Collaborate Disseminate
I worked for a company where our TLS Private Key was accidentally leaked to the Internet and it was a big mess. The strategy the security team came up for avoiding this in the future was "be more careful who you trust with access to t… Continue reading TLS Private Key Secured with Hardware Fingerprint
Can path traversal vulnerabilities occur in REST style URLs?
For example: https://x.com/filename/img.jpeg
https://x.com/filename/../../../../../etc/passwd
Does this make sense ?
While I was learning about file upload vulnerability one question came to my mind. What type of file do I use while hunting file upload vulnerability? Do I need to detect which programming language is used on the backend? Php extension fil… Continue reading Choosing file types to test file upload vulnerabilities
I was recently looking at EvilAbigail and making sad faces over how vulnerable my Linux FDE system is, when I started to wonder if there was a similar simple attack for other OSs. I did a bunch of searching but couldn’t even find any infor… Continue reading Is there a technique to execute evil maid for other OSs, that is equivalent to the simplicity of EvilAbigail
I have adware on my computer called imminent and can’t uninstall it from the Windows Control Panel. When I attempt to, the program simply opens itself which leads me to believe that the adware has protected itself against uni… Continue reading How to remove Imminent adware [migrated]