Collaborate Disseminate
A high-severity vulnerability in the data transfer project cURL will be addressed with libcurl and curl updates this week.
The post Patches Prepared for ‘Probably Worst’ cURL Vulnerability appeared first on SecurityWeek.
Continue reading Patches Prepared for ‘Probably Worst’ cURL Vulnerability
Hello there is a API that I have but I need that file’s database can you help me?
Here is how the API works.
$apiUrl = "http://example.com/index.php?id=" . $id;
$curl = curl_init($apiUrl); curl_setopt($curl, CURLOPT_RETURNTRANSFE… Continue reading Dumping database from cURL API
Web Server : Oracle WebLogic 10.35
Machine : Oracle Linux Server 3.8
I was able to partially exploit this CVE. I can execute any command on server using HTTP request and redirecting its output to a file i.e
cat /etc/passwd > /tmp/succes… Continue reading Post Exploitation in Oracle web logic server 10.35 (Oracle Linux Server 3.8)
There are a huge number of products available in the modern world that come with network connectivity now, when perhaps they might be better off with out it. Kitchen appliances …read more Continue reading Remote Code Execution on an Oscilloscope
i have a curl request which fetches response, response comes as plain text, i need to read a value from response.
i have used below method it works using ID, i want to use name of field rather than ID as sequence could change.
response rec… Continue reading pick a value from array [migrated]
My WordPress website received a couple of fake subscriptions to the newsletter. I identified the logs, most of them with the same form as below:
xx.xx.xx.xx example.com – [04/Feb/2023:06:01:42 +0100] "POST / HTTP/1.1" 200 207 &qu… Continue reading How to block a POST curl request
Website speed reductions may be too small to view, but you know it happens. Here’s how to get actionable details on website speed with curl.
The post How to test website speeds with curl appeared first on TechRepublic.
Continue reading How to test website speeds with curl
I’m trying to set up cURL to get data from remote server at any sitaution. I use –tlsv1.3 –tls13-ciphers TLS_CHACHA20_POLY1305_SHA256 –http2 to make it as secure as I can think of, using Windows 11. (tried http3 but cURL said it’s not f… Continue reading is it necessary for cURL to check for CRL in Windows?
How can I fuzz any part of the URL with any strings, append string on middle of the URL or in any part of the URL?
Suppose a URL like this,
https://example.com/Fuzz/hello.html
And I want to add something, on "Fuzz"
So the full U… Continue reading Path fuzzing using curl [closed]
I am trying to connect to a server using SFTP protocol
To connect successfully, I had to do the following from the centos terminal.
sftp -o KexAlgorithms=diffie-hellman-group1-sha1 -o Ciphers=aes256-cbc USER_NAME@IP_ADDRESS
Now I want to … Continue reading Curl how to specify KexAlgorithms and Cipher [migrated]