Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Siaberry's Command Injection Vulnerability- 61

SpaceDuckPosted 6 Years Ago
  • The most obvious command injection ever seen.
  • The username and password for the login page are directly entered into a command line arguments for a binary. Yep, it's that simple.
  • The creator of the Siaberry software was not very responsive to the issue... Sometimes, people just refuse to make a legitimate fix for a vulnerability.