SSTI in Golang, abuse S3 bucket, and NGINX backdoor
Sep 12, 2021
·
15 min readAbusing JWT key identifier and breaking out of a Docker container
Aug 07, 2021
·
10 min readGetting password from automatic login script of ChromeOS
Jun 26, 2021
·
10 min readUSBCreator LPE on Linux
May 07, 2021
·
9 min readLearn how Azure Pipelines can be abused
May 03, 2021
·
12 min readTunneling with Chisel to deliver a buffer overflow exploit
May 01, 2021
·
8 min readExample of a phishing attack and PyPI package exploitation
Apr 28, 2021
·
10 min readPentesting against simulated AWS S3 Bucket
Apr 24, 2021
·
14 min readSQLi for login bypass and embed webshell to an image file
Apr 09, 2021
·
6 min readExploiting OpenNetAdmin vulnerability and sudo nano
Apr 02, 2021
·
6 min read