LinkedIn scam changes

Due to the fact that I found some weird behaviour on LinkedIn, my accounts will not be available any more. See some screens below for more details.

Bug in ab from Apache 2.2.22

Some time ago I found that ab from Apache can be crashed by malformed CLI arguments. Below few notes about it.

Upload shell to phpMyAdmin

Yesterday I was reading about some vulnerabilities found in phpMyAdmin. I decided to create my own poc for uploading shell to PMA.

GeniXCMS SQL Injection quick autopsy

After my last CTF I found one new SQL injection in CMS called GeniXCMS. Below few details about the bug.

Kvasir CTF - Writeup

Man. I played few CTFs in my life. But this one, to be honest, was one of the best I’ve ever tried…;) Have fun.

Automated scans with OpenVAS and Kali - part 3

For all of those who liked my post about automating scans with OpenVas in Kali Linux, below I prepared a new version of the poc. Maybe you will find it useful too. ;)

Few bugs in TestLink

During one of my latest project, I was asked to analyze a security of one web server.

Automated scans with OpenVAS and Kali - continued

Hi

Automated scans with OpenVAS and Kali

I was wondering if we can run (some kind of ) an “automated scan”, out-of-the-box in Kali Linux. Version I used was updated to the latest one (for 26.12.2016, so 2.0). Here we go...

Crontab with iptables

I created a small code in bash to check for any new requests in Apache's logs. Found IP(s) will be blocked by iptables.