Category: Network security

Publicly available Jetbrains activation servers can activate all Jetbrains products. Use Shodan to find IPs or a script to update servers weekly.

On March 31, 2022, a CVE-2022-22965 Spring Framework RCE vulnerability was disclosed, allowing remote backdoor file writing and configuration changes.

The MySQL protocol transmits data in plaintext, except for encrypted passwords. Using Wireshark, packet forging, and ARP spoofing, session hijacking is possible.

The Zyxel firewall vulnerability (CVE-2022-30525) allows unauthenticated remote command injection via the management HTTP interface, enabling arbitrary code execution.

CVE-2022-24706 affects Apache CouchDB. Despite 1.28M installations, only 1400 are vulnerable. Exploits require default settings and expose port 5984.

Confluence Server vulnerability: An OGNL injection flaw in Confluence Server and Data Center allows unauthenticated code execution. Update to the latest version.

Reproducing vulnerabilities is crucial in security learning. Vulhub and Shodan help address pain points. Tips for using Shodan and a Python script for…

Grafana, an open-source monitoring tool, has vulnerabilities CVE-2021-39226 and CVE-2021-43798 that allow unauthorized access and directory traversal. Upgrade recommended.

Bashfuscator is a Python 3 tool for obfuscating Bash scripts, making them harder to understand. It supports one-click obfuscation, compilation, and encryption.

Showdoc is an online API and technical documentation tool for IT teams, improving communication efficiency. It has over 10k GitHub stars but has…