-----------Product description The CyberArk Enterprise Password Vault is a privileged access security solution to store, monitor and rotate credentials. The main objective of the solution is protec...

In this case we are going to work with a subdomain takeover in Zendesk as it’s a very common vulnerability in Bug Bounties and it could seem less dangerous compared to services likes S3, Heroku, et...

CouchDB is a NoSQL database which uses JSON to store the data, and JavaScript as a query language. We can identify it easily by its ports 5984/6984. Metasploit has already two modules related to ...

The main objective is to remove the persistence of an attack creating a new process. We could do it executing directly a bash command concatenating all in just one line, in order to execute it befo...

In order to have listeners always ready on the C&C and have access easily through SSH we will use Tmux. Tmux is a powerful alternative to the Screen command, included in multiple Linux distribu...

As it’s possible to configure the USB port of the Raspberry Pi Zero as an Ethernet (also  HID, hard drive) device, we will try to imitate the USB Armory attacks in a cheaper open-source hardware. ...

Here we catch the password before the test function takes it as a parameter. The parameters are stored in the stack before of the execution of the function. In this case two parameters are sent in ...

That one is quite similar to the crackme0x01, the password is stored in the stack.

Here I check the password in the source code. It’s also possible to view how it’s the requested (password) string stored in memory.

I have been modifying the firefox_xpi_bootstrapped_addon exploit of Metasploit to add some new skills that were necessary to make it more real (for SE) and successful. From the beginning: Firefox ...