Bitwarden Heist – How to break into password vaults without using passwords 3 years ago
No, but hardware keylogger require physical access.
HN user
RedTeamPT
138 karma
Offical Account of RedTeam Pentesting GmbH
Interested in IT-Security? Join us! https://jobs.redteam-pentesting.de/
Imprint: https://www.redteam-pentesting.de/en/imprint/-imprint
Posts18
Comments18
www.redteam-pentesting.de 1y ago
RE
blog.redteam-pentesting.de 1y ago
BL
blog.redteam-pentesting.de 2y ago
BL
blog.redteam-pentesting.de 2y ago
BL
blog.redteam-pentesting.de 3y ago
BL
blog.redteam-pentesting.de 3y ago
BL
www.redteam-pentesting.de 3y ago
RE
blog.redteam-pentesting.de 4y ago
BL
news.ycombinator.com 4y ago
NE
blog.redteam-pentesting.de 5y ago
BL
blog.redteam-pentesting.de 5y ago
BL
blog.redteam-pentesting.de 5y ago
BL
Actually it is not just an issue with AD design, but the AD design only makes it slightly worse. The underlying issue is that biometrics are not required to retrieve the biometric key from DPAPI and instead of authenticating with Windows Hello, any program could just simply ask DPAPI for the key.
Yes, it requires an attacker in a powerful position with local access. However, it does not require special privileges or techniques that may trigger endpoint security (such as keyloggers or memory dumping). The only requirements are reading a JSON file and making a single Windows API call to retrieve the key.
Yes, it requires an attacker in a powerful position but it does not require physical access. Any program that runs in the user's session (without any special privileges) could have autonomously retrieved the biometric key and decrypted the vault without user interaction and without Bitwarden running.
Not that we are aware of. The security model of Android and iOS also makes it much easier to implement biometric unlock correctly.
Ask HN: Who is hiring? (February 2023) 3 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers. We only conduct hands-on penetration tests, no vulnerability scanners involved.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (December 2022) 4 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (July 2022) 4 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (June 2022) 4 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (April 2022) 4 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security but not required (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (November 2021) 5 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (August 2021) 5 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (July 2021) 5 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (June 2021) 5 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (April 2021) 5 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (March 2021) 5 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (February 2021) 5 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de
Ask HN: Who is hiring? (January 2021) 6 years ago
RedTeam Pentesting GmbH | Penetration Tester | Aachen, Germany | ONSITE | Full-time
Founded in 2004 RedTeam Pentesting helps numerous national and international companies in performing penetration tests for a wide variety of products, networks, websites and applications. By focusing solely on penetration tests RedTeam Pentesting is able to provide high technical skill and impartial advise to our customers.
What we're looking for:
- Analytical thinking and motivation to learn new things
- Experience in offensive IT-security (i.e. Pentests, CTFs, exploit development)
- Knowledge of common networking protocols and topologies
- Ability to work with Linux and Windows
- Scripting/programming skills
- Very good German and good English
- Willingness to relocate to Aachen
- Ideally university degree or comparable education
- Pass a criminal record check
Our website: https://jobs.redteam-pentesting.de