1. X
  2. Moritz Abrell
Log inSign up
Moritz Abrell
64 posts
user avatar

Moritz Abrell

@moritz_abrell
IT Security Enthusiast; Penetration Tester; Security Researcher
Joined February 2022
272
Following
377
Followers
RepliesRepliesMediaMedia
  • Pinned
    user avatar
    Moritz Abrell
    @moritz_abrell
    Aug 11, 2023
    Finally published the blog post about abusing @Zoom for remote attacks on endponits: blog.syss.com/posts/zero-tou… It was fun to present this at @BlackHatEvents
    blog.syss.com
    Zero Touch Pwn: Abusing Zoom’s Zero Touch Provisioning for Remote Attacks on Desk Phones
    In this blog post, we describe several vulnerabilities that were discovered during a security analysis of AudioCodes desk phones and Zoom’s Zero Touch Provisioning. We also discuss and demonstrate...
  • user avatar
    Moritz Abrell
    @moritz_abrell
    Jul 22
    Check out our new blog post and PoC video demonstrating how a QNAP NAS can be compromised via non-control-data exploitation. #CVE #Vulnerability #Exploit #QNAP #CyberSecurity
    Image
    Against All Odds: Exploiting a QNAP NAS
    From youtube.com
  • user avatar
    Moritz Abrell
    @moritz_abrell
    Jul 15
    We identified multiple vulnerabilities in @AudioCodes OVOC that can be chained to achieve, root RCE. Read the details here: syss.de/pentest-blog/k… #CyberSecurity #InfoSec #Vulnerability #CVE
    syss.de
    Kritische Schwachstellen in AudioCodes OVOC
    Die Verwaltungs- und Monitoring-Lösung One Voice Operations Center (OVOC) des Herstellers AudioCodes beinhaltet mehrere kritische Schwachstellen.
  • user avatar
    Moritz Abrell
    @moritz_abrell
    Jun 18
    Recent reports mention APTs abusing Microsoft TURN servers for C2 communication. In our new blog post, we break down what’s actually going on, share practical guidance on how to assess TURN servers, and release a tool to perform such tests yourself:
    blog.syss.com
    TURN! - What could possibly go wrong?
    In this blog post, we describe common pitfalls and attack vectors in TURN services. For practical testing and exploitation, we also introduce a new easy-to-use open-source tool called TURNado....
  • user avatar
    Moritz Abrell
    @moritz_abrell
    Feb 12
    Great work and write-up!
    user avatar
    Matthias Deeg
    @matthiasdeeg
    Feb 12
    Today, a tech blog article by my colleague Christian Zäske titled "MeshHacks: Exploiting Linksys Intelligent Mesh from the Internet" concerning six security vulnerabilities in different Linksys routers was published. blog.syss.com/posts/meshhack…

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
Advertisement
Advertisement