Record · corpus.blog/posts/01a08751-cf6a-71ce-81e1-b0a68b633239

How I Chained 4 Bugs (Features?) into RCE on Amazon Collaboration System

blog.orange.tw · published 10 August 2018

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.orange.tw Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 26
Words captured: 2,935

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.blackhat.com/us-18/briefings/schedule/speakers.html

blackhat.com

https://www.defcon.org/html/defcon-26/dc-26-speakers.html

defcon.org

http://i.blackhat.com/us-18/Wed-August-8/us-18-Orange-Tsai-Breaking-Parser-Logic-Take-Your-Path-Normalization-Off-And-Pop-0days-Out-2.pdf

i.blackhat.com

https://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf

blackhat.com

http://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilities-on.html

blog.orange.tw

https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html

0x09al.github.io

https://twitter.com/0x09AL

twitter.com

https://github.com/orangetw/My-CTF-Web-Challenges

github.com

http://ctf.360.com/2016/en/index.html

ctf.360.com

https://github.com/maurosoria/dirsearch/commit/9496597cd03d91b29bf3f2e9b0a73f8df23cb3af

github.com

https://ctftime.org/ctf-wtf/

ctftime.org

https://hackerone.com/reports/326080

hackerone.com

https://www.blogger.com/blogger.g?blogID=2987759532072489303

blogger.com

http://collaborate-corp.amazon.com/

collaborate-corp.amazon.com

https://github.com/nuxeo/nuxeo

github.com

https://www.owasp.org/index.php/Top_10-2017_A9-Using_Components_with_Known_Vulnerabilities

owasp.org

https://blog.orange.tw/2016/12/java-web.html

blog.orange.tw

https://twitter.com/meder

twitter.com

http://blog.o0o.nu/2010/07/cve-2010-1871-jboss-seam-framework.html

blog.o0o.nu

https://github.com/seam2/jboss-seam/blob/f3077fee9d04b2b3545628cd9e6b58c859feb988/jboss-seam/src/main/java/org/jboss/seam/navigation/Pages.java

github.com

https://en.wikipedia.org/wiki/Return-oriented_programming

en.wikipedia.org

https://github.com/nuxeo/nuxeo/blob/master/nuxeo-features/nuxeo-platform-ui-select2/src/main/resources/web/nuxeo.war/widgets/suggest_add_new_directory_entry_iframe.xhtml

github.com

https://github.com/seam2/jboss-seam/blob/f3077fee9d04b2b3545628cd9e6b58c859feb988/jboss-seam/src/main/resources/org/jboss/seam/blacklist.properties

github.com

https://cwiki.apache.org/confluence/display/WW/S2-020

cwiki.apache.org

https://access.redhat.com/support/policy/updates/jboss_notes/

access.redhat.com

https://github.com/nuxeo/jboss-seam/commit/f263738af8eac44cda7a41ea088c99e69a4edb48

github.com