1 min read
BugCrowd P1 Warrior Swag
The other day I received an email saying I was eligible for some swag for getting my 25th valid P1 submission on BugCrowd. I don't do too much BB hunting these days, and also not…
All posts · Page 3
1 min read
reMarkable Paper Pro Sleep Screen Changing via "HTML Injection"
That's in quotes, because this is seemingly a self HTML injection with little to no security impact, but it does allow for you to change your reMarkable's sleep screen in a…
3 min read
Mura/Masa CMS - SQL Injection CVE-2024-32640
A while back the illustrious team over at Project Discovery wrote about the discovery of an SQLi in Masa/Mura CMS . It's a good writeup, so go check it out for the technical…
3 min read
iOS 16.7.8 Jailbreak on iPhone X
If you're a pentester or bug bounty hunter that is trying to do some iOS mobile application testing, half the battle is getting a phone properly jailbroken so you can proxy HTTP…
4 min read
Hacking RAMADDA, White Box Web Apps, and Bug Bounty Tips
Note: disregard any layout/content/formatting errors as this post was migrated from wordpress to jekyll As mentioned in a previous post, I was the July RotM for the DoD VDP…
1 min read
Department of Defense Researcher of the Month (Year)
I was recently awarded the DoD Researcher of the Month for July, 2023 . Between moving across the country and other hacking duties, I still had time to hammer away at a particular…
1 min read
PyMedusa OS Command Injection
PyMedusa is a well known video library manager that many of us self hosted types may use to organize our libraries. I decided to give it a spin one day and found a classic OS…
1 min read
SQL Injection in Eufy Security Application
I found a textbook SQLi in the Eufy Security application. Don't mind the heavy use of red blocks to redact. The first, normal request. Everything looks fine. Notice the response…
1 min read
Self-Hosted Security Part ? - Poor Rate Limiting in Organizr
Organizr is a self hosted application written in PHP that basically helps you self host other services at your home. It's nifty application with a surprisingly large amount of…
1 min read
Docker Compose - Plex, Jackett, Sonarr, Radarr, Lidarr, Prowlarr, qBittorrent, and PIA
I updated this post to add in prowlarr support. But here is the updated docker compose.yml. version: '3.8' services: pms docker: container name: plex network mode: host hostname:…