Forwarded from Web Hacking
Bug Bounty Hunting Tip :-
If you can upload .zip file on target then:
1. Create a .php file (rce.php)
2. Compress it to a .zip file (file.zip)
3. Upload your .zip file on the vulnerable web application.
4. Trigger your RCE via:
( https://<target Site>.com/index.php?page=zip://path/file.zip#rce.php )
If you can upload .zip file on target then:
1. Create a .php file (rce.php)
2. Compress it to a .zip file (file.zip)
3. Upload your .zip file on the vulnerable web application.
4. Trigger your RCE via:
( https://<target Site>.com/index.php?page=zip://path/file.zip#rce.php )
Bypassing Firefox's HTML Sanitizer API
ttps://portswigger.net/research/bypassing-firefoxs-html-sanitizer-api
ttps://portswigger.net/research/bypassing-firefoxs-html-sanitizer-api
❤1👍1
We selected 11 machines in the #PEN200 #pwk labs and provided guidance on how to compromise them: offs.ec/3OJFXDi
#oscp #offensivesecurity
#oscp #offensivesecurity
🔥1