Contribute to S3cur3Th1sSh1t/PowerSharpPack development by creating an account on GitHub.

MacOS kernel memory leak (4 bytes). Contribute to DimitriFourny/cve-2019-6207 development by creating an account on GitHub.

Jump Ahead: Enum – Initial Access – User – Root – Resources TL;DR; To solve this machine, we begin by enumerating open services – finding ports 22 & 80 to be open.…

Hello everyone, today I am going to share CORS misconfiguration can leads to sensitive information disclosure.

introduction Use Object COM ( InternetExplorer.Application ) For Execute using Types Exploit-internet Explorer For Execute ==> in Add On Internet Explorer For Get Execute Code using Lateral Move…

Hello guys!! I am going to share one of the vulnerability I found in a web application.

Write JavaScript alert(1) with Katakana characters only - aemkei/katakana.js

Google Dorking is most important tool and sometimes it leads to bigger results sometimes it lead to remote code execution or XXE injection. Let's check it out, how it gathers the information and leads to XXE injection.



Suppose we are playing...

Earlier this year, a vulnerability was discovered in the Jackson data-binding library, a library for Java that allows developers to easily serialize Java objects to JSON and vice versa, that allowed an attacker to exploit deserialization to achieve Remote…

From electrons to ideas: random thoughts about anything computable

Note before you start.

В статье собраны всем известные методы и предельно извращенные. Эту статью я решил написать после недавнего прочтения поста в блоге Badass JavaScript и решил её...

tl;dr ViewStates in JSF are serialized Java objects. If the used JSF implementation in a web application is not configured to encrypt the ViewState the web a...

In this post we will discuss the design and implementation of peer-to-peer command and control protocols in general, as well as the…