Record · corpus.blog/posts/01a08793-d899-712e-aa9b-a2e49072bba6

Zip Slip meets Artifactory: A Bug Bounty Story

karmainsecurity.com · published 23 June 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at karmainsecurity.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 25
Words captured: 3,702

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://jfrog.com/artifactory/

jfrog.com

https://en.wikipedia.org/wiki/DevOps

en.wikipedia.org

https://hackmeeting.org/hackit24/

hackmeeting.org

https://docs.google.com/presentation/d/11_M7gXBnYJUUeh_9JO0nmyhzwuvlddMsJzfmKtFUyog

docs.google.com

https://en.wikipedia.org/wiki/Directory_traversal_attack

en.wikipedia.org

https://portswigger.net/web-security/information-disclosure

portswigger.net

https://en.wikipedia.org/wiki/Arbitrary_code_execution

en.wikipedia.org

https://en.wikipedia.org/wiki/Jakarta_Server_Pages

en.wikipedia.org

http://www.phrack.org/issues/34/5.html

phrack.org

https://en.wikipedia.org/wiki/Bulletin_board_system

en.wikipedia.org

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0931

cve.mitre.org

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0932

cve.mitre.org

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=traversal+zip

cve.mitre.org

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=traversal+tar

cve.mitre.org

https://web.archive.org/web/20091010103946/https://labs.neohapsis.com/2009/04/21/directory-traversal-in-archives/

web.archive.org

https://security.snyk.io/research/zip-slip-vulnerability

security.snyk.io

https://www.hackerone.com/

hackerone.com

https://jfrog.com/help/r/jfrog-artifactory-documentation/automatically-rewrite-external-dependencies

jfrog.com

https://bower.io/

bower.io

https://en.wikipedia.org/wiki/WAR_(file_format

en.wikipedia.org

https://github.com/gquere/CVE-2020-7931?tab=readme-ov-file

github.com

https://owasp.org/www-community/attacks/Server_Side_Request_Forgery

owasp.org

https://karmainsecurity.com/pocs/artifactory_rce.zip

karmainsecurity.com

https://jfrog.com

jfrog.com

https://hackmeeting.org

hackmeeting.org