New Writeup❗️
Date: Wed, 30 Mar 2022 22:01:22 GMT
Title: Pwning 3CX Phone Management Backends from the Internet
Link: https://medium.com/p/d0096339dd88
Date: Wed, 30 Mar 2022 22:01:22 GMT
Title: Pwning 3CX Phone Management Backends from the Internet
Link: https://medium.com/p/d0096339dd88
Medium
Pwning 3CX Phone Management Backends from the Internet
After an unplanned journey with Microsoft Exchange the month before, I started to look for new interesting vulnerability research targets…
New Writeup❗️
Date: Wed, 12 Jan 2022 21:52:34 GMT
Title: Searching for Deserialization Protection Bypasses in Microsoft Exchange (CVE-2022–21969)
Link: https://medium.com/p/bfa38f63a62d
Date: Wed, 12 Jan 2022 21:52:34 GMT
Title: Searching for Deserialization Protection Bypasses in Microsoft Exchange (CVE-2022–21969)
Link: https://medium.com/p/bfa38f63a62d
Medium
Searching for Deserialization Protection Bypasses in Microsoft Exchange (CVE-2022–21969)
This story begins with a series of fails, but why? That is because of my special relationship with the Microsoft Exchange codebase…
New Writeup❗️
Date: Mon, 11 May 2020 18:02:35 GMT
Title: Another Zoho ManageEngine Story
Link: https://medium.com/p/7b472f1515f5
Date: Mon, 11 May 2020 18:02:35 GMT
Title: Another Zoho ManageEngine Story
Link: https://medium.com/p/7b472f1515f5
Medium
Another Zoho ManageEngine Story
This is another white-box analysis story about a product from Zoho Corp (see my older blog post on OpManager SQLi). Since several critical…
New Writeup❗️
Date: Sun, 29 Dec 2019 22:10:39 GMT
Title: Yet Another .NET deserialization
Link: https://medium.com/p/35f6ce048df7
Date: Sun, 29 Dec 2019 22:10:39 GMT
Title: Yet Another .NET deserialization
Link: https://medium.com/p/35f6ce048df7
Medium
Yet Another .NET deserialization
This is my second post on white-box analysis but for another technology stack and vulnerability category: .NET deserialization leading to…
New Writeup❗️
Date: Sun, 13 Oct 2019 06:50:31 GMT
Title: Finding SQL injections fast with white-box analysis — a recent bug example
Link: https://medium.com/p/ca449bce6c76
Date: Sun, 13 Oct 2019 06:50:31 GMT
Title: Finding SQL injections fast with white-box analysis — a recent bug example
Link: https://medium.com/p/ca449bce6c76
Medium
Finding SQL injections fast with white-box analysis — a recent bug example
On September 13rd I submitted a bug for Zoho’s OpManager product. It was fixed quite fast by the development team and a new version 12.4…
🤡1
New Writeup❗️
Date: Sat, 15 Aug 2020 19:46:53 GMT
Title: A Country Hijacking
Link: https://medium.com/p/3180c24a14b5
Date: Sat, 15 Aug 2020 19:46:53 GMT
Title: A Country Hijacking
Link: https://medium.com/p/3180c24a14b5
Medium
A Country Hijacking
Hello All,
New Writeup❗️
Date: Tue, 12 Mar 2019 23:03:42 GMT
Title: Hack Your Form-New vector for Blind XSS
Link: https://medium.com/p/b7a50b808016
Date: Tue, 12 Mar 2019 23:03:42 GMT
Title: Hack Your Form-New vector for Blind XSS
Link: https://medium.com/p/b7a50b808016
Medium
Hack Your Form-New vector for Blind XSS
Hello Pentesters,
New Writeup❗️
Date: Tue, 12 Mar 2019 22:55:12 GMT
Title: Escalating SSRF to RCE
Link: https://medium.com/p/f28c482eb8b9
Date: Tue, 12 Mar 2019 22:55:12 GMT
Title: Escalating SSRF to RCE
Link: https://medium.com/p/f28c482eb8b9
Medium
Escalating SSRF to RCE
Escalating SSRF to RCE in AWS Elastic Beanstalk
New Writeup❗️
Date: Sun, 13 Jan 2019 17:56:21 GMT
Title: Hack Your Form — New vector for Blind XSS
Link: https://medium.com/p/da48eebd68a
Date: Sun, 13 Jan 2019 17:56:21 GMT
Title: Hack Your Form — New vector for Blind XSS
Link: https://medium.com/p/da48eebd68a
Medium
Hack Your Form — New vector for Blind XSS
Hello Pentesters,
New Writeup❗️
Date: Sun, 15 Apr 2018 17:01:54 GMT
Title: From InfoDisc to RCE to SOP Bypass
Link: https://medium.com/p/2d956b58796e
Date: Sun, 15 Apr 2018 17:01:54 GMT
Title: From InfoDisc to RCE to SOP Bypass
Link: https://medium.com/p/2d956b58796e
Medium
From InfoDisc to RCE to SOP Bypass
Hello Penetration Testers!
New Writeup❗️
Date: Thu, 23 Jun 2022 17:46:01 GMT
Title: Register form vulnerable to Stored XSS!
Link: https://medium.com/p/8259445df727
Date: Thu, 23 Jun 2022 17:46:01 GMT
Title: Register form vulnerable to Stored XSS!
Link: https://medium.com/p/8259445df727
Medium
Register form vulnerable to Stored XSS!
Hey Community !!
New Writeup❗️
Date: Fri, 11 Mar 2022 18:50:55 GMT
Title: Rate Limit Bypass at Readme.com
Link: https://medium.com/p/35c4fb0c7f85
Date: Fri, 11 Mar 2022 18:50:55 GMT
Title: Rate Limit Bypass at Readme.com
Link: https://medium.com/p/35c4fb0c7f85
Medium
Rate Limit Bypass at Readme.com
Hey Community !!
New Writeup❗️
Date: Thu, 03 Dec 2020 11:17:35 GMT
Title: भारतेन्दु युग
Link: https://medium.com/p/46c0d79434b1
Date: Thu, 03 Dec 2020 11:17:35 GMT
Title: भारतेन्दु युग
Link: https://medium.com/p/46c0d79434b1
Medium
भारतेन्दु युगीन पत्र पत्रिकाएं एवं हिंदी प्रदीप
2 ब्राह्मण पटरीका — https://drive.google.com/file/d/13KKhhCarkK3__c5boaEGVlf96-Kag_B0/view?usp=sharing
New Writeup❗️
Date: Tue, 05 Feb 2019 05:39:23 GMT
Title: How I hacked 40,000 user accounts of Microsoft using 2FA bypass(outlook.live.com).
Link: https://medium.com/p/13258785ec2f
Date: Tue, 05 Feb 2019 05:39:23 GMT
Title: How I hacked 40,000 user accounts of Microsoft using 2FA bypass(outlook.live.com).
Link: https://medium.com/p/13258785ec2f
New Writeup❗️
Date: Sat, 29 Feb 2020 11:06:30 GMT
Title: SSH: More than secure shell
Link: https://medium.com/p/fc6709d545bc
Date: Sat, 29 Feb 2020 11:06:30 GMT
Title: SSH: More than secure shell
Link: https://medium.com/p/fc6709d545bc
Medium
SSH: More than secure shell
SSH is a protocol for authenticating and encrypting remote shell sessions.
New Writeup❗️
Date: Sun, 23 Feb 2020 18:03:50 GMT
Title: 15 Amazing Uses For Toothpaste You Never Thought About
Link: https://medium.com/p/d0f2030feb88
Date: Sun, 23 Feb 2020 18:03:50 GMT
Title: 15 Amazing Uses For Toothpaste You Never Thought About
Link: https://medium.com/p/d0f2030feb88
Medium
15 Amazing Uses For Toothpaste You Never Thought About
When you think of toothpaste, you obviously think of brushing your teeth — I mean, that’s what it’s intended for isn’t it? Well, what if I…
New Writeup❗️
Date: Sun, 23 Feb 2020 00:00:00 GMT
Title: Daredevil dies after crash-landing rocket ( on video )
Link: https://medium.com/p/98a1153ec43c
Date: Sun, 23 Feb 2020 00:00:00 GMT
Title: Daredevil dies after crash-landing rocket ( on video )
Link: https://medium.com/p/98a1153ec43c
Medium
Daredevil dies after crash-landing rocket ( on video )
A US daredevil has been killed during an attempted launch of a homemade rocket in the Californian desert, reports say.
New Writeup❗️
Date: Tue, 31 Dec 2019 10:50:07 GMT
Title: Best novels of 2019 to read in 2020!
Link: https://medium.com/p/4ad097ff9a4e
Date: Tue, 31 Dec 2019 10:50:07 GMT
Title: Best novels of 2019 to read in 2020!
Link: https://medium.com/p/4ad097ff9a4e
Medium
Best novels of 2019 to read in 2020!
As “Bibliophiles — Book Worm / Lover of Reading” I know that nothing is better than a great reading session with my favorite drink, and I…
New Writeup❗️
Date: Tue, 31 Dec 2019 09:56:26 GMT
Title: Best films of 2019 … the year of glory for American cinema
Link: https://medium.com/p/9e48fa92ae9
Date: Tue, 31 Dec 2019 09:56:26 GMT
Title: Best films of 2019 … the year of glory for American cinema
Link: https://medium.com/p/9e48fa92ae9
Medium
Best films of 2019 … the year of glory for American cinema
Hours and a decade ends and another new begins, and 2019 will bid us farewell after we enjoyed films from all over the world, especially…