ORW: Open, Read, Write – Pwn A Sandbox Using Magic Gadgets

Posted on 2024-09-18

ORW ROP chain with magic gadgets to pwn a Sandbox

HTB Writeup – Caption

Posted on 2024-09-15

Exploit H2 Database for Java web app & abuse Apache Thrift

Posted on 2024-09-09

SQLPad RCE vulnerability & Froxlor exploit via Chrome remote debugging

Posted on 2024-09-01

Red teaming lateral practise, with ESC4/ESC1 privesc

Posted on 2024-08-25

RCE for CACTI monitor system, Auth bypass for Duplicati backup solution.

Posted on 2024-08-21

Skipper Proxy SSRF, Blazor traffic exploit, Privesc from process monitor

Posted on 2024-08-11

CVE-2023-41425 for WonderCMS RCE with malicious themes module.

Posted on 2024-08-05

Active Directory in Linux? Abuse SSH CA signing

Posted on 2024-07-30

There is no excerpt because this is a protected post.

Posted on 2024-07-29

CVE-2024-32002 for Git RCE, CVE-2024-20656 for Visual Studio PE