Wednesday, December 28, 2022

Input-Format-Depedent-XSS: Restrictions Are Your Best Friend!

›
Recently, I had a stubborn form where I attempted XSS in the free text fields, without success. Eventually, I also started looking at other ...
Friday, November 18, 2022

Open Redirects - Payload List vs Manual Testing

›
  In order to bypass a fix for a open redirect a second time, you may need to get creative with your payload list. The original issue was ex...

Captcha Bypass Using Tesseract OCR and Python

›
import cv2 import pytesseract from urllib.request import urlopen import numpy as np from bs4 import BeautifulSoup import requests import url...
Tuesday, July 26, 2022

Twitter Removed the Blocked Account Export - Let's Put it Back!

›
I'm reposting my post from Stack Overflow here (+ the script) in case it gets deleted. Other users have also noticed Twitter's ...
Saturday, April 16, 2022

Reporting Library RCE (Object Chaining) - CVE-2021-42777

›
  Similar to CVE-2020-15865 . However, this one was a little trickier because I could only execute chained C# commands that ultimately ret...
Sunday, January 2, 2022

Post-Exploitation PII Search Across All Databases

›
This is an improvement on the previous PII finder scripts. Since often times production db servers have many databases, this will iterate ov...
Wednesday, July 28, 2021

OnyakTech Comments Pro - Broken Encryption and XSS CVE-2021-33484 and CVE-2021-33483

›
  Broken Encryption / User Spoofing (CVE-2021-33484) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33484   This exploit involves d...