James Server Security Analysis: Host and Port Discovery, Vulnerability Assessment
An attack exploited a James Server RCE vulnerability (version 2.3.2) on 172.16.33.35. James Server credentials and an SSH password were obtained, granting access….
Category: Network security
Comprehensive Guide to Scanning and Exploiting vsftpd 3.0.3: Ports, Services, and Vulnerability Analysis
The scan on host 172.16.33.62 revealed open ports, including vsftpd 3.0.3 on 21/tcp, with no 0-day vulnerabilities found. Attempts to exploit FTP and…
Host Discovery and Vulnerability Detection: A Comprehensive Guide to Scanning and Testing Techniques
1. Host Discovery 1.1. Host Discovery The target machine GAARA specifies the attack IP, so the Host Discovery process is not involved. 1.2….
Comprehensive Network Security Investigation: Webshell Threat Detection and Analysis
In a network security investigation, webshell alerts led to identifying IPs accessing compromised URLs, revealing backdoor and password details.
Exploiting Apache httpd 2.4.29: Bypassing Vulnerabilities for Root Access
The Apache httpd 2.4.29 server was assessed for vulnerabilities. Despite exploits and privilege escalation attempts, root access was eventually gained using a modified…
Comprehensive Guide to Asset and Vulnerability Discovery in CMS Made Simple
A vulnerability assessment of a CMS Made Simple (CMSMS) 2.2.13 site revealed the admin password via the MySQL database. Exploiting a file upload…
Comprehensive Guide to WordPress Asset Discovery and Vulnerability Analysis
A WordPress site at 172.16.33.108 was compromised. Vulnerabilities in the mail-masta and reflex-gallery plugins, and a site-editor LFI were exploited. An attacker gained…
XXL-JOB Security Vulnerability and Exploit Mitigation Guide
XXL-JOB is a task scheduling platform where default accessToken settings can lead to security risks; modifying it prevents server control by attackers.
YouTang Times Vulnerability Exposes Security Risks for 400,000 Users
The YouTang Times vulnerability exposed nearly 400,000 users’ funds. Multiple other vulnerabilities, including weak passwords and SQL injection, affected various Chinese organizations, compromising…
Mastering Webshell Path Detection: A Step-by-Step Guide to Exploiting and Securing EMLOG Vulnerabilities
Download the target environment to find the webshell path: C:\phpStudy_pro\WWW\content\plugins\tips\shell.php. The attacker’s IP is 192.168.126.1.
Load More