wtfse

5 ms·

1.
by wtfse 9mo ago
That being said, having the ability to send HTTP requests to the internal servers is usually not critical vulnerability. Therefore having Clickhouse low-severity escaping vulnerability actually lead the whole chain to reach code execution.
2.
by wtfse 9mo ago
I'm glad you liked it mate.
3.
by wtfse 9mo ago
hey this is the author. Thanks for everyones comment here guys. There as a actually a vulnerability Clickhouse, which helps you to execute any query on the remote postgresl. By default, you can't execute any random query! This bug was
4.
by wtfse 9mo ago
All of these vulnerabilities accepted by ZDI.Feel free to search the following codes. ZDI-CAN-25351. ZDI-CAN-25352. ZDI-CAN-25350. ZDI-CAN-25358.
5.
by wtfse 9mo ago
hi, this is the author of the article. Thanks for the feedback mate. fixed it.
6.
From Weak Password to RCE on Symantec Messaging Gateway(pentest.blog)
1 points by wtfse 9y ago|0 comments
7.
Art of Anti Detection 3 – Shellcode Alchemy(pentest.blog)
3 points by wtfse 10y ago|1 comments
8.
Unexpected Journey #2 – Taking Down Entire Domain Because of SIEM Product(pentest.blog)
2 points by wtfse 10y ago|0 comments
9.
Unexpected Journey into the AlienVault OSSIM/USM During Pentest(pentest.blog)
2 points by wtfse 10y ago|0 comments
10.
Windows Privilege Escalation Methods for Pentesters(pentest.blog)
3 points by wtfse 10y ago|0 comments
11.
Art of Anti Detection 2 – PE Backdoor Manufacturing(pentest.blog)
2 points by wtfse 10y ago|0 comments
12.
Data Exfiltration (Tunneling) Attacks Against Corporate Network(pentest.blog)
2 points by wtfse 10y ago|0 comments