NoSQL Vulns

 Merhabalar, bu yazımda NoSQL zafiyetlerini anlatmaya çalışacağım. NoSQL'i anlatmak istemedim çünkü biraz geniş;  mongo'sundan couch'ına bir sürü veritabanı var. Bu blog sitemde bulunan yazıların ofansif olmasını istiyorum. O yüzden NoSQL'i anlatmayacağım. Aslında NoSQL’i ve güvenlik açıklarını bir video şeklinde anlatmayı planlıyordum ama birkaç sorundan dolayı direkt olarak blog yazısı olarak paylaşmaya karar verdim umarım yararlı bir yazı olur...

Obtain Deleted Files with Meterpreter

 Hi, I will tell obtaining Deleted Files with Meterpreter. We know that most deleted file can back with digital forensics techniques. We will use them and obtain deleted files from target machine.

XSS+Open Redirect in PAYPAL

    Hi everyone, I will tell bug I found. This bug is out of scope. I think that this bug may give you idea. Then, I decided to tell.

XSS in Teknosa Write-up (less than 5 minutes)

    Hi everyone, This is a write-up. I will tell my bug reports. Therefore, I think that I should start with easy bug.

File System Access SQL Injection

Hi everyone, we will examine how to exploit an SQL injection to get  read and write access DBMS underlying file system in this article.

Advanced SQL Injection

Hi everybody! As awareness of SQL injection risks has developed, this has become gradually less common. Therefore, SQL injection that we found will be in situations where retrieving the results of our injected queries is not simple. I will write some ways in which this problem can arise and how we can deal with it.