Kayıtlar

Schneider Electric - Security Notification Security Notification -Embedded Web Servers for Modicon (V3.0) - [CVE-2018-7804]

Schneider Electric Security Notification Security Notification -Embedded Web Servers for Modicon (V3.0) CVE : CVE-2018-7804 CVSS v3.0 Base Score 4.7 | (Medium) | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L A CWE-601: URL Redirection to Untrusted Site vulnerability exists, where a user clicking on a specially crafted link can be redirected to a URL of the attacker’s choosing. Security Researcher : Ismail Tasdelen

UnrealIRCD 3.2.8.1 backdoored - CVE 2010-2075 - Metasploitable #2

Resim

Reverse Shell Gaining Access - Server Hacking - Metasploitable #1

Resim

Acunetix Vulnweb - HTTP Parameter Pollution Vulnerability

Resim

OverTheWire CTF - Natas - Levels 0

Resim

Wordpress Security with Wordfence

Resim
  I use wordpress like every blog user. But sometimes it can be a nuisance to deal with wordpress. You may increase your chances of eating shell because of a vulnerability found on the linux server. There are many people who want to pierce the software used by many people in the world like wordpress. But for this kind of problems, a very nice plug-in of Wordpress is available. Wordfence Security plug-in infected files, spyware, viruses, such as malicious code finds and tells us. In fact, I think it provides Enterprise-class security. Fireworks, virtus browsing, real-time traffic and more. Wordfence Security Plugin page here.

What is WebRTC?

Resim
Real-Time Communications. It is an open source project for audio, video and data transfer using javascript api. Nowadays, it is popular because it has full support from browsers and it is easy to develop. Powered by W3C and IETF. Today it comes embedded in browsers. In summary, it has increased in popularity as no installation is needed, it can be developed and open source, and it is supported by communities. Demo: https://www.appr.tc/ For updates: https://webrtcweekly.com/ For detailed information: https://webrtc.org/ WebRTC Leak First, webrtc protocols to understand the weakness. Session Traversal Utilities for NAT (STUN) Since WebRTC exchanges data through peers, stun servers are used to provide this exchange. While providing a connection, the information sent includes our lan and wan information. Weakness in logic in the functioning of the protocol is revealed. Our ip information is not hidden, ie pure data flow between the server and the spouse is provide...