Advanced Web Attacks and Exploits -AWAE - Exam Review

OSWE/AWAE Course Overview For people unfamiliar with this course and exam, here is a link to the Offensive security website. I’ve also written about it before, so you can check my post history...

Jul 21, 2021 blog, certifications, coding, webdev, cybersecurity, hacking, infosec, python, webdev

CVE-2021-35959 Stored XSS in Folder Contents on Plone 5-5.2.4

I’ve been testing some new Python-based CMSs and CMS-like software. I’ve heard of Plone before, but I never had a chance to check it out until now. I was a couple of days into my experimenting when...

Jun 30, 2021 CVE, cybersecurity, hacking, security

Malicious qBittorrent Search Plugin: Feature or Bug?

TLDR: Read the code before you install random qbittorent plug-ins. qBittorrent has a feature that allows you to install a search plugin to search for torrents on your favorite sites. These plugins...

Jun 20, 2021 blog, cybersecurity, hacking, python, security

Arbitrary Code Execution in Manuskript < 0.12

Edit: A pull request has been submitted to remove this functionality and to depricate the old pickled settings, which is a wise security decision. Edit: This vulnerability has been assigned CVE-20...

Jun 20, 2021 blog, coding, CVE, cybersecurity, hacking

Offensive Security AWAE/OSWE

I recently was enrolled in the Offensive Security Advanced Web Attacks and Exploits course. This is the newer version of the course, and it leads to the Offensive Security Web Expert Certification....

Mar 25, 2021 blog, bug bounty, bugbounty, certifications, cybersecurity, hacking