Founded in April 2011
Joined March 2011
- Tweets 131
- Following 13
- Followers 1,132
- Likes 29
2 Photos and videos
14 Oct 2024
Tutorial: Our colleague Theresa designed a tutorial guiding through an OpenVPN exploit scenario — for you to try at home! modzero.com/en/blog/how-we-l…
3
366
@modzero@infosec.exchange retweeted
20 Jun 2024
Lovely to see the Email RFCs abused to embed a command injection payload in the local-part of the address! Nice work Michael Imfeld & @parzel2
modzero.com/en/blog/beyond_t…
1
41
109
11,278
7 Jun 2024
Shells at midnight: Exploiting the flexibility of Email addresses for offensive purposes.
Today we are publishing a new blog post about our disclosure report on #MailCleaner #CVE-2024-3191: modzero.com/en/blog/beyond_t…
@born0monday@chaos.social will also present at @a41con today.
4
10
889
29 Apr 2024
We identified critical vulnerabilities in MailCleaner. A command injection vulnerability can be exploited by sending an Email. Our report can be found here: modzero.com/en/advisories/mz…
Kudos to chaos.social/@born0monday and chaos.social/@parzel #MailCleaner #CVE-2024-3191 #Infosec
3
8
699
31 Mar 2024
Unfortunately this is necessary:
8532a9e0e49991ffdc3bfe7b728513e254e288a86275c6473e3b42228641e5fa MZ-24-01_8641e5fa.pdf
(and please find us on mastodon as well: infosec.exchange/@modzero)
1
1
3
982
31 Jan 2024
#CVE-2023-4462 Exploits are now available on github:
github.com/modzero/MZ-23-01-…
And please find us on infosec.exchange/@modzero
Today we release the proof-of-concept exploits for the vulnerabilities we identified in HP #Poly VoIP devices. At the #37C3 we presented how these issues allow an attacker with network access to gain RCE and transform your devices into wiretaps.
github.com/modzero/MZ-23-01-…
1
3
412
29 Dec 2023
How do you hack Internet-connected devices? Today, our colleagues @parzel2 and @yonk@chaos.social will present their research at the #37C3 on how to turn a Poly VoIP phone into a wiretap, giving beginners some starting points for own research projects. events.ccc.de/congress/2023/…
2
4
584
@modzero@infosec.exchange retweeted
3 Nov 2023
Joining us for a second year as sponsor is @mod0. Thanks for your continued support!
Register at bsides.berlin for one of the last remaining in-person tickets.
#BSidesBerlin #appsec #infosec #BSides
4
9
920
29 Apr 2023
Happy birthday to us! 🎉
12 years of hacking! Thank you to everyone who helped get this far! 😍
modzero.com/en/blog/12th-ann…
3
18
2,593
19 Dec 2022
Better make sure your password manager is secure -- or someone else will. We found critical security issues in the enterprise password manager Passwordstate that allowed to access passwords and gain a shell -- without any authentication #CVE-2022-3875 modzero.com/modlog/archives/…
1
24
40
12,657
@modzero@infosec.exchange retweeted
16 Nov 2022
We are excited to welcome onboard @mod0 as our Gold Sponsors this year!
Register at bsides.berlin for one of the last remaining in-person tickets.
#BSidesBerlin #appsec #infosec #BSides"
6
12
22 Aug 2022
We found a security issue in the latest @CrowdStrike #FalconSensor. The bug itself isn't worth a tweet as the severity is pretty low. However, we’d like to shed some light on a ridiculous vulnerability disclosure process with CrowdStrike. #CVE-2022-2841 modzero.com/modlog/archives/…
9
136
472
15 Jun 2022
Meet our #infosec-veteran @rexploit at @a41con! He will provide some insights on our #MeetingOwl research during his talk on Friday and is happy to meet-up on the hallway-track.
4
15
3 Jun 2022
MITRE assigned CVE-2022-31463, CVE-2022-31462, CVE-2022-31461, CVE-2022-31460 and CVE-2022-31459 #MeetingOwl
2 Jun 2022
Meeting Owl videoconference device used by govs is a security disaster arstechnica.com/information-… by @dangoodin001
3
@modzero@infosec.exchange retweeted
2 Jun 2022
Meeting Owl videoconference device used by govs is a security disaster arstechnica.com/information-… by @dangoodin001
40
113
Well as some questions start coming up regarding the #MeetingOwl insecurities. Here are some short and clear infos. Details in our report. modzero.com/modlog/archives/…
3
5
7
Meeting Owl Pro: Konferenzeule hat viele Sicherheitslücken #MeetingOwl #Sicherheitslücke glm.io/165766?s
2
9
15