Wilfried Kirsch

Senior Consultant

Wilfried Kirsch has been working as a senior consultant in the field of IT security at softScheck GmbH since 2016. His professional focus includes IT security audits of networks, software, and hardware products as well as the development, testing, and evaluation of security requirements, security concepts and security architectures.

Introducing wsfuzz: A Mutation-Based WebSocket Fuzzer

WebSocket servers power everything from live dashboards to trading platforms and multiplayer games — but their long-lived, stateful nature makes them a notoriously tricky target for traditional …

Apr 14, 2026
2 minutes

scans2any v1.0: Database Projects, Smarter Filters, and Massive Speedups

Since the initial release of scans2any, we have been hard at work making it faster, smarter, and more flexible. Version 1.0 is a major step forward — packed with new features, a completely rewritten …

Mar 5, 2026
4 minutes

Introducing scans2any: A Smarter Way to Merge Network Scans

Handling large-scale network scans can be a nightmare. Whether you’re assessing the security of an enterprise infrastructure or running multiple scanning tools for better coverage, you’re …

Mar 19, 2025
3 minutes

How to use an undocumented ILIAS security vulnerability to gain RCE

ILIAS is a free and open source learning platform which can be used to create and distribute web-based teaching and learning materials. It is often used by universities and companies for e-learning. …

Jun 9, 2020
4 minutes

Testing the 'Netatmo Welcome' Smart Camera – Hardware Hacking

Netatmo Welcome is a smart camera, which is capable of recognizing faces, streaming recordings into the cloud or alerting the owner in case of a burglary. As part of ongoing research into the Internet …

Apr 25, 2019
11 minutes

Testing the 'Netatmo Welcome' Smart Camera

Sep 20, 2018
9 minutes

How we identified a tcpdump vulnerability using cloud fuzzing

Fuzzing is a method to identify software bugs and vulnerabilities. The current development shows a trend to move fuzzing into the cloud, as cloud fuzzing offers a fuzzing speed increase and lots of …

Mar 20, 2017
11 minutes

Microsoft Azure and Cloud-Services unrestricted open for attacks

An unauthorised signature key (created in 2016 — expired 2021) was used as a master key to give unauthorised persons full access to the Azure Cloud and cloud-based services! The perpetrators had …

6 minutes