Shell hiding in image files
zam One day, we noticed strange GET request towards our JBoss server: From the request above, you’ll quickly noticed that this attack leveraging Apache Struts vulnerability from CVE-2017-5638. The request tried…
hack
VNCViewer for Metasploit payload on Mac OS X
When working with VNC payloads, the Metasploit framework need vncviwer to be installed on the machine. Since Apple includes a VNC Client by default with OSX lets create a simple…
How to SSH bruteforce on Linux/Mac OS X
SSH is an acronym for Secure Socket sHell, which provides a secure connection access to a remote machine. By using this SSH Bruteforce tool, you can test security stuff like…
SQLI – buyamotor[dot]com[dot]my
Almost a decade ago I left this things.. Target: http://www.buyamotor.com.my/motor.php?cat=53Host IP: 42.1.60.81Current DB: buyamoto_buymData Bases: information_schema buyamoto_buym Data Found:admin_email | admin_id | admin_user | [email protected] | 1 | admin |…
CSRF in SpiceFuse Shoutbox (MyBB)
bagi sape2 yg ade forum yg berasaskan MyBB, dan yg menggunakan SpiceFuse Shoutbox, baik korg baca bnd ni.. sbb ade bnd yg menarik kat sini.. 🙂 bnd ni Johnburn dr…
darkMSSQL tutorial
Hari ini aku nak tunjukkan macam mana cara menggunakan darkMSSQL.py… benda ni digunakan untuk MSSQL database yang ade error..Aku jarang jumpa database MSSQL yang ada error..Kalau jumpa pun, nasib2 je..…