HackerOne
@HackerOne
11.4K subscribers
647 photos
31 videos
79 files
2.77K links
Community : @Sec0x01
@Bug0x
Download Telegram
About
Blog
Apps
Platform
Join
HackerOne
11.4K subscribers
HackerOne
https://youtu.be/pbRk8sCvcsg
YouTube
Analyze, Reverse and Exploit CVE-2021-40444
In this video, we dive into Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444).
[English subtitles added]
#cve202140444 #debugging #reversing #exploit #analyze #0day #CVE 202140444
Related Links:
https://github.com/aydianosec/CVE2021-40444…
2.2K viewsAmir Kiani, 
HackerOne
https://www.offensive-ot.com/2021/09/16/aprendiendo-a-leer-y-escribir-pero-dispositivos-industriales-parte-1/
Ciberseguridad Industrial | Offensive OT -
Aprendiendo a Leer y Escribir pero… dispositivos industriales (Parte 1) - Ciberseguridad Industrial | Offensive OT
Aprendiendo a Leer y Escribir pero... dispositivos industriales (Parte 1). Utilizaremos el simulador ModBus que permitiría emular un laboratorio de pruebas...
2.23K viewsAdel, 
HackerOne
https://securitylab.github.com/advisories/GHSL-2021-097-apache-dubbo
GitHub Security Lab
GHSL-2021-097: Pre-Auth Unsafe Java Deserialization in Apace Dubbo - CVE-2021-37579
Apache Dubbo is vulnerable to pre-Auth Unsafe Java Deserialization
2.23K viewsAdel, 
HackerOne
https://youtu.be/N8-N-gERO9w
YouTube
ebpf linux kernel exploit | cve-2021-3490 poc
what is ebpf linux kernel?
It is a kernel technology (starting in Linux 4.x) that allows programs to run without having to change the kernel source code or adding additional modules. It is a sort of lightweight, sandbox virtual machine (VM) inside the Linux…
2.26K viewsAdel, 
HackerOne
2.23K viewsAmir Kiani, 
HackerOne
2.24K viewsAmir Kiani, 
HackerOne
5 RCEs in npm for $15,000
robertchen.cc/blog
2.21K viewsAmir Kiani, 
HackerOne
NIST’s National Cybersecurity Center of Excellence (NCCoE) has released a draft of NIST Special Publication (SP) 1800-32, Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources - https://csrc.nist.gov/publications/detail/sp/1800-32/draft
CSRC | NIST
NIST Special Publication (SP) 1800-32 (Withdrawn), Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy…
The Industrial Internet of Things, or IIoT, refers to the application of instrumentation and connected sensors and other devices to machinery and vehicles in the transport, energy, and other critical infrastructure sectors. In the energy sector, distributed…
2.16K viewsAdel, 
HackerOne
RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through

https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html
Blogspot
CODE WHITE | Blog: RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through
Citrix ShareFile Storage Zones Controller uses a fork of the third party library NeatUpload. Versions before 5.11.20 are affected by a rela...
2.4K viewsAdel, 
HackerOne
https://youtu.be/jimGQpftYWs
YouTube
Inside hacker solution | CVE-2019-20372 PoC | NGINX http request smuggling
#NGINX http request smuggling : cve-2019-20372 NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted…
2.84K viewsAdel, 
HackerOne
https://youtu.be/OfPb3sfqBUs
YouTube
Analyzing and Reversing Ransomware - (4/5)
In this video, we are going to solve Ransomware CTF that was a challenge at the HTB Business CTF 2021 from the Forensics category. [English subtitles added]
#Ransomware #analyzing #Hackthebox #Business #CTF #reversing #Forensics #python #powershell #visualbasic…
2.59K viewsAmir Kiani, 
HackerOne
2.57K viewsAmir Kiani, 
HackerOne
https://youtu.be/yZgYIaSm2ZE
YouTube
Android System Modification
A small demonstration of Android System Image and its content.

Resources:
1. Gist by tonio-nucci
https://gist.github.com/tonio-nucci/8ff2894c42c6320a50dc4b70b32a716a
2. https://github.com/mirsamantajbakhsh/AndroidSystemModification
3. https://mstajbakhsh.ir/android…
2.23K viewsMir Saman Tajbakhsh, 
HackerOne
https://youtu.be/-mdK5HSRiQU
YouTube
Apache Druid vulnerability | CVE-2021-25646 PoC
What is apache druid?
Druid is a column-oriented, open-source, distributed data store written in Java. Druid is designed to quickly ingest massive quantities of event data, and provide low-latency queries on top of the data.
CVE-2021-25646 : Apache Druid…
2.2K viewsAdel, 
HackerOne
https://youtu.be/5Ijwa7wtf2Y
2.34K viewsAdel, 
HackerOne
2.33K viewsAmir Kiani, 
HackerOne
https://medium.com/@mazoka777/two-factor-authentication-bypass-4c814627f8c3
Medium
Two-Factor Authentication Bypass
What is 2fa ?
2.67K viewsAmir Kiani, 
HackerOne
2.9K viewsAmir Kiani, 
HackerOne
https://hacktify.in/bugbounty/
3.71K viewsAmir Kiani, 
HackerOne
In this video, we are going to solve wordpress cve-2021-29447 challenge on TryHackMe
This is my first video in english! :) stay tuned! Premieres 9.00 pm.
https://youtu.be/pkooNXGHl7c
YouTube
WordPress CVE-2021-29447 TryHackMe! WalkThrough
In this video, we are going to solve WordPress CVE-2021-29447 challenge on tryhackme!
WordPress versions 5.7, 5.6.2, 5.6.1, 5.6, 5.0.11 are affected to XML eXternal Entity vulnerability where an authenticated user with the ability to upload files in the Media…
❤1
3.16K viewsAdel, 
HackerOne
2.63K viewsAmir Kiani,