0SPwn Blogs
Series

Web Application Security

This series focuses on Web Application Security. Whether it be a basic XSS, or a complicated deserialisation vulnerability, this section will cover all web app related research!

Articles in this series

How CVE-2022-24785 MomentJS Path Traversal Works: Detailed Exploit Guide

Jul 5, 20244 min read

CVE-2022-24785 Description Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal...

How CVE-2022-24785 MomentJS Path Traversal Works: Detailed Exploit Guide

Recon, Vulnerable Code Assessment, Exploit Automation, Bypasses & Patching all one. (Python, PHP)

Nov 7, 202120 min read

Hello everyone, hope you are all well! Today we will be continuing our Python Hacking Series, this time however we will not be covering basics but...

Recon, Vulnerable Code Assessment, Exploit Automation, Bypasses & Patching all one. (Python, PHP)

0-Day Hunting (Chaining Bugs/Methodology)

Oct 11, 202120 min read

Introduction to 0-Day Hunting/chaining vulnerabilities Hello everyone, I wanted to write a blog on how I go around my method of thinking for finding...

0-Day Hunting (Chaining Bugs/Methodology)

Bypassing PHP strcmp()

Sep 15, 20213 min read

Introduction to Bypassing PHP strcmp() What will be covered today? What is strcmp() Buggy Code review Bypassing strcmp() Fixing the bug(s) What is...

Bypassing PHP strcmp()