/explore
|
You are here 
|
highon.coffee | ||
| | | | |
eapolsniper.github.io
[AI summary] The blog post discusses a critical security vulnerability in Splunk Universal Forwarders, allowing attackers to exploit weak passwords and API access to gain SYSTEM or root privileges on networked systems. |
|
| | | | | ||
| | | | |
leakfree.wordpress.com
Recently, we audited the source code of theHumhubas part of a larger auditand uncovered some serious vulnerabilities. Apart from the usual suspects like unrestricted file uploads, sql injection and XSS, one vulnerability stood out in particulardue to the fact that no reference of public exploits abusing this type of bug could be found. Forlack of... |
|
| | | | | ||
| | | | |
blog.ikuamike.io
Difficulty Release Date Author Beginner 2 Mar 2020 Zayotic Summary In this box, we first perform ldap injection on the web application to bypass the login page. Then we are able to read local files by abusing a local file inclusion vulnerability with php base64 filter. From one of the php files we get ldap credentials that we used to authenticate to ldap and dump entries. From the entries we get a base64 encoded password that we could use to ssh into the machine. |
|
| | | | | ||
| | | | |
alexdebrie.com
API Gateway custom authorizers are a great way to separate auth logic from business logic in serverless applications. Learn the ins and outs of how to use them here. |
|
| | | |||
