Nov 3Semgrep + CSRF Detection in WordPress PlugsIntroduction Sedikit perkenalan, bulan ini, saya menemukan semgrep. Semgrep adalah alat analisis statis yang kuat. Semgrep mendukung banyak bahasa, termasuk php. Semgrep juga lebih mudah dipelajari dibandingkan dengan codeql. Anda bisa membaca perbandingan yang bagus antara keduanya di blog spaceracoon. Semgrep Introduction to Semgrep Semgrep adalah alat analisis kode statis, di mana kita dapat menulis…Bug Bounty Tips6 min readBug Bounty Tips6 min read
Nov 2Server-Side Request Forgery to Internal SMTP Access (Google scholar)Your Report Summary: Sending Emails from scholar.google.com — Server-Side Request Forgery to Internal SMTP Access Product: Google Scholar URL: scholar.google.com Details Summary Google Scholar Google Scholar provides easy access to scientific information sources such as journal articles, books, theses and technical reports from around the world. …Google Ssrf4 min readGoogle Ssrf4 min read
Sep 19Find Vulnerability With PDFIntroduction Saat melakukan penelitian tentang cara menggunakan PDF sebagai vektor serangan, saya membaca berbagai sumber yang memberi saya banyak informasi berharga, tetapi tanpa pengetahuan tentang struktur PDF akan menghadapi banyak kesulitan, saya memutuskan untuk menggali lebih dalam dan mempelajari struktur PDF. Write a PDF file Untuk menulis file PDF harus mengetahui struktur PDF, untuk itu…Vulnerability Analysis7 min readVulnerability Analysis7 min read
Sep 8Gitlab Project Import RCE AnalysisAt the beginning of this month, GitLab released a security patch for versions 14->15. Interestingly in the advisory, there was a mention of a post-auth RCE bug with CVSS 9.9. The bug exists in GitLab’s Project Imports feature, which was found by pwn0sec team Incidentally, when I rummaged in the…12 min read12 min read
Sep 2Pwn0sec research team discovers severe Improper Input Validation Prototype Pollution security vulnerabilities7.11 version. About lodash security vulnerability The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload. Following is an example of how this vulnerability will impact a JavaScript application: const mergeFn = require('lodash').defaultsDeep; const payload = '{"constructor": {"prototype": {"a0": true}}}' function check() { mergeFn({}, JSON.parse(payload))…Pwn0sec2 min readPwn0sec2 min read
Oct 15, 2022CVE-2020–13956Motivation As a security researcher, adopting a holistic approach could lead to finding unexpected vulnerabilities. You start with something but end up with something more interesting. Recently this happened to me and I wanted to share my research approach which could be easily applied elsewhere. In this case, I was chasing…Bug Bounty Tips5 min readBug Bounty Tips5 min read
