Sep 12, 2021
·
15 min readSSTI in Golang, abuse S3 bucket, and NGINX backdoor
Aug 07, 2021
·
10 min readAbusing JWT key identifier and breaking out of a Docker container
Jun 26, 2021
·
10 min readGetting password from automatic login script of ChromeOS
May 07, 2021
·
9 min readUSBCreator LPE on Linux
May 03, 2021
·
12 min readLearn how Azure Pipelines can be abused
May 01, 2021
·
8 min readTunneling with Chisel to deliver a buffer overflow exploit
Apr 28, 2021
·
10 min readExample of a phishing attack and PyPI package exploitation
Apr 24, 2021
·
14 min readPentesting against simulated AWS S3 Bucket
Apr 09, 2021
·
6 min readSQLi for login bypass and embed webshell to an image file
Apr 02, 2021
·
6 min readExploiting OpenNetAdmin vulnerability and sudo nano