Blog
Technical articles, security notes, and research. Earlier articles remain available with their original publication dates and technical context.
-
FreePBX 17: From SQL Injection to Remote Code Execution
advisories / static analysisThere is no excerpt because this is a protected post.
-
Ten Years Later, A2Billing Still Had a Few Surprises
advisories / static analysisI returned to A2Billing a decade after writing about it and found pre-auth SQL injection and an authenticated code-execution chain. Here is how the research unfolded.
-
Elastix voip distro all versions < 3 , Remote command execution exploit
advisories / static analysisUnpatched , undisclosed yet
-
Boonex dolphin <= 7.3.2 , Auth bypass / RCE exploit
advisories / static analysisIntro From vendor website Open-source software for creating custom social networks and web communities DolphinPro includes the site platform with thousands of features; iOS and Android apps; WebRTC…
-
CS-Cart <= 4.3.10 , XXE/LFD
advisories / static analysisIntro CS-Cart is an impressive platform for users to any level of eCommerce experience.With loads of features at a great price CS-Cart is a great shopping cart solution…
-
Real world pentesting scenario I [Arabic]
pentest / مقالات بالعربيهالسلام عليكم أثناء تجولى بالشبكة رأيت العديد من المقالات التى تعتمد فى تطبيقها على البيئات الوهمية وترسخ فى ذهن قارئها أنه من الصعب جدا مواجهة مثلها أثناء عملية…
-
4images <= 1.7.13 Sql injection / Administrator add exploit
advisories / static analysisIntro From vendor website 4images is a powerful web-based image gallery management system. Features include comment system, user registration and management, password protected administration area with browser-based upload…
-
A2billing <=2.1 RCE Exploit writeup
advisories / static analysisIntro Wont waste a lot of time and DB space here , brief a2b intro + hardening can be found in the previous blog post In the previous…
-
A2billing <= 2.1.1 0day SQL injection exploit writeup
advisories / static analysisIntro A2B , Asterisk2billing , a2billing . . etc , the official website describe it as a free and open source software for Asterisk, providing telecoms customer management…
-
Freepbx remote root exploit writeup
advisories / static analysisIntro I already released fully working exploit + brief writeup at Exploit-DB If you need more details then proceed with this post Freepbx is famous voip distro based…