By thezero
19/10/2019
Exploiting an old noVNC XSS (CVE-2017-18635) in OpenStack
OpenStack was using an old version of noVNC affected by a DOM-based XSS that allowed attackers to steal VM tokens and take over VMs.
Min
By smaury
13/04/2019
Exploiting Apache Solr through OpenCMS
Exploiting a known XXE in Apache Solr through OpenCMS handleSolrSelect, to read arbitrary files from the OpenCMS' server.
Min
By polict
10/04/2019
Walkthrough of a 1-click root RCE exploit chain in Nagios XI 5.5.10 by polict: XSS, RCE and local privilege escalation in a single URL click.
Min
By thezero
08/03/2019
WebTech, identify technologies used on websites
Release of WebTech, a tool for RECON during Penetration Tests that scan websites and identify technologies and frameworks in use.
Min
By thezero
04/02/2019
Writeup for the FridaLab challenge with a basic introduction to the Frida toolkit on Android.
Min
By smaury
31/05/2017
SOLUZIONE Seeweb Hacking Contest 2017: Music Of The Atoms
Soluzione del CTF Hacking Contest 2017: Music Of The Atoms di Seeweb. Scopri come risolvere tutte le challenge del #SeewebContest
Min
By polict
26/04/2017
XSSGame by Google at #HITB2017AMS – Writeup
Walkthrough of the Google XSS Game CTF @ Hack in the Box Amsterdam 2017 (HITBAMS2017): 8 challenges to win a Nexus 5X -- find out how we won it! 🤟🏻
Min
By smaury
02/04/2017
SOLUZIONE HiB CTF 2017 Spring Edition
Soluzione del CTF di HackInBo 2017 Spring Edition 2017. Scopri come risolvere tutte le challenge!
Min
By polict
05/10/2016
Ransomware: FUD DLL via JavaScript
Analisi di alcune mail sospette ed estrazione payload ransomware Locky contenuto in dll malevola.
Min
By smaury
20/04/2016
Dimostra la tue abilità da hacker per completare la CTF di Shielder e vincere fantastici premi dal 22 Aprile 2016 13:37 GMT al 06 Maggio 2016 13:37 GMT.
Min