Joris van de Vis

@vxunderground I can confirm the exploit works, its not a 0day though but a 4 month old vulnerability.

"Scattered Lapsus$ Hunters (UNC3944)", have released an alleged SAP7 0day exploit onto Telegram. I can't confirm or deny if it's an actual 0day, I have no way to test or confirm anything. However, it is fully weaponized. I've uploaded it to VXUG vx-underground.org/tmp

The premier SAP Security Customer events returns to Rotterdam! See here for details: linkedin.com/posts/jorisvan…

Super proud of the amazing work the team has done!

@seccubus op tv voor het @DIVDnl om het risico van online zonnepanelen te duiden 🤩

Since 12/22, SAP is patching critical vulnerabilities as a result of a research project that I've been doing for some time. Today, my key finding was patched: CVE-2023-28761. An innocent 6.5 bug, that opens the door to abusing all those critical patched bugs through the Internet.

@0xkormorant Dus dat. Gejank voor de bühne, mosterd na de maaltijd, goedkope retoriek, doorzichtig als een glas water en wat al niet meer is.

@PROTECT4S @jvis protect4s.com/2023/03/07/det…

@vah_13 any paper planned on this? 🍿😬

I'm back, guys, Here is a result of a week research: 1. Two SAP LPE, from OS low privileges user to SYSTEM (the bug is an epic fail from SAP, paper after bug fixing) and admin password disclosure 2. Two Anon RCE of Oracle JD Edwards. 3. Anon RCE on SAP NW ;) ❤️💙🧡

Present at @HotelHacker with talks, fun and disclosures.

While he is not working, @jvis is a dedicated volunteer at @DIVDnl Institute for Vulnerability Disclosure. @Cvthof stated that the mission of @DIVDnl is to make the digital world safer. @PROTECT4S is proud to support @DIVDnl mission through a donation of €1000! Link below!

Together with all the other volunteers of @divdnl we've made it in to the @ncsc_nl Wall of Fame 2022! Congratulations, super proud of everyone for all the hard work that went in to making this happen. ncsc.nl/contact/kwetsb…

@PROTECT4S wishes our fellow Chinese friends a Happy Chinese New Year! Secure your SAP systems for your year to be as lovely as the rabbit.Strengthen your SAP security to be as sensitive as a rabbit’s hearing.Detect threats to secure your SAP systems. Contact us! Link below!

@PROTECT4S @jvis protect4s.com/2023/01/17/pro…

Wat een leuk @DIVDnl eindejaarsfeest! Met vuurspuwen en een lokaal kampioenschap server werpen 🤩

🙌🏾 Since I left @SecureAuth, I was looking for new homes to the SAP security open source tools I've been maintaining for the last 10 years. I got to share that we found new communities to host them! 😀 + details: linkedin.com/feed/update/ur… (cont)

Beta.OpenAI.com is fun to play with. From marketing taglines to even Abap code snippets with great outcome. Yet this is just plain wrong 😂 ⬇️ #ibegtodiffer

@vah_13 Similar to the Erpscan GitHub repo?! Or different?

The SAP SSFS decryptor is ready! #sapsecurity #penetrationtesting

Oldie but a goodie pentestpartners.com/security-blog/…