Burninator Sec

Consider a tablet at a store kiosk where the owner wants to display one particular web page to users. They don't want the user to have a...

This for escalating a low-privileged web shell to a Meterpreter shell. In this example, the Powershell execution policy was changed (using t...

Recently I found a problem with an authentication library. The hyperlink the user clicks to access private content looks something like thi...

The Stimulsoft Reports 2013.1.1600.0 library has code execution built in by design, and can be used to fully compromise the application serv...

It is well known that paywalls can commonly be circumvented by editing the client side code so that the content is no longer hidden. But wha...

... is a bad idea. I was pen testing for a friend, and found that most of the application logic was done client-side, which included a RES...

Ollydebug combined with Pywin32 are great for finding hidden buttons on desktop applications that are invisible but still active. That Pytho...