Meta's SparkAR RCE Via ZIP Path Traversal
Hi Everyone, As promised this is the write-up for the Spark AR
![[CVE-2021-28379] Abusing file uploads to get an SSH backdoor](/content/images/size/w960/2021/03/ssh_rce-1.png)
[CVE-2021-28379] Abusing file uploads to get an SSH backdoor
Note: To fully understand the exploit you will need to fully understand
Solving BugPoC XSS Challenge
Hi,
This is my write up for BugPoc XSS challenge, I will
Getting Started with Frida : Hooking a Function and Replacing its Arguments
Getting started with frida.
Go Local : Solving intigriti 3rd XSS Challenge
Few hours ago intigirit posted their third XSS challenge, the solution of
An Hour with Ghidra : The Good and The Ugly
So, the NSA decided to release their reverse engineering tool named Ghidra,
UPNP Attacks : Hello Old Friend
Update : I don't have a complete evidence that the attacks were UPNP
AFL / WinAFL Tips and Tricks
Hi there
As you all know there are so many tutorials online
How I Discovered XSS that Affects around 20 Uber Subdomains
Hi again,
Welcome my first bug bounty write up, I don't do