/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 xvnpw.github.io
Hacking SpEL - xvnpw personal blog
| | swordbytes.com
Overwolf 1-Click Remote Code Execution - CVE-2021-33501
4.7 parsecs away

Travel
| | SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf's Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the "overwolfstore://" URL handler. This vulnerability allows remote unauthenticated attackers to execute arbitrary commands on the underlying operating system that hosts Overwolf's Client Application.
| | forensicitguy.github.io
Analyzing a Log4Shell log4j Exploit from Muhstik | Tony Lambert
3.9 parsecs away

Travel
| In this post I set out to analyze a simple chunk of Log4Shell log4j exploit code to see how it works.