Artsploit
get shell or die trying
Monday, February 25, 2019
Exploiting Spring Boot Actuators
›
https://www.veracode.com/blog/research/exploiting-spring-boot-actuators I wrote this article while working at the Veracode Research team.
Thursday, January 3, 2019
Exploiting JNDI Injections in Java
›
https://www.veracode.com/blog/research/exploiting-jndi-injections-java I wrote this article while working at the Veracode Research team.
Friday, August 19, 2016
[demo.paypal.com] Node.js code injection (RCE)
›
When I am trying to find vulnerabilities in web applications, I always perform fuzzing of all http parameters, and sometimes it gives me som...
Monday, January 25, 2016
[manager.paypal.com] Remote Code Execution Vulnerability
›
In December 2015, I found a critical vulnerability in one of PayPal business websites ( manager.paypal.com ). It allowed me to exe...
‹
Home
View web version
