RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through
https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html
https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html
Blogspot
CODE WHITE | Blog: RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through
Citrix ShareFile Storage Zones Controller uses a fork of the third party library NeatUpload. Versions before 5.11.20 are affected by a rela...
In this video, we are going to solve wordpress cve-2021-29447 challenge on TryHackMe
This is my first video in english! :) stay tuned! Premieres 9.00 pm.
https://youtu.be/pkooNXGHl7c
This is my first video in english! :) stay tuned! Premieres 9.00 pm.
https://youtu.be/pkooNXGHl7c
YouTube
WordPress CVE-2021-29447 TryHackMe! WalkThrough
In this video, we are going to solve WordPress CVE-2021-29447 challenge on tryhackme!
WordPress versions 5.7, 5.6.2, 5.6.1, 5.6, 5.0.11 are affected to XML eXternal Entity vulnerability where an authenticated user with the ability to upload files in the Media…
WordPress versions 5.7, 5.6.2, 5.6.1, 5.6, 5.0.11 are affected to XML eXternal Entity vulnerability where an authenticated user with the ability to upload files in the Media…
❤1
Advanced MSSQL Injection Tricks
We compiled a list of several techniques for improved exploition of MSSQL injections. All the vectors have been tested on at least three of the latest versions of Microsoft SQL Server: 2019, 2017, 2016SP2.
https://swarm.ptsecurity.com/advanced-mssql-injection-tricks/
#Injection #MSSQL
We compiled a list of several techniques for improved exploition of MSSQL injections. All the vectors have been tested on at least three of the latest versions of Microsoft SQL Server: 2019, 2017, 2016SP2.
https://swarm.ptsecurity.com/advanced-mssql-injection-tricks/
#Injection #MSSQL
PT SWARM
Advanced MSSQL Injection Tricks
We compiled a list of several techniques for improved exploition of MSSQL injections. All the vectors have been tested on at least three of the latest versions of Microsoft SQL Server: 2019, 2017, 2016SP2. DNS Out-of-Band If confronted with a fully blind…
#threatleak #APT
https://www.microsoft.com/security/blog/2021/10/11/iran-linked-dev-0343-targeting-defense-gis-and-maritime-sectors/
https://www.microsoft.com/security/blog/2021/10/11/iran-linked-dev-0343-targeting-defense-gis-and-maritime-sectors/
Microsoft News
Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors
MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on United States and Israeli defense technology companies, Persian Gulf ports of entry, or global maritime transportation companies with…
Check out a new Internet scanner Netlas.io. It's similar to the well-known #Shodan, #Censys and #Zoomeye, but with some advantages. For example, you can search by full server response using regexp.
They are in the alpha-testing period. For this period the service is free. Developers promise some bonuses for active users (access to a paid account for several months after the alpha-testing). They have API and bulk data is also available (free and paid datasets).
The tool really deserves your attention and may be of interest to red team members, cybersecurity and OSINT professionals.
Go to the app and give your feedback!
They are in the alpha-testing period. For this period the service is free. Developers promise some bonuses for active users (access to a paid account for several months after the alpha-testing). They have API and bulk data is also available (free and paid datasets).
The tool really deserves your attention and may be of interest to red team members, cybersecurity and OSINT professionals.
Go to the app and give your feedback!
netlas.io
Netlas: Comprehensive Internet-Wide Scanning & OSINT Platform
Netlas offers Internet scanners, DNS & WHOIS tools, and eASM services for reconnaissance and security assessment. Available as web, console, and API.