@bombon reported to us a web cache poisoning issue that led to caching of gdToken(Anti-CSRF token) across different Glassdoor pages and in some instances could be chained to perform XSS by caching...

CVE-2022-0847 also known as #Dirtypipe exploit vulnerability.
Max Kellermann, a security researcher, responsibly disclosed the 'Dirty Pipe' vulnerability, stating that it affects Linux Kernel 5.8 and later versions, as well as Android devices. The CVE-2022…

HTTP Protocol Stack Remote Code Execution Vulnerability.

An unauthenticated attacker can send an HTTP request with an "Accept-Encoding" HTTP request header triggering a double free in the unknown coding-list inside the HTTP Protocol Stack (http.sys) to…

API Security Project aims to present unique attack & defense methods in API Security field - cyprosecurity/API-SecurityEmpire

What is #Log4j?
Log4j is a java-based logging framework that is fast, dependable, and flexible. It is a Java logging API that is open source. Simply put, logging is a method of indicating the state of the system at runtime. Logs are used to capture and store…

In this video I would like to showcase "find my location" challenge from the "Foorbar CTF 2022 Web Category"
#foobarCTF #prototype #pollution #bugbounty #hacking #whitebox #analyzing #walkthrough #foobar #2022 #challenge #episode #web #category #ctftime #event…

Nishang - Offensive PowerShell for red team, penetration testing and offensive security. - GitHub - samratashok/nishang: Nishang - Offensive PowerShell for red team, penetration testing and offens...

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the P...

We have seen hundreds, if not thousands, of variations of Zeus in the wild. The main goal of the malware does not vary, yet different functionalities have been added over time. Raul Alvarez takes a detailed look at some of those functionalities and shows…

BurpSuite using the document and some extensions. Contribute to rinetd/BurpSuite-1 development by creating an account on GitHub.

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR) - 0xsp-SRD/mortar

Using a still unpatched vulnerability in the PHP library dompdf (used for rendering PDFs from HTML), we achieved RCE on a web server with merely a reflected XSS vulnerability as entry point.

BurpSuite using the document and some extensions. Contribute to rinetd/BurpSuite-1 development by creating an account on GitHub.

In a time full of ransomware as well as Advanced persistent Thread (APT) incidents the importance of detecting those attacking groups has become increasingly...

The purpose of this blog is to publish articles in Turkish and English on application security.