Series
This series focuses on Web Application Security. Whether it be a basic XSS, or a complicated deserialisation vulnerability, this section will cover all web app related research!
CVE-2022-24785 Description Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a u...
Hello everyone, hope you are all well! Today we will be continuing our Python Hacking Series, this time however we will not be covering basics but actually utilising some of our knowledge to construct an exploit! What will be covered? Recon Vulnera...
Introduction to 0-Day Hunting/chaining vulnerabilities Hello everyone, I wanted to write a blog on how I go around my method of thinking for finding zero-days. I have found a few zero-days in the past. I haven't written a blog about them yet though m...
Introduction to Bypassing PHP strcmp() What will be covered today? What is strcmp() Buggy Code review Bypassing strcmp() Fixing the bug(s) What is PHP strcmp()? str = String & cmp = Compare str+cmp=strcmp() The strcmp() function compares two stri...
