New Writeup❗️
Date: Sat, 21 Jan 2023 13:44:04 GMT
Title: WPWN -Offsec Playground
Link: https://medium.com/p/77e6fa8e179a
Date: Sat, 21 Jan 2023 13:44:04 GMT
Title: WPWN -Offsec Playground
Link: https://medium.com/p/77e6fa8e179a
Medium
WPWN -Offsec Playground
#wordpress #nmap #rce #privesc
New Writeup❗️
Date: Tue, 17 Jan 2023 12:28:50 GMT
Title: Инъекция SSH ключа в Google Cloud Compute Engine [Google VRP]
Link: https://medium.com/p/950e77d19da4
Date: Tue, 17 Jan 2023 12:28:50 GMT
Title: Инъекция SSH ключа в Google Cloud Compute Engine [Google VRP]
Link: https://medium.com/p/950e77d19da4
Medium
Инъекция SSH ключа в Google Cloud Compute Engine [Google VRP]
Эта статья является первой в серии статей о багах, которые были обнаружены авторами в Google Cloud в течение 2022 года.
New Writeup❗️
Date: Fri, 13 Jan 2023 16:10:16 GMT
Title: How I Find RCE Via Race Condition
Link: https://medium.com/p/58c9f3186de4
Date: Fri, 13 Jan 2023 16:10:16 GMT
Title: How I Find RCE Via Race Condition
Link: https://medium.com/p/58c9f3186de4
Medium
How I Find RCE Via Race Condition
Some time ago, one of my friend asked to me testing a sales web. This web built using wordpress. how i find rce in this web? let’s do it.
New Writeup❗️
Date: Fri, 30 Dec 2022 15:40:16 GMT
Title: Write-Up Máquina Library — Crowsec
Link: https://medium.com/p/e1e86d747cff
Date: Fri, 30 Dec 2022 15:40:16 GMT
Title: Write-Up Máquina Library — Crowsec
Link: https://medium.com/p/e1e86d747cff
Medium
Write-Up Máquina Library — Crowsec
Obviamente este Write-Up contém toda a resolução da máquina, recomendo fortemente que você tenha resolvido ela ou se travou em alguma…
New Writeup❗️
Date: Sun, 26 Feb 2023 19:17:55 GMT
Title: How To Prevent XSS Vulnerabilities In Rich Text Editors
Link: https://medium.com/p/2128ecb85f7f
Date: Sun, 26 Feb 2023 19:17:55 GMT
Title: How To Prevent XSS Vulnerabilities In Rich Text Editors
Link: https://medium.com/p/2128ecb85f7f
Medium
How To Prevent XSS Vulnerabilities In Rich Text Editors
Cross-Site Scripting (XSS) attacks are one of the most common web application security threats today. An XSS vulnerability can be exploited…
New Writeup❗️
Date: Sun, 26 Feb 2023 10:30:47 GMT
Title: Google Dork list for XSS
Link: https://medium.com/p/bbd997a58e28
Date: Sun, 26 Feb 2023 10:30:47 GMT
Title: Google Dork list for XSS
Link: https://medium.com/p/bbd997a58e28
Medium
Google Dork list for XSS
Cross-Site Scripting (XSS) is a common vulnerability found in web applications that allows an attacker to inject malicious code into a web…
New Writeup❗️
Date: Sat, 25 Feb 2023 04:33:37 GMT
Title: XSS Popular Payloads for Bug Hunting
Link: https://medium.com/p/1c34b45a190a
Date: Sat, 25 Feb 2023 04:33:37 GMT
Title: XSS Popular Payloads for Bug Hunting
Link: https://medium.com/p/1c34b45a190a
Medium
XSS Popular Payloads for Bug Hunting
XSS or Cross-Site Scripting is one of the most common vulnerabilities found in web applications, and it allows attackers to inject…
New Writeup❗️
Date: Thu, 23 Feb 2023 13:02:47 GMT
Title: Blind XSS Execution From Feedback Form (Finding Can give you $1000+ Bounty)
Link: https://medium.com/p/acedb1f18de0
Date: Thu, 23 Feb 2023 13:02:47 GMT
Title: Blind XSS Execution From Feedback Form (Finding Can give you $1000+ Bounty)
Link: https://medium.com/p/acedb1f18de0
Medium
Blind XSS Execution From Feedback Form (Finding Can give you $1000+ Bounty)
Hello, Hunters. I know You are here because you are struggling or want to advance in your career. Believe me, things take time. Be…
New Writeup❗️
Date: Wed, 22 Feb 2023 23:28:52 GMT
Title: How I found DOM-Based XSS on Microsoft MSRC and How They Fixed it
Link: https://medium.com/p/8b71a6020c82
Date: Wed, 22 Feb 2023 23:28:52 GMT
Title: How I found DOM-Based XSS on Microsoft MSRC and How They Fixed it
Link: https://medium.com/p/8b71a6020c82
Medium
How I found DOM-Based XSS on Microsoft MSRC and How They Fixed it
Microsoft MSRC ฺBlog site: Dom-based XSS Vulnerability
New Writeup❗️
Date: Wed, 22 Feb 2023 13:02:41 GMT
Title: XSS via X-Forwarded-Host header (Small Bounty of 150$)
Link: https://medium.com/p/133295afbc48
Date: Wed, 22 Feb 2023 13:02:41 GMT
Title: XSS via X-Forwarded-Host header (Small Bounty of 150$)
Link: https://medium.com/p/133295afbc48
Medium
XSS via X-Forwarded-Host header (Small Bounty of 150$)
Hello, Hunters. I know You are here because you are struggling or want to advance in your career. Believe me, things take time. Be…
New Writeup❗️
Date: Tue, 21 Feb 2023 09:56:30 GMT
Title: XSS (cross-site scripting)- explained in layman's term
Link: https://medium.com/p/add92c05ad0c
Date: Tue, 21 Feb 2023 09:56:30 GMT
Title: XSS (cross-site scripting)- explained in layman's term
Link: https://medium.com/p/add92c05ad0c
Medium
XSS (cross-site scripting)- explained in layman's term
In this blog, you will learn
New Writeup❗️
Date: Mon, 20 Feb 2023 15:13:54 GMT
Title: Intigriti February Challenge Writeup
Link: https://medium.com/p/42e593fafb21
Date: Mon, 20 Feb 2023 15:13:54 GMT
Title: Intigriti February Challenge Writeup
Link: https://medium.com/p/42e593fafb21
Medium
Intigriti February Challenge Writeup
URL:Intigriti-February-Challenge
New Writeup❗️
Date: Wed, 15 Feb 2023 10:12:26 GMT
Title: SSTI (Server-side template injection) to RCE
Link: https://medium.com/p/3f0a325a074e
Date: Wed, 15 Feb 2023 10:12:26 GMT
Title: SSTI (Server-side template injection) to RCE
Link: https://medium.com/p/3f0a325a074e
Medium
SSTI (Server-side template injection) to RCE
Server-side template injection (SSTI) is a vulnerability that arises when untrusted user input is included in a server-side template. If an…
New Writeup❗️
Date: Tue, 14 Feb 2023 05:14:56 GMT
Title: HTML Injection to RCE
Link: https://medium.com/p/fa28f8b6f436
Date: Tue, 14 Feb 2023 05:14:56 GMT
Title: HTML Injection to RCE
Link: https://medium.com/p/fa28f8b6f436
Medium
HTML Injection to RCE
HTML injection, also known as cross-site scripting (XSS), is a type of vulnerability that allows attackers to inject malicious code into a…
New Writeup❗️
Date: Fri, 23 Dec 2022 12:09:09 GMT
Title: precious — hack the box
Link: https://medium.com/p/6f25eda474ce
Date: Fri, 23 Dec 2022 12:09:09 GMT
Title: precious — hack the box
Link: https://medium.com/p/6f25eda474ce
Medium
precious — hack the box
first thing we do is run nmap scan
New Writeup❗️
Date: Tue, 22 Nov 2022 11:43:49 GMT
Title: Lab: Remote code execution via web shell upload
Link: https://medium.com/p/daf4013075a2
Date: Tue, 22 Nov 2022 11:43:49 GMT
Title: Lab: Remote code execution via web shell upload
Link: https://medium.com/p/daf4013075a2
Medium
Lab: Remote code execution via web shell upload
Lab: Remote code execution via web shell upload
New Writeup❗️
Date: Sat, 19 Nov 2022 08:07:01 GMT
Title: Hacking Web-Server Using Images …
Link: https://medium.com/p/8a6b7ce43adf
Date: Sat, 19 Nov 2022 08:07:01 GMT
Title: Hacking Web-Server Using Images …
Link: https://medium.com/p/8a6b7ce43adf
Medium
Hacking Web-Server Using Images …
So you must be wondering how is this possible to compromise a web server using an image ???
New Writeup❗️
Date: Tue, 08 Nov 2022 20:02:34 GMT
Title: Protecting Applications From RCE with a Single Function: a Cheat Sheet
Link: https://medium.com/p/e33f36b1ff54
Date: Tue, 08 Nov 2022 20:02:34 GMT
Title: Protecting Applications From RCE with a Single Function: a Cheat Sheet
Link: https://medium.com/p/e33f36b1ff54
Medium
Protecting Applications From RCE with a Single Function: a Cheat Sheet
In this blog, we walk you through a way to protect your web applications from Remote Code Execution (RCE) with a single function. Join us!
New Writeup❗️
Date: Sun, 06 Nov 2022 13:01:37 GMT
Title: Protecting Web Applications from Remote Code Execution (RCE): a Short Guide
Link: https://medium.com/p/7c8f587ade5d
Date: Sun, 06 Nov 2022 13:01:37 GMT
Title: Protecting Web Applications from Remote Code Execution (RCE): a Short Guide
Link: https://medium.com/p/7c8f587ade5d
Medium
Protecting Web Applications from Remote Code Execution (RCE): a Short Guide
Read this blog and learn how to protect your web applications from one of the most prominent threats in the cyber space — RCE.
New Writeup❗️
Date: Tue, 27 Sep 2022 18:08:11 GMT
Title: CVE-2022–36934: An integer overflow in WhatsApp leading to remote code execution in an established…
Link: https://medium.com/p/e0fc4e2cd900
Date: Tue, 27 Sep 2022 18:08:11 GMT
Title: CVE-2022–36934: An integer overflow in WhatsApp leading to remote code execution in an established…
Link: https://medium.com/p/e0fc4e2cd900
Medium
CVE-2022–36934: An integer overflow in WhatsApp leading to remote code execution in an established video call
Written by: anshul vyas