Lennaert Oudshoorn
Researcher and CSIRT handler at DIVD. He studies Digital Forensics at the University of Applied Sciences in Leiden.Social media
Icon - lennaert89Icon - Lennaert Oudshoorn
Articles / cases / cves
Blog posts
CSIRT Cases
- DIVD-2021-00030 - GitLab Unauthenticated RCE Flaw
- DIVD-2021-00027 - Apache HTTP 2.4.49 Path Traversal and File Disclosure
- DIVD-2021-00022 - Exchange ProxyShell and ProxyOracle
- DIVD-2021-00012 - Warehouse Botnet
- DIVD-2021-00011 - Kaseya VSA Limited Disclosure
- DIVD-2021-00010 - vCenter Server PreAuth RCE
- DIVD-2021-00006 - SmarterMail
- DIVD-2021-00005 - Pulse Secure PreAuth RCE
- DIVD-2021-00004 - Gelekte phishing gegevens / Leaked phishing credentials
- DIVD-2021-00002 - Kaseya VSA
- DIVD-2021-00001 - Microsoft on-prem Exchange Servers
- DIVD-2020-00014 - SolarWinds Orion
- DIVD-2020-00012 - 49 000 vulnerable Fortinet VPN devices
- DIVD-2020-00011 - Four critical vulnerabilities in Vembu BDR
- DIVD-2020-00010 - wpDiscuz plugin Remote Code Excution
- DIVD-2020-00009 - Pulse Secure VPN enterprise Leak
- DIVD-2020-00008 - 313 000 Wordpress sites scanned
- DIVD-2020-00007 - Citrix ShareFile
CSIRT blog posts
- 05 October 2021 - Apache HTTP 2.4.49 Path Traversal and File Disclosure
- 06 July 2021 - Kaseya Case Update 3
- 03 July 2021 - Kaseya Case Update
- 02 July 2021 - Kaseya VSA Advisory
- 09 May 2021 - Phishing slachtoffer notificatie / Victim notification phishing
- 08 March 2021 - Exchange Zero-day IoC detectie script / Exchange Zero-day detection script
- 30 December 2020 - SolarWinds Orion API authentication bypass
- 17 December 2020 - Het Security Meldpunt wordt DIVD CSIRT / This site will become DIVD CSIRT
- 27 November 2020 - Wordpress binnen het .nl domein geïndexeerd / Wordpress in .nl space indexed
- 15 November 2020 - Lijst met 49 000 kwetsbare Fortinet VPNs / List of 49 000 vulnerable Fortinet VPNs