corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a07df4-830c-7187-8dca-bf036a4f4484

Articles worth-reading from 2019

PentesterLab · published 2 January 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at pentesterlab.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
121
Words captured
923

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://twitter.com/pentesterlab
twitter.com
https://gitlab.com/gitlab-com/gl-security/disclosures/blob/master/003_git_submodule/advisory.md
gitlab.com
https://github.com/netanel01/ctf-writeups/blob/master/googlectf/2019/pwn_gomium/README.md
github.com
https://tagazok.virtualabs.fr/Workshop-How_to_use_btlejack.pdf
tagazok.virtualabs.fr
NOCVE - Few click RCE via GitHub Desktop macOS client with Gatekeeper bypass and custom URL handlers Read at the source ↗
theevilbit.github.io
https://medium.com/@prsecurity_/how-to-build-an-internal-red-team-7957ec644695
medium.com
https://dttw.tech/posts/SJ40_7MNS
dttw.tech
https://www.ee.oulu.fi/research/ouspg/Disclosure_tracking
ee.oulu.fi
https://docs.google.com/presentation/d/1b955DV2ii-Dgv6YR4kUrJtjGugEqXD3FffTHRfvVSYo/mobilepresent?slide=id.g4525dccad7_0_0
docs.google.com
https://www.synacktiv.com/ressources/GLPI_9.4.0_Type_juggling_auth_bypass.pdf
synacktiv.com
https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_RCE.pdf
synacktiv.com
https://medium.com/@terjanq/clobbering-the-clobbered-vol-2-fb199ad7ec41
medium.com
What I Learned from Reverse Engineering Windows Containers Read at the source ↗
unit42.paloaltonetworks.com
https://eng.getwisdom.io/hacking-github-with-unicode-dotless-i/
eng.getwisdom.io
https://www.synacktiv.com/posts/pentest/pwning-an-outdated-kibana-with-not-so-sad-vulnerabilities.html
synacktiv.com
https://offensi.com/2019/12/16/4-google-cloud-shell-bugs-explained-introduction/
offensi.com
https://hipotermia.pw/bb/http-desync-idor
hipotermia.pw
https://www.reddit.com/r/crypto/comments/e8t17w/comment/faerj2m
reddit.com
https://know.bishopfox.com/research/cve-2019-18935-remote-code-execution-in-telerik-ui
know.bishopfox.com
https://diverto.github.io/2019/11/18/Cracking-LUKS-passphrases
diverto.github.io
https://github.com/bkimminich/juice-shop/issues/1173
github.com
https://css.csail.mit.edu/6.858/2013/readings/plan9auth.pdf
css.csail.mit.edu
https://www.noob.ninja/2019/12/spilling-local-files-via-xxe-when-http.html?m=1
noob.ninja
http://blog.infosectcbr.com.au/2019/11/uclibc-unlink-heap-exploitation.html
blog.infosectcbr.com.au
https://blog.teddykatz.com/2019/11/23/json-padding-oracles.html
blog.teddykatz.com
https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
aws.amazon.com
https://know.bishopfox.com/research/reasonably-secure-electron
know.bishopfox.com
https://tpm.fail/tpmfail.pdf
tpm.fail
https://serializethoughts.com/2019/10/28/solving-mstg-crackme-angr
serializethoughts.com
https://blog.infosectcbr.com.au/2019/11/avr-libc-house-of-spirit.html
blog.infosectcbr.com.au
https://blog.teddykatz.com/2019/11/05/github-oauth-bypass.html
blog.teddykatz.com
https://nathandavison.com/blog/abusing-http-hop-by-hop-request-headers
nathandavison.com
http://re.alisa.sh/notes/iBoot-address-space.html
re.alisa.sh
https://research.securitum.com/prototype-pollution-rce-kibana-cve-2019-7609/
research.securitum.com
https://lab.wallarm.com/race-condition-in-web-applications/
lab.wallarm.com
https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/
buer.haus
https://cpdos.org
cpdos.org
https://www.shielder.it/blog/dont-open-that-xml-xxe-to-rce-in-xml-plugins-for-vs-code-eclipse-theia/
shielder.it
https://srcincite.io/assets/postscript-pat-and-his-black-and-white-hat.pdf
srcincite.io
Firefox’s New WebSocket Inspector Read at the source ↗
hacks.mozilla.org
https://blog.paloaltonetworks.com/2019/10/cloud-kubernetes-vulnerabilities/
blog.paloaltonetworks.com
https://medium.com/sensorfu/how-my-application-ran-away-and-called-home-from-redmond-de7af081100d
medium.com
https://blog.redteam.pl/2019/10/internal-domain-name-collision-dns.html?m=1
blog.redteam.pl
https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/
awakened1712.github.io
https://5alt.me/2019/10/HackMD%20Stored%20XSS%20and%20HackMD%20Desktop%20RCE/
5alt.me
https://googleprojectzero.blogspot.com/2019/09/windows-exploitation-tricks-spoofing.html?m=1
googleprojectzero.blogspot.com
https://portswigger.net/research/one-xss-cheatsheet-to-rule-them-all
portswigger.net
https://vavkamil.cz/2019/09/15/how-to-bypass-android-certificate-pinning-and-intercept-ssl-traffic/
vavkamil.cz
https://research.securitum.com/server-side-template-injection-on-the-example-of-pebble/
research.securitum.com
https://shhnjk.blogspot.com/2019/09/nonce-based-csp-service-worker-csp.html
shhnjk.blogspot.com
https://medium.com/bugbountywriteup/race-condition-that-could-result-to-rce-a-story-with-an-app-that-temporary-stored-an-uploaded-9a4065368ba3
medium.com
https://www.rcesecurity.com/2019/09/H1-4420-From-Quiz-to-Admin-Chaining-Two-0-Days-to-Compromise-an-Uber-Wordpress/
rcesecurity.com
https://blog.evilpacket.net/2019/leveraging-javascript-debuggers/
blog.evilpacket.net
https://medium.com/@cc1h2e1/write-up-of-two-http-requests-smuggling-ff211656fe7d
medium.com
https://alephsecurity.com/2019/09/02/Z3-for-webapp-security/
alephsecurity.com
https://www.synacktiv.com/posts/reverse-engineering/no-grave-but-the-sip-reversing-a-voip-phone-firmware.html
synacktiv.com
https://speakerdeck.com/filedescriptor/the-cookie-monster-in-your-browsers
speakerdeck.com
https://googleprojectzero.blogspot.com/2019/08/a-very-deep-dive-into-ios-exploit.html
googleprojectzero.blogspot.com
https://research.aurainfosec.io/same-origin-policy/
research.aurainfosec.io
https://about.gitlab.com/2019/08/14/american-fuzzy-lop-on-gitlab/
about.gitlab.com
https://soroush.secproject.com/blog/2019/08/uploading-web-config-for-fun-and-profit-2/
soroush.secproject.com
http://addxorrol.blogspot.com/2019/08/rashomon-of-disclosure.html?m=1
addxorrol.blogspot.com
https://i.blackhat.com/USA-19/Thursday/us-19-Birch-HostSplit-Exploitable-Antipatterns-In-Unicode-Normalization.pdf
i.blackhat.com
https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/
devco.re
https://github.com/trailofbits/audit-kubernetes/blob/master/reports/Kubernetes%20White%20Paper.pdf
github.com
Automation Techniques in C++ Reverse Engineering Read at the source ↗
msreverseengineering.com
https://portswigger.net/blog/http-desync-attacks-request-smuggling-reborn
portswigger.net
https://i.blackhat.com/USA-19/Wednesday/us-19-Munoz-SSO-Wars-The-Token-Menace-wp.pdf
i.blackhat.com
https://www.imperialviolet.org/2019/08/10/ctap2features.html
imperialviolet.org
https://blog.cloudflare.com/a-gentle-introduction-to-linux-kernel-fuzzing/
blog.cloudflare.com
http://blog.infosectcbr.com.au/2019/07/linux-heap-tcache-poisoning.html
blog.infosectcbr.com.au
https://www.synacktiv.com/posts/exploit/exploiting-a-no-name-freebsd-kernel-vulnerability.html
synacktiv.com
Docker for Pentesters Read at the source ↗
blog.ropnop.com
https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/
blog.trailofbits.com
https://thezerohack.com/hack-any-instagram
thezerohack.com
https://blog.assetnote.io/bug-bounty/2019/07/17/rce-on-zoom/
blog.assetnote.io
https://hackerone.com/reports/587854
hackerone.com
https://medium.com/@ruvlol/rce-in-jira-cve-2019-11581-901b845f0f
medium.com
https://medium.com/@princechaddha/account-takeover-on-airbnb-acquisition-an-unusual-bug-part-2-45fab11dc407
medium.com
http://blog.ret2.io/2019/06/26/attacking-intel-tsx/
blog.ret2.io
https://blog.ripstech.com/2019/dotcms515-sqli-to-rce/
blog.ripstech.com
https://medium.com/intigriti/how-spending-our-saturday-hacking-earned-us-20k-60990c4678d4
medium.com
https://alephsecurity.com/2019/06/17/xnu-qemu-arm64-1/
alephsecurity.com
https://cryptosense.com/blog/how-ledger-hacked-an-hsm/
cryptosense.com
https://citizenlab.ca/docs/stalkerware-holistic.pdf
citizenlab.ca
https://speakerdeck.com/andresriancho/internet-scale-analysis-of-aws-cognito-security
speakerdeck.com
https://blog.cryptographyengineering.com/2019/06/05/how-does-apple-privately-find-your-offline-devices/
blog.cryptographyengineering.com
https://blog.npmjs.org/post/185397814280/plot-to-steal-cryptocurrency-foiled-by-the-npm
blog.npmjs.org
https://code.fb.com/security/service-encryption/
code.fb.com
https://www.chromestatus.com/feature/5088147346030592
chromestatus.com
https://arxiv.org/abs/1905.13055
arxiv.org
https://github.com/veorq/cryptocoding/
github.com
https://speakerdeck.com/fransrosen/live-hacking-like-a-mvh-a-walkthrough-on-methodology-and-strategies-to-win-big
speakerdeck.com
https://guidovranken.com/2019/05/14/differential-fuzzing-of-cryptographic-libraries/
guidovranken.com
https://eprint.iacr.org/2019/459.pdf
eprint.iacr.org
https://leakfree.wordpress.com/2015/03/12/php-object-instantiation-cve-2015-1033/
leakfree.wordpress.com
https://corb3nik.github.io/blog/ins-hack-2019/bypasses-everywhere
corb3nik.github.io
https://anvilventures.com/blog/looking-inside-the-box.html
anvilventures.com
https://securityriskadvisors.com/blog/aws-iam-exploitation/
securityriskadvisors.com
https://breaking-bits.gitbook.io/breaking-bits/vulnerability-discovery/reverse-engineering/modern-approaches-toward-embedded-research
breaking-bits.gitbook.io
https://medium.com/@somdevsangwan/how-i-found-5-redos-vulnerabilities-in-mod-security-crs-ce8474877e6e
medium.com
https://blog.trendmicro.com/trendlabs-security-intelligence/uncovering-cve-2019-0232-a-remote-code-execution-vulnerability-in-apache-tomcat/
blog.trendmicro.com
https://gitlab.com/cybears/fall-of-cybeartron/
gitlab.com
https://rhinosecuritylabs.com/application-security/cve-2019-0227-expired-domain-rce-apache-axis/
rhinosecuritylabs.com
https://mahmoudsec.blogspot.com/2019/04/handlebars-template-injection-and-rce.html
mahmoudsec.blogspot.com
https://medium.com/starting-up-security/starting-up-security-policy-104261d5438a
medium.com
https://blog.filippo.io/a-literate-go-implementation-of-poly1305/
blog.filippo.io
https://medium.com/@terjanq/how-i-am-able-to-hijack-you-1cab793a01d1
medium.com
https://ioactive.com/multiple-vulnerabilities-in-androids-download-provider-cve-2018-9468-cve-2018-9493-cve-2018-9546/
ioactive.com
Subverting Electron Apps via Insecure Preload Read at the source ↗
blog.doyensec.com
https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/
twistlock.com
https://mogwailabs.de/blog/2019/03/attacking-java-rmi-services-after-jep-290/
mogwailabs.de
https://chybeta.github.io/2019/03/16/Analysis-for【CVE-2019-5418】File-Content-Disclosure-on-Rails/
chybeta.github.io
https://blog.assetnote.io/bug-bounty/2019/03/19/rce-on-mozilla-zero-day-webpagetest/
blog.assetnote.io
https://medium.com/greenwolf-security/authenticated-arbitrary-command-execution-on-postgresql-9-3-latest-cd18945914d5
medium.com
https://tosc.iacr.org/index.php/ToSC/article/view/892/843
tosc.iacr.org
https://medium.com/@sharan.panegav/account-takeover-using-cross-site-websocket-hijacking-cswh-99cf9cea6c50
medium.com
https://blog.tint0.com/2019/03/a-saga-of-code-executions-on-zimbra.html?m=1
blog.tint0.com
https://medium.com/@DanielC7/remote-code-execution-gaining-domain-admin-privileges-due-to-a-typo-dbf8773df767
medium.com
https://www.vulnano.com/2019/03/facebook-messenger-server-random-memory.html
vulnano.com
https://mobile.twitter.com/rootxharsh/status/1104068814810087424
mobile.twitter.com