---
title: blog | Johannes Schoenborn
description: Johannes has been active in offensive cybersecurity since 2006. With a Master’s degree in Computer Science and a strong academic foundation, he pushes the boundaries of the field through advanced execution, AI-driven innovation, and next-generation talent development. As a certified OffSec instructor, he is dedicated to training the future leaders of cyber offense.
---

[Skip to the main content.](https://blog.xplt.com/blog/author/johannes-schoenborn/page/1#main-content)

[![Horizontal-1](https://blog.xplt.com/hs-fs/hubfs/Horizontal-1.png?width=250&height=94&name=Horizontal-1.png "Horizontal-1")](https://www.xplt.com)

[![Horizontal3](https://blog.xplt.com/hubfs/Horizontal3.svg "Horizontal3")](https://www.xplt.com)

- [Back to website](https://www.xplt.com)

Toggle Menu

Toggle Menu

- [Back to website](https://www.xplt.com)

[Facebook](https://blog.xplt.com/blog/author/johannes-schoenborn/page/1#0) [Instagram](https://blog.xplt.com/blog/author/johannes-schoenborn/page/1#0) [Linkedin](https://blog.xplt.com/blog/author/johannes-schoenborn/page/1#0) [X](https://blog.xplt.com/blog/author/johannes-schoenborn/page/1#0) [YouTube](https://blog.xplt.com/blog/author/johannes-schoenborn/page/1#0) [Medium](https://blog.xplt.com/blog/author/johannes-schoenborn/page/1#0)

# Johannes Schoenborn

Johannes has been active in offensive cybersecurity since 2006. With a Master’s degree in Computer Science and a strong academic foundation, he pushes the boundaries of the field through advanced execution, AI-driven innovation, and next-generation talent development. As a certified OffSec instructor, he is dedicated to training the future leaders of cyber offense.

<https://www.xplt.com>

[![](https://blog.xplt.com/hs-fs/hubfs/images/iceland_soc.webp?width=1456&height=816&name=iceland_soc.webp)](https://blog.xplt.com/blog/dora-iceland-tiber-is-resilience-test-scope-review-20260906)

 3 min read

#### [DORA in Iceland: what should your next resilience test prove?](https://blog.xplt.com/blog/dora-iceland-tiber-is-resilience-test-scope-review-20260906)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn:](https://blog.xplt.com/blog/author/johannes-schoenborn) Sep 6, 2026, 4:38:09 AM

Your next resilience test should establish whether a credible attacker can cross the dependencies of a critical business function - and whether your team can detect, contain and recover from that path. Iceland’s frontier-AI warning makes that...

[Read More](https://blog.xplt.com/blog/dora-iceland-tiber-is-resilience-test-scope-review-20260906)

[![](https://blog.xplt.com/hs-fs/hubfs/images/hack_crypto_exchange.webp?width=1456&height=816&name=hack_crypto_exchange.webp)](https://blog.xplt.com/blog/uae-crypto-security-vara-cbuae-attack-paths-review-20260906)

 3 min read

#### [UAE crypto security: scope the attack paths beyond smart contracts](https://blog.xplt.com/blog/uae-crypto-security-vara-cbuae-attack-paths-review-20260906)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn](https://blog.xplt.com/blog/author/johannes-schoenborn): Sep 6, 2026, 3:43:11 AM

A smart-contract review cannot establish whether your exchange or custody operation can withstand an attack on identities, approvals and signing...

[Read More](https://blog.xplt.com/blog/uae-crypto-security-vara-cbuae-attack-paths-review-20260906)

[![](https://blog.xplt.com/hs-fs/hubfs/images/ai_pentest.webp?width=1456&height=816&name=ai_pentest.webp)](https://blog.xplt.com/blog/your-most-dangerous-ai-agent)

 1 min read

#### [🇦🇪 Your most dangerous AI agent may not be in the inventory](https://blog.xplt.com/blog/your-most-dangerous-ai-agent)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn](https://blog.xplt.com/blog/author/johannes-schoenborn): Aug 27, 2026, 7:48:27 AM

An AI agent reads mail, updates records, calls tools, alters data. The dangerous one is the agent nobody registered. It inherited permissions from a...

[Read More](https://blog.xplt.com/blog/your-most-dangerous-ai-agent)

[![Beacon Object Files (BOF): Guide für Security-Profis](https://getautoseo.com/storage/hero_images/beacon-object-files-bof-guide-fur-security-profis.jpg?v=23f2b4c06ede)](https://blog.xplt.com/blog/beacon-object-files-bof-guide-fur-security-profis)

 11 min read

#### [Beacon Object Files (BOF): Guide für Security-Profis](https://blog.xplt.com/blog/beacon-object-files-bof-guide-fur-security-profis)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn](https://blog.xplt.com/blog/author/johannes-schoenborn): Aug 2, 2026, 4:35:10 AM

Die Annahme, dass klassische Reflective DLLs in gehärteten Infrastrukturen noch unentdeckt bleiben, ist ein gefährlicher Trugschluss. Moderne EDR-...

[Read More](https://blog.xplt.com/blog/beacon-object-files-bof-guide-fur-security-profis)

[![Red Team Adversary Simulation: Kosten & Faktoren im Check](https://getautoseo.com/storage/hero_images/red-team-adversary-simulation-kosten-faktoren-im-check.jpg?v=c50abe0f5fcd)](https://blog.xplt.com/blog/red-team-adversary-simulation-kosten-faktoren-im-check)

 10 min read

#### [Red Team Adversary Simulation: Kosten & Faktoren im Check](https://blog.xplt.com/blog/red-team-adversary-simulation-kosten-faktoren-im-check)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn](https://blog.xplt.com/blog/author/johannes-schoenborn): Aug 2, 2026, 1:58:06 AM

Ein Red Team Engagement ist keine Ware von der Stange. Wer versucht, Cyber-Resilienz über den günstigsten Stundensatz zu skalieren, zahlt am Ende oft...

[Read More](https://blog.xplt.com/blog/red-team-adversary-simulation-kosten-faktoren-im-check)

[![C2-Implant-Design: Architektur für Red Teaming](https://getautoseo.com/storage/hero_images/c2-implant-design-architektur-fur-red-teaming.jpg?v=1e77f05324fe)](https://blog.xplt.com/blog/c2-implant-design-architektur-fur-red-teaming)

 10 min read

#### [C2-Implant-Design: Architektur für Red Teaming](https://blog.xplt.com/blog/c2-implant-design-architektur-fur-red-teaming)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn](https://blog.xplt.com/blog/author/johannes-schoenborn): Aug 1, 2026, 7:47:13 AM

Die Ära der Standard-Frameworks ist vorbei. Wer heute noch glaubt, mit einer unveränderten Instanz von Cobalt Strike oder Sliver durch ein...

[Read More](https://blog.xplt.com/blog/c2-implant-design-architektur-fur-red-teaming)

[![OffSec Corporate Lizenzen: Beschaffung für Unternehmen](https://getautoseo.com/storage/hero_images/offsec-corporate-lizenzen-beschaffung-fur-unternehmen.jpg?v=452151fe25b8)](https://blog.xplt.com/blog/offsec-corporate-lizenzen-beschaffung-fur-unternehmen)

 10 min read

#### [OffSec Corporate Lizenzen: Beschaffung für Unternehmen](https://blog.xplt.com/blog/offsec-corporate-lizenzen-beschaffung-fur-unternehmen)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn](https://blog.xplt.com/blog/author/johannes-schoenborn): Aug 1, 2026, 12:31:45 AM

Die meisten Unternehmen behandeln die Ausbildung ihrer Pentester wie einen simplen Software-Einkauf und übersehen dabei das strategische Risiko. Wer...

[Read More](https://blog.xplt.com/blog/offsec-corporate-lizenzen-beschaffung-fur-unternehmen)

[![OT-Security für Smart Cities: Infrastrukturen richtig härten](https://getautoseo.com/storage/hero_images/ot-security-fur-smart-cities-infrastrukturen-richtig-harten.jpg?v=54247e01f1af)](https://blog.xplt.com/blog/ot-security-fur-smart-cities-infrastrukturen-richtig-harten)

 10 min read

#### [OT-Security für Smart Cities: Infrastrukturen richtig härten](https://blog.xplt.com/blog/ot-security-fur-smart-cities-infrastrukturen-richtig-harten)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn](https://blog.xplt.com/blog/author/johannes-schoenborn): Jul 31, 2026, 12:48:49 AM

Eine Smart City ist nur so resilient wie ihr schwächstes industrielles Steuerungssystem. Während die IT-Welt meist hochgradig abgesichert ist, bleibt...

[Read More](https://blog.xplt.com/blog/ot-security-fur-smart-cities-infrastrukturen-richtig-harten)

[![OSCP Bootcamp: Experten-Training für deutsche Unternehmen](https://getautoseo.com/storage/hero_images/oscp-bootcamp-experten-training-fur-deutsche-unternehmen.jpg?v=9db4f31144de)](https://blog.xplt.com/blog/oscp-bootcamp-experten-training-fur-deutsche-unternehmen)

 10 min read

#### [OSCP Bootcamp: Experten-Training für deutsche Unternehmen](https://blog.xplt.com/blog/oscp-bootcamp-experten-training-fur-deutsche-unternehmen)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn](https://blog.xplt.com/blog/author/johannes-schoenborn): Jul 30, 2026, 11:57:20 PM

Mehr als 106.000 unbesetzte Stellen im Bereich Cybersecurity bedrohen die Resilienz deutscher Unternehmen, während regulatorische Fristen für DORA...

[Read More](https://blog.xplt.com/blog/oscp-bootcamp-experten-training-fur-deutsche-unternehmen)

[![Smart Contract Audits für Finanzdienstleister: Leitfaden](https://getautoseo.com/storage/hero_images/smart-contract-audits-fur-finanzdienstleister-leitfaden.jpg?v=c34b5e38bf46)](https://blog.xplt.com/blog/smart-contract-audits-fur-finanzdienstleister-leitfaden)

 10 min read

#### [Smart Contract Audits für Finanzdienstleister: Leitfaden](https://blog.xplt.com/blog/smart-contract-audits-fur-finanzdienstleister-leitfaden)

![Picture of Johannes Schoenborn](https://blog.xplt.com/hs-fs/hubfs/team/johannes_avatar.jpg?width=30&name=johannes_avatar.jpg) [Johannes Schoenborn](https://blog.xplt.com/blog/author/johannes-schoenborn): Jul 30, 2026, 12:01:43 AM

Siebzig Prozent der schwerwiegenden Exploits im Jahr 2024 betrafen Smart Contracts, die bereits professionell geprüft waren. Diese Statistik...

[Read More](https://blog.xplt.com/blog/smart-contract-audits-fur-finanzdienstleister-leitfaden)

[1](https://blog.xplt.com/blog/author/johannes-schoenborn/page/1) [2](https://blog.xplt.com/blog/author/johannes-schoenborn/page/2) [3](https://blog.xplt.com/blog/author/johannes-schoenborn/page/3) [Next](https://blog.xplt.com/blog/author/johannes-schoenborn/page/2)

[![Horizontal3](https://blog.xplt.com/hubfs/Horizontal3.svg)](https://www.xplt.com)

- [Impressum](https://blog.xplt.com/de/imprint)
- [Datenschutz](https://blog.xplt.com/data-privacy)

© 2026 Exploit Labs

[X](https://x.com/xplt_labs)[Instagram](http://instagram.com/xpltlabs/)[Linkedin](https://www.linkedin.com/company/exploit-labs/)[YouTube](https://www.youtube.com/@xplt_labs)

Return to top