Cybersecurity and research blog

Before jumping into this article please take a look at the following Cloudflare ruleset and think for a while what is wrong with it?

If you’re reading this blog post, it’s likely that you’re also doing bug bounty.

tl;dr This post is a summary of our security research work that started a year ago.

Overview Cisco Smart Software Manager (or SSM), is an open-sourced solution from Cisco to manage and distribute license entitlements for all Cisco products in your local network.

This is a short writeup of the lastest Yeswehack’s Dojo challenge.

XSS challenges are a great way to learn cool tricks on how to exploit client side and circumvent browser’s security measures.

Recently I decided to do a little cleanup in my computer stuff cabinet and found my old NAS (Network Attached Storage) that I’ve beed using some time ago.

TL;DR When an attacker gains access to publicly exposed and insecured OctoPrint panel he can execute commands on the host due to the way the application is designed.

While doing research on one of the open source web applications I came across a Cross-Site Scripting trick that seems dumb but is actually useful in some situations.

Recently whole cybersecurity community was shocked by a newly disclosed Microsoft Exchange pre-auth vulnerability aka Proxylogon.