Skip to main content

Paff-ShellBlog About me

Recent posts

Book - The path of exploit development
Malware hunting with REMnux
Hardware hacking - UART
THM - Umbrella
HTB - Bizness
HTB - Sau
HTB - Pilgrimage
HTB - Analytics
THM - Compiled
HTB - TrueSecrets
HTB - Keeper
DREAD - Risk Assessment Model
THM - Expose
EDB - Savsoft Quiz 5 - 'User Account Settings' Persistent Cross-Site Scripting
My Thoughts to MyHush and my experiences
EDB - YATinyWinFTP - Denial of Service (PoC)
THM - rootme
Windows PE32 bypass DEP via ROP
My thoughts to Windows code leak
Which OS should i use for Hacking?
Windows PE32 Bufferoverflow exploitation with Ghidra & Immunity Debugger
Escalate privileges via Environment-variables
ASLR-Bruteforce on ret2libc
Top 5 Hashcracker-Services for CTF’s
A closer look to a miscellaneous PHP-Code
Some oneliners for Reverse-Shells or Bind-Shells
VH - Mordor CTF my first CTF-Machine
How to implement the Newton-Method
How to implement Sine and Cosine
How to write a simple ROP-Chain
Sudo bug – CVE-2019-14287
How to write a ret2libc Exploit
EDB - InoERP 0.7.2 - Persistent Cross-Site Scripting
EDB - WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting
Turn your keyboard into a trackpad
How to write a metasploit module
ASM x86 – Interrupts
ASM x86 – Functions and Calls
ASM x86 – Stack operations
ASM x86 – Loops & Delays
ASM x86 – Jumps & Conditions
Harvard vs. Neumann – Whats the difference?
ASM x86 – Arithmetic Commands
ASM x86 Introduction
VH - Silky CTF 0x02
VH - Silky CTF
VH - Necromancer
Cisco – Another useful tricks & tips
Cisco – Useful tricks
PicoCTF - Desrouleaux Writeup
Understanding numbers of informatics
Small intro in flask
Playing around with format string vulnerability
Subnetting – In a Nutshell
How CountingSort works
Binary Search Tree – Part 5 B-Tree
Record terminalsession with asciinema
Binary Search Tree – Part 4 Red-Black-Tree
Trie – Prefix Tree
Binary Search Trees – Part 3 AVL-Tree
Binary Search Tree – Part 2 Rotations
Expression Trees – Infix to Postfix
Linux – Passwd and shadow file explained
Binary Search Tree
VH - Mr Robot
OOP - Build a Filesystem with the „Composite Pattern“
What are Graphs? – Part 7 Dijkstra
U = R * I – A little Intro
What are Graphs? – Part 5 Prim
What are Graphs? - Part 6 Kruskal
OOP - Observer-Pattern
What are Graphs? – Part 3 DFS
What are Graphs? – Part 4 BFS
What are Graphs? – Part 2
How HeapSort works
How ShellSort works
OOP - Decorator-Pattern
What are Graphs?
How BubbleSort works
How SelectionSort works
Why InsertionSort = SelectionSort?
How Circular Buffers works
How InsertionSort works
How Stacks works
Cut someone’s network connection with arpspoofing
Introduction in Prolog – Part 1
Predicate logic 1st level
Big O Notation, how fast is your code?
How Linked Lists work
How Hashing works
What is Rowhammer?
Init.d root reverse Shell
Extract EXIF-Data from Images
How QuickSort works
OOP Strategy-Pattern usefull for IT-Sec?
How MergeSort works
QuickTip - Run a HTTPServer on Specific location with python
NetCat - Portscanning TCP/UDP
NetCat - Simple Bind-TCP Shell and Reverse-TCP Shell
Big Endian vs Little Endian
How to write a simple Bufferoverflow Exploit.
EDB - MiniFtp - 'parseconf_load_setting' Buffer Overflow
EDB - Linux/x86 - Shred File (test.txt) Shellcode (72 bytes)
EDB - Linux/x86 - OpenSSL Encrypt (aes256cbc) Files (test.txt) Shellcode (185 bytes)
EDB - Linux/x86 - cat .bash_history + base64 Encode + cURL (http://localhost:8080) Shellcode (125 bytes)
EDB - Linux/x86 - Add User (sshd/root) To /etc/passwd Shellcode (149 bytes)
EDB - Linux/x86 - execve(/bin/sh -c) + wget (http://127.0.0.1:8080/evilfile) + chmod 777 + Execute Shellcode (119 bytes)
EDB - Linux/x86 - Kill All Processes Shellcode (14 bytes)
EDB - MariaDB Client 10.1.26 - Denial of Service (PoC)

One post tagged with "wordpress"

EDB - WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting

September 25, 2019 · 2 min read

author

Tags:

exploit-db
wordpress
webapps
xss

Infos

Imprint
Privacy

Social

Stack Overflow
Github
Mastodon

CTFs

Tryhackme
Hackthebox

Copyright © 2019 by strider.