RedTeamPT
The Guide to Windows Coercion Techniques in 2025
Advisory: Docusnap inventory files encrypted with static key
Critical Vulnerabilities in WatchGuard SSO Agent
Back to School – Exploiting a Remote Code Execution Vulnerability in Moodle
Re:Bitwarden Heist – How to Break into Password Vaults Without Using P...
on Wednesday January 03, 2024 @12:04PM (#38856477)
No, but hardware keylogger require physical access.
Re:Bitwarden Heist – How to Break into Password Vaults Without Using P...
on Wednesday January 03, 2024 @11:39AM (#38856126)
Actually it is not just an issue with AD design, but the AD design only makes it slightly worse. The underlying issue is that biometrics are not required to retrieve the biometric key from DPAPI and instead of authenticating with Windows Hello, any program could just simply ask DPAPI for the key.
Re:Bitwarden Heist – How to Break into Password Vaults Without Using P...
on Wednesday January 03, 2024 @11:36AM (#38856080)
Yes, it requires an attacker in a powerful position with local access. However, it does not require special privileges or techniques that may trigger endpoint security (such as keyloggers or memory dumping). The only requirements are reading a JSON file and making a single Windows API call to retrieve the key.
Re:Bitwarden Heist – How to Break into Password Vaults Without Using P...
on Wednesday January 03, 2024 @11:30AM (#38856007)
Yes, it requires an attacker in a powerful position but it does not require physical access. Any program that runs in the user's session (without any special privileges) could have autonomously retrieved the biometric key and decrypted the vault without user interaction and without Bitwarden running.
Re:Bitwarden Heist – How to Break into Password Vaults Without Using P...
on Wednesday January 03, 2024 @11:26AM (#38855935)
Not that we are aware of. The security model of Android and iOS also makes it much easier to implement biometric unlock correctly.
Bitwarden Heist – How to Break into Password Vaults Without Using Passwords
Better DSAFER Than Sorry – An Attacker's Overview of Ghostscript
Re:Ask HN: Who is hiring? (February 2023)
on Wednesday February 15, 2023 @06:49AM (#34802586)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers. We only conduct hands-on penetration tests, no vulnerability scanners involved.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (December 2022)
on Monday December 05, 2022 @03:16AM (#33862867)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (July 2022)
on Monday July 11, 2022 @03:05AM (#32053148)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (June 2022)
on Thursday June 02, 2022 @08:36AM (#31594025)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (April 2022)
on Monday April 04, 2022 @02:25AM (#30903798)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security but not required (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (November 2021)
on Wednesday November 10, 2021 @02:27AM (#29172044)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (August 2021)
on Monday August 02, 2021 @11:15AM (#28037651)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (July 2021)
on Monday July 05, 2021 @03:35AM (#27735488)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (June 2021)
on Wednesday June 02, 2021 @03:54AM (#27366096)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (April 2021)
on Tuesday April 06, 2021 @05:05AM (#26709690)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Wholesome Curl Calls for Your Blog Posts
Re:Ask HN: Who is hiring? (March 2021)
on Wednesday March 03, 2021 @03:50AM (#26326111)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (February 2021)
on Wednesday February 03, 2021 @02:34AM (#26011451)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Re:Ask HN: Who is hiring? (January 2021)
on Wednesday January 06, 2021 @05:22AM (#25656369)
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de