tag

coding

10 posts

October 17, 20223 min read

Webmin CVE-2022-0824 RCE in Golang

I've continued my quest to translate exploits into Golang. Here is an RCE in Webmin due to broken access controls. Please see the following links for more information.…

CVE GOLANG hacking POC coding cybersecurity infosec offensive security offsec

September 30, 20222 min read

CrushFTP DoS

I was doing a security review of CrushFTP , a multi platform FTP application, and I came across a DoS stemming from lack of validation of user input. Originally, I thought there…

crushftp cyber dos hacking infosec offsec coding security

September 29, 20222 min read

Golang Proof of Concept Exploit for CVE-2021-44077: PreAuth RCE in ManageEngine ServiceDesk Plus < 11306

Once again, I decided to rewrite an exploit in Golang. Once again, I did thirty seconds of searching to find if someone had already written this one in Golang. Once again, I did…

CVE-2021-44077 cyber cybersecurity GOLANG hacking infosec MANAGEENGINE offsec POC SERVICEDESK ZOHO coding CVE security

August 26, 20221 min read

A Quick AWS Lambda Reverse Shell

Let's say you're doing a pentest, and you run across access to AWS Lambda. I recently learned you can get a persistent shell (for 15 minutes, at least) via Lambda, which seemed…

aws cloud lambda python reverse shell coding cybersecurity hacking linux security

February 17, 20222 min read

MotionEye Config Info Disclosure

This was given CVE 2022 25568. As mentioned in my previous posts here and here , I've done a little digging into the conditions that are required for the MotioneEye config file to…

CVE cyber hacking infosec self hosting coding webdev cybersecurity

December 22, 20211 min read

Sharpshooter, Python2.7, and Pip2 Installation

Newer versions of Linux may not come with any sort of Python 2 installed. I recently wanted to run Sharpshooter , which is a "payload creation framework for the retrieval and…

cyber cybersecurity hacking infosec linux offsec OSEP certifications coding offensive security

November 25, 20211 min read

Learning Go By Writing a POC for Gitlab CVE-2021-22205

I've been wanting to learn Go, and I learn by doing, so I decided to write a POC for CVE 2021 22205, which is fairly straightforward RCE in Gitlab that dropped a few weeks ago. My…

coding CVE cybersecurity golang hacking

November 9, 20213 min read

Tesla Solar, Powerwalls, Docker, Python, and Crypto Mining

I had Tesla solar panels and Powerwalls installed several weeks ago. I currently don't have permission to operate (PTO) from my electricity provider, which means I can't ship any…

coding docker linux powerwall python solar tesla

October 9, 20217 min read

Hacking MotionEye/MotionEyeOS

Getting Started with MotionEye MotionEye is an open source, web based GUI for the popular Motion CLI application found on Linux. I've known of the Motion command line app for…

cyber cybersecurity hacking infosec motioneye offsec python self hosting shodan coding security

June 20, 20213 min read

Arbitrary Code Execution in Manuskript < 0.12

A pull request has been submitted to remove this functionality and to depricate the old pickled settings, which is a wise security decision. Edit: This vulnerability has been…

coding CVE cybersecurity hacking

← all tags