Linux Proxy Setup: Comprehensive Guide to Using V2ray and Proxychains for Enhanced Proxy Functionality
Learn Linux proxy setup using v2ray and Proxychains to enable SOCKS/HTTP proxying for most programs. Configure and test for optimized performance.
Category: Network security
Comprehensive Guide to SSTI Vulnerability: Exploitation, Payloads, and Prevention
SSTI vulnerability allows user input to manipulate server-side templates, leading to XSS, file access, or code execution via Python’s magic methods.
Deep Dive into Ice Scorpion: Source Code Analysis, Encryption Methods, and Webshell Insights
A coding test on Ice Scorpion led me to analyze its Java-based AES encryption, dynamic payloads, and source code structure using JD-GUI.
Critical Kibana Vulnerability: Remote Code Execution in Timelion Tool (Fix & Exploit Guide)
Kibana vulnerability in versions
Debugging Malware: In-Depth Analysis of Mining Malware’s Lateral Movement and Exploits
This article continues debugging malware by analyzing its lateral movement tactics, including Masscan use for scanning and exploiting Docker vulnerabilities.
Comprehensive Guide to Docker Security: Preventing Exploits via the 2375 Port Vulnerability
The article highlights a Docker security risk where attackers exploit the open Docker 2375 port for unauthorized access, emphasizing the dangers of improper…
Struts2 Exploit Guide: CVE-2018-11776 Vulnerability and Testing with S2-057
Guide on exploiting the Struts2 vulnerability (S2-057, CVE-2018-11776) using a test environment and URL-encoded payloads.
Exploiting Jenkins Vulnerabilities: Understanding the Stapler Framework and Groovy Sandbox Bypass
Jenkins’ Stapler framework allows URL PATH method invocation, enabling attackers to exploit vulnerabilities, bypass the Groovy sandbox, and execute commands.
Bug Hunting Chronicles: Exploiting Logical Vulnerabilities for Free Car Rides
This article shares a real-world bug-hunting journey, uncovering coupon-related vulnerabilities in a car-sharing app, enabling privilege escalation exploits.
Aria2 Download Tool: Exploring Features, RPC Interface, and File Write Vulnerability
Aria2 download tool is a versatile command-line utility with RPC interfaces, enabling file downloads to any directory, posing a file write vulnerability.
Load More