social @codewhitesec.bsky.social · 28/03/2025

Our crew members @mwulftange.bsky.social & @frycos.bsky.social discovered & responsibly disclosed several new RCE gadgets that bypass #Veeam 's blacklist for CVE-2024-40711 & CVE-2025-23120 + further entry points after @sinsinology.bsky.social & @chudypb.bsky.social 's blog. Replace BinaryFormatter!

096

Reposted by Markus Wulftange

codewhitesec.bsky.social @codewhitesec.bsky.social · 21/02/2025

Ever wondered how Kurts Maultaschenfabrikle got hacked in 2023? The full story, all technical details, out now ;-) apply-if-you-can.com/walkthrough/...

apply-if-you-can.com

Walkthrough 2023

0710