2021-05-26 |
Accessibility in Security |
|
|
2021-03-26 |
Thoughts on Threat Modeling |
popcalc |
|
2021-02-28 |
Argument injection and getting past shellwords.escape |
DyslexicAtheist |
|
2021-02-28 |
Universal RCE with Ruby YAML.load (versions > 2.7) |
|
|
2021-02-28 |
CVE-2019-13139 - Docker build code execution |
|
|
2021-02-28 |
Bypassing Docker Authz Plugin and Using Docker-Containerd for Privesc |
|
|
2021-02-28 |
Go get -u CVE-2018-16873 |
|
|
2021-02-28 |
Universal RCE with Ruby YAML.load |
|
|
2021-02-28 |
Dockerfile for creating a git repository to serve CVE-2018-11235 |
|
|
2021-02-28 |
Getting root on a Kubernetes node with gitRepo and CVE-2018-11235 |
|
|
2021-02-28 |
CVE-2018-11235 git RCE |
|
|
2021-02-28 |
CVE-2017-17405 RCE in Ruby's FTP lib |
|
|
2021-02-28 |
Quick win with GraphQL |
|
|
2021-02-28 |
Cross Posting - Other Blog Posts |
|
|
2021-02-28 |
netstat without netstat |
indigodaddy |
|
2021-02-28 |
Polycom HDX Series RCE |
|
|
2021-02-28 |
MSWord - Obfuscation with Field Codes |
|
|
2021-02-28 |
Phishing with OAuth and o365/Azure |
|
|
2021-02-28 |
NAT-to-NAT VPN with WireGuard |
|
|
2021-02-28 |
XXE FTP Server - A {web,ftp}-server for XXE |
|
|
2021-02-28 |
tcpprox - An intercepting TCP proxy |
|
|
2021-02-28 |
Powershell Shells |
|
|
2021-02-28 |
Viewing, modifying and replaying websockets |
|
|
2021-02-28 |
Abusing File Converters |
|
|
2021-02-28 |
Huawei Quidway Password Extraction |
|
|
2021-02-28 |
Mongo Shell escape |
|
|
2021-02-28 |
Hipsters and data |
|
|
2021-02-28 |
Windows Domain Privilege Escalation - Implementing PSLoggedOn in Metasploit (+ a bonus history module) |
|
|
2021-02-28 |
CVE-2020-25695 Privilege Escalation in Postgresql |
arkadiyt |
|