Postauth RCE for Ilias 5

Hi. This time we'll talk about one RCE bug I found during a reasearch for a pentest done 3 weeks ago. Webapp we'll try this time is called Ilias (tested: v5.0.3). Here we go..

PostAuth LFI for Oracle Weblogic

Lost hope? Lost job? No-war-yes... :) "And until"...

Crashing Aspire 9.5

Hi :) This time I decided to publish few details from one of the fuzzing I runned for a while some about 2 weeks ago. Below you'll find 3 bugs I found for Aspire 9.5 software. Here we go...

Crashing QA-CAD (2019 A.04)

Hi ;) This time I tried to fuzz QA-CAD (2019 A.04). Below you will find more details about it. Here we go...

Creating Simple File Format Fuzzer

Hi ;) This time I decided to present a short draft for the small and simple 'file format fuzzer' I created some time ago. Here we go...

(Mass) Hunting for domains

Hi ;) During one of the CTFs I decided to check a domain enumeration tool called massdns. Below you'll find few details and my notes about it. Here we go...

Enlil.py - example module

Hi :) last time we talked about wooper.py and enlil.py projects I started some time ago. Since last few weeks I was wondering "what if" we'll combine results from both "proof-of-concepts". Below you'll find few notes about it. Here we go...

Enlil - Unfinished Sympathy

Hi :) This time I decided to check one of my old codes (called enlil). Few details you'll find below. Here we go...

Wooper.py - first results

Hi ;) Today we'll continue last post about "wooper.py updates". Below you'll find quick results for first scan of Wordpress plugin called WPide(2.5). Here we go...

Wooper.py - Reborn

Hi :) I decided to rewrite wooper.py script presented some time ago in the blog. Below you'll find few initial details and a friendly skeleton ;). Here we go...