Collaborate Disseminate
I’m penetration testing a website for a friend. It runs on WP and has directory indexing enabled. I would like to provide a PoC of why this is an issue, but I’ve never used Wordpress so I don’t know what a sensitive directory… Continue reading What are sensitive WordPress site directories
I use a windows 10 to receive UDP packets or pings from another computer which runs Win/Mac/Linux.
I default, I turn off the firewall to receive pings or packets.
I prefer not to turn off the firewall but having the previou… Continue reading Windows firewall settings to receive UDP and pings
I will attempt to explain the situation and question clearly.
If I am ambiguous, please let me know and I will try to explain better.
Assume that I control both client and server. We have access to the source.
The client a… Continue reading Possible to add new cert, remove old cert, force renegotiation without dropping connection?
I’ve been learning more about subdomain takeovers and trying to find other risks of them.
I have a fairly simple question; what can you do with access to a website via a crossdomain.xml file?
(ex. you takeover a.example2.co… Continue reading What can I do with crossdomain.xml access to a website
I’ve been learning more about subdomain takeovers and trying to find other risks of them.
I have a fairly simple question; what can you do with access to a website via a crossdomain.xml file?
(ex. you takeover a.example2.co… Continue reading What can I do with crossdomain.xml access to a website
First off, this is in information security because the request may be vulnerable if I can figure out how to run it.
Second, the actual issue. I intercepted and copied a post request on an unnamed social media site that I may… Continue reading How to send a post request where it is neccesary to be logged in?
I found a reflected XSS vulnerability that parses HTML code, but if you put a closing bracket the filter deletes it.
Is there any code for a proof of concept that I can run without any closing brackets (>)?
Thanks
Continue reading XSS Vectors that work with no closing brackets?
Assuming a hypothetical scenario:
The hospital radiology dictation system is down. The transcriptionist works off-site. The radiologist has the ability to record an audio file on his phone or laptop computer and email this t… Continue reading Is sending an audio file with a portion of an accession number a violation of HIPAA
I’m very curious as to why the format is xxxxxxxx-xxxx-4xxx-zxxx-xxxxxxxxxxxx? Why is the 4 there, and why is z always either 8, 9, A, B? And also, why the different string lengths between the dashes? What is the rationale be… Continue reading Why does UUID v4 have the format xxxxxxxx-xxxx-4xxx-zxxx-xxxxxxxxxxxx? [closed]
For buffer overflow attacks, my exam review says that there are drawbacks to choosing canary values at compile time vs runtime. Why would it be better to choose the canary value at runtime?
Continue reading Why should canary values be chosen at runtime instead of compile time?