Author: Julien Ahrens


  • From Zero to Hero Part 2: From SQL Injection to RCE on Intel DCM (CVE-2022-21225)

    From Zero to Hero Part 2: From SQL Injection to RCE on Intel DCM (CVE-2022-21225)

    /

  • From Zero to Hero Part 1: Bypassing Intel DCM’s Authentication by Spoofing Kerberos and LDAP Responses (CVE-2022-33942)

    From Zero to Hero Part 1: Bypassing Intel DCM’s Authentication by Spoofing Kerberos and LDAP Responses (CVE-2022-33942)

    /

  • WordPress Transposh: Exploiting a Blind SQL Injection via XSS

    WordPress Transposh: Exploiting a Blind SQL Injection via XSS

    /

  • AWAE Course and OSWE Exam Review

    AWAE Course and OSWE Exam Review

    /

  • Smuggling an (Un)exploitable XSS

    /

  • CVE-2020-16171: Exploiting Acronis Cyber Backup for Fun and Emails

    /

  • Bug Bounty Platforms vs. GDPR: A Case Study

    /

  • H1-4420: From Quiz to Admin – Chaining Two 0-Days to Compromise An Uber WordPress

    /

  • About a Sucuri RCE…and How Not to Handle Bug Bounty Reports

    /

  • CVE-2018-7841: Schneider Electric U.Motion Builder Remote Code Execution 0-day

    /