Category: Network security

The article explores exploiting freebies, detailing how gray and black markets abuse referral systems and weak app security for profit.

The user explored beginner-level CTF challenges on the Attack and Defense World platform, solving simple web tasks like header forging, robots.txt, and PHP…

CVE-2016-5734 is a classic RCE vulnerability in PhpMyAdmin (4.3.0-4.6.2) caused by improper `preg_replace` handling, exploitable in PHP

The blog explores LD_PRELOAD, a Linux environment variable for dynamic library loading, demonstrating function hooking by overriding the `rand` function.

A senior used stacked injection to bypass backend restrictions, update an admin password, and gain shell access, showcasing its powerful SQL capabilities.

PostgreSQL versions 9.3-11 allow users with COPY TO/FROM PROGRAM privileges to execute commands, posing a security risk.

The author used a Raspberry Pi for an **frp setup** to enable NAT traversal, leveraging its public IP in a dorm network for…

This article details a Google mirror setup using Nginx reverse proxy, customization with `ngx_http_sub_module`, and load balancing for enhanced performance.

Vulhub simplifies vulnerability testing with Docker, saving time and effort. It’s highly recommended for setting up environments quickly and efficiently.

The website crash was caused by an Nginx misconfiguration creating an infinite loop on port 80. Nginx log analysis revealed the issue.