Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Don’t Trust This Title: Abusing Terminal Emulators with ANSI Escape Characters- 756

Eviatar Gerzi - CyberArkPosted 4 Years Ago

Uniview PreAuth RCE- 755

SSDPosted 4 Years Ago

CVE-2021-45467: CWP CentOS Web Panel – preauth RCE - 754

OctagonPosted 4 Years Ago

Lack of URL normalization renders Blocked-Previews feature ineffectual- 753

Jub0bsPosted 4 Years Ago

Pre-Auth RCE in Moodle Part II - Session Hijack in Moodle's Shibboleth- 752

Robin Peraglie & Johannes MoritzPosted 4 Years Ago

DOM XSS through ads- 751

Bemodtwz - HackerOnePosted 4 Years Ago

Account Takeover via SMS Authentication Flow- 750

YetAnotherHacker - HackerOnePosted 4 Years Ago

User can pay using archived price by manipulating the request sent to `POST /v1/payment_pages/for_plink`- 749

Gregxsunday - HackerOnePosted 4 Years Ago

Security advisory for the standard library in Rust(CVE-2022-21658)- 748

The Rust Security Response WGPosted 4 Years Ago

Telenot Complex: Insecure AES Key Generation- 747

X41 D-SecPosted 4 Years Ago